Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/323830343a366463303a3a2f33322d313238203d3e20323730353533.roa
File:                     323830343a366463303a3a2f33322d313238203d3e20323730353533.roa (raw, json)
Hash identifier:          Np4Ys31HTvAPpSdXU5pC8E3S2pq1Cx0KoeKyl7C3XWE=
Subject key identifier:   43:20:8E:31:DF:24:18:3C:CC:DA:5C:39:BB:19:7E:27:3C:B5:E9:34
Certificate issuer:       /CN=54DA87513A24FE3A89FA9269EDA48D5F9781AE06
Certificate serial:       453EBC2B1E3AC32BC69A777CBEB0728D573EB12C
Authority key identifier: 54:DA:87:51:3A:24:FE:3A:89:FA:92:69:ED:A4:8D:5F:97:81:AE:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54DA87513A24FE3A89FA9269EDA48D5F9781AE06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/323830343a366463303a3a2f33322d313238203d3e20323730353533.roa
Signing time:             Fri 27 Mar 2026 13:18:52 +0000
ROA not before:           Fri 27 Mar 2026 13:13:52 +0000
ROA not after:            Fri 26 Mar 2027 13:18:52 +0000
asID:                     270553
IP address blocks:        2804:6dc0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/54DA87513A24FE3A89FA9269EDA48D5F9781AE06.crl
                          rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/54DA87513A24FE3A89FA9269EDA48D5F9781AE06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54DA87513A24FE3A89FA9269EDA48D5F9781AE06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 15:45:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:3e:bc:2b:1e:3a:c3:2b:c6:9a:77:7c:be:b0:72:8d:57:3e:b1:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54DA87513A24FE3A89FA9269EDA48D5F9781AE06
        Validity
            Not Before: Mar 27 13:13:52 2026 GMT
            Not After : Mar 26 13:18:52 2027 GMT
        Subject: CN=43208E31DF24183CCCDA5C39BB197E273CB5E934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0a:c9:ad:5b:93:ec:24:bd:63:32:d8:c8:47:
                    e0:db:d1:c4:ef:1c:12:04:54:c8:2f:92:e4:1d:3f:
                    ee:61:8a:01:28:ee:02:0f:ec:78:27:e3:1c:00:bd:
                    08:de:17:8b:47:69:e6:72:2a:e9:cd:65:ae:6e:08:
                    28:6f:72:5f:9b:6e:ab:33:1f:30:89:c4:31:8a:03:
                    92:9b:cc:38:5b:36:2a:51:e9:18:ed:41:45:5e:da:
                    0c:42:79:35:b8:4d:56:a9:91:e2:0e:20:fd:e0:9d:
                    8c:33:05:4b:a2:1c:be:89:73:9e:5b:3f:62:50:1b:
                    54:02:eb:e6:da:09:01:36:99:1e:ad:72:18:ea:d6:
                    44:be:88:b0:05:33:fc:46:08:dc:b9:63:bb:cb:49:
                    9a:dd:36:b9:fb:65:71:3f:08:af:f6:fc:cc:89:10:
                    bb:cd:a0:47:5c:4f:e1:cf:e7:19:6a:07:e5:96:d3:
                    85:17:49:c3:60:07:bc:a0:0d:5e:fe:7e:d3:45:13:
                    b9:8f:d0:a4:80:8e:18:4b:4a:9d:ca:76:a3:7c:df:
                    71:6f:ee:f2:4b:44:12:b1:c4:75:3a:ed:74:2c:bf:
                    14:bc:ec:e9:d6:e8:7d:e7:b2:c2:31:24:6c:c7:16:
                    63:bc:32:ee:65:13:a3:8e:39:27:48:44:8b:d7:09:
                    41:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:20:8E:31:DF:24:18:3C:CC:DA:5C:39:BB:19:7E:27:3C:B5:E9:34
            X509v3 Authority Key Identifier:
                keyid:54:DA:87:51:3A:24:FE:3A:89:FA:92:69:ED:A4:8D:5F:97:81:AE:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/54DA87513A24FE3A89FA9269EDA48D5F9781AE06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54DA87513A24FE3A89FA9269EDA48D5F9781AE06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/323830343a366463303a3a2f33322d313238203d3e20323730353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:30:83:6a:60:1b:1f:ff:87:12:f0:3c:d5:14:96:ff:73:cd:
         ed:c6:3c:e8:df:d9:78:e3:d9:a4:76:8d:0d:61:1e:96:12:f5:
         ec:3f:cc:df:60:1d:02:94:6a:ea:3e:46:41:2a:c2:93:e4:37:
         de:f5:35:23:33:2e:11:a0:07:8f:68:fa:5f:d2:e8:61:b7:9b:
         47:1b:7d:10:61:43:1b:b2:5e:37:b6:40:15:57:0b:b0:f3:d7:
         2a:ef:b3:5f:cf:48:3e:a6:e3:9e:86:fb:2d:5f:02:fa:6f:7e:
         7d:63:9e:c4:66:6e:97:67:1b:7f:08:92:36:87:0c:07:01:6d:
         cd:9b:3c:e3:c3:f4:f6:49:a0:f9:b1:1e:01:7b:26:e9:30:89:
         e7:62:24:9f:b4:18:66:36:f1:f7:06:80:cf:91:b8:38:d2:04:
         dd:d7:b8:ca:18:45:45:d9:7d:a4:04:80:5f:b2:9a:05:45:df:
         c9:b6:c6:d1:1a:c2:8a:ec:f1:c1:e7:0d:af:8c:8e:a9:18:99:
         ee:87:6b:59:c7:76:6f:64:be:b6:0d:2e:06:5b:c9:79:58:7c:
         fa:83:12:70:0a:f2:57:df:e3:4e:20:72:75:b9:91:85:50:da:
         a8:e7:6f:33:ee:38:38:05:1d:6d:f2:ad:70:45:87:bd:c8:37:
         52:e0:c9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 15:46:48 2026 by rpki-client