Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/323830343a373266633a383030303a3a2f33332d3438203d3e20323730383838.roa
File:                     323830343a373266633a383030303a3a2f33332d3438203d3e20323730383838.roa (raw, json)
Hash identifier:          Q7dk039NhQaH3r92k5x9XvPvWrBiic04N59LhB21U7w=
Subject key identifier:   F2:3B:FF:DC:F7:8B:89:A9:DA:B4:43:19:B0:88:80:07:BE:C2:EE:33
Certificate issuer:       /CN=2CE7EAA613A389D3132F70754E25E343490494C5
Certificate serial:       0DC921D796F94AEBDD62A23294BFAE5DFC40DB4D
Authority key identifier: 2C:E7:EA:A6:13:A3:89:D3:13:2F:70:75:4E:25:E3:43:49:04:94:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CE7EAA613A389D3132F70754E25E343490494C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/323830343a373266633a383030303a3a2f33332d3438203d3e20323730383838.roa
Signing time:             Wed 08 Apr 2026 17:50:23 +0000
ROA not before:           Wed 08 Apr 2026 17:45:23 +0000
ROA not after:            Wed 07 Apr 2027 17:50:23 +0000
asID:                     270888
IP address blocks:        2804:72fc:8000::/33 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/2CE7EAA613A389D3132F70754E25E343490494C5.crl
                          rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/2CE7EAA613A389D3132F70754E25E343490494C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CE7EAA613A389D3132F70754E25E343490494C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 18:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c9:21:d7:96:f9:4a:eb:dd:62:a2:32:94:bf:ae:5d:fc:40:db:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CE7EAA613A389D3132F70754E25E343490494C5
        Validity
            Not Before: Apr  8 17:45:23 2026 GMT
            Not After : Apr  7 17:50:23 2027 GMT
        Subject: CN=F23BFFDCF78B89A9DAB44319B0888007BEC2EE33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ca:78:cf:66:ab:0a:5a:25:52:5a:16:7e:ac:
                    00:3e:7f:9a:bc:af:c9:52:b5:9b:b3:f7:99:d9:74:
                    b7:d9:fa:2a:fa:dc:2d:1c:5b:b4:9c:9c:f8:bc:10:
                    e5:ce:96:00:42:37:4c:ea:bf:fc:98:0e:f1:3e:55:
                    a7:23:00:bb:3d:25:2c:13:63:39:1c:5c:4f:58:c9:
                    b8:a5:f7:e8:fc:79:32:21:af:93:e3:9f:f0:f9:e6:
                    1b:51:69:ad:5a:a1:6f:9c:fa:7b:c3:db:96:be:66:
                    f8:41:7d:bc:66:90:8a:12:e7:90:56:d7:08:73:3e:
                    85:59:d8:05:35:5e:86:62:44:e6:01:79:2d:6c:f7:
                    76:21:34:91:09:6f:17:5e:ac:1e:c6:58:33:5e:bc:
                    b6:fb:90:7a:e3:36:12:6c:a7:21:e3:28:fa:67:92:
                    c1:8c:94:ab:c7:4d:c6:fb:9e:6b:d9:08:e3:3e:96:
                    06:b8:13:cf:c3:34:50:7a:c7:99:28:0a:12:f5:1c:
                    a0:60:1c:93:31:6e:5d:7c:2d:af:29:c9:b6:b3:ca:
                    58:f4:4b:f2:96:f1:a7:60:68:91:af:44:b2:be:7f:
                    fc:9c:41:aa:b0:d3:b2:fa:43:98:0c:a8:13:13:93:
                    5e:4e:4a:ab:5a:3f:3b:de:2f:e9:66:c8:d5:cf:e8:
                    fe:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:3B:FF:DC:F7:8B:89:A9:DA:B4:43:19:B0:88:80:07:BE:C2:EE:33
            X509v3 Authority Key Identifier:
                keyid:2C:E7:EA:A6:13:A3:89:D3:13:2F:70:75:4E:25:E3:43:49:04:94:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/2CE7EAA613A389D3132F70754E25E343490494C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CE7EAA613A389D3132F70754E25E343490494C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/323830343a373266633a383030303a3a2f33332d3438203d3e20323730383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72fc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         7d:45:52:b1:20:46:c2:13:53:7d:0c:dd:3e:cc:10:f6:72:b6:
         02:c5:b0:bc:73:30:3c:3b:ed:b8:7f:b7:4d:92:00:ee:a9:d5:
         39:13:7d:59:46:10:15:4e:25:f8:a0:06:cd:e1:c8:02:1b:7c:
         e4:4a:0f:e1:55:83:1f:eb:77:1d:d6:a2:ff:fb:cc:33:de:56:
         a7:d4:b2:ac:ba:28:3a:41:bc:db:c3:9b:c5:3b:be:33:d7:14:
         e3:89:bd:8b:57:8a:18:b7:72:ca:6e:90:7c:30:b5:90:2e:30:
         aa:53:5c:eb:13:a2:73:0f:71:08:13:52:da:73:4a:22:ab:ec:
         d7:24:a3:81:39:cb:f4:d0:d0:d4:53:7d:0d:23:a2:4b:f8:84:
         d0:be:68:23:1c:b4:d3:75:0d:bc:61:e6:b4:76:53:f8:e6:b8:
         c9:ce:35:5c:0f:db:5f:2e:88:e2:4b:9c:3d:c3:f5:6d:e9:89:
         5f:f2:0b:88:6e:16:0d:af:0b:ea:61:6d:11:77:c8:6f:92:48:
         f9:2d:8e:cb:5c:d9:51:16:0f:ef:db:42:8c:b0:f4:68:2d:02:
         2d:9b:40:48:29:72:3e:6f:a8:cb:b2:a7:63:90:e7:2f:4a:40:
         bb:58:bd:72:e9:60:43:04:e0:86:01:be:4d:b1:62:78:49:a6:
         fd:11:4a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 20:46:09 2026 by rpki-client