Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31323a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a31323a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          ACLCGtAx11/F5gqTtkuiEtIjS788I3EIv11LQwaFGNo=
Subject key identifier:   82:E6:41:39:67:99:42:52:B1:7D:33:5F:D0:A8:F9:AF:93:3F:1A:79
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       13AF32A7F4184C1213358D1E5EF29CD04D485223
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31323a3a2f34382d313238203d3e203532353830.roa
Signing time:             Wed 01 Apr 2026 19:28:29 +0000
ROA not before:           Wed 01 Apr 2026 19:23:29 +0000
ROA not after:            Wed 31 Mar 2027 19:28:29 +0000
asID:                     52580
IP address blocks:        2804:cf8:12::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 00:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:af:32:a7:f4:18:4c:12:13:35:8d:1e:5e:f2:9c:d0:4d:48:52:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr  1 19:23:29 2026 GMT
            Not After : Mar 31 19:28:29 2027 GMT
        Subject: CN=82E6413967994252B17D335FD0A8F9AF933F1A79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ec:c6:57:2b:5e:42:0d:ed:62:e1:9b:76:39:
                    d2:f7:a6:80:e4:e6:37:34:50:96:dc:8a:bb:cf:b4:
                    78:eb:52:7b:eb:b3:40:63:86:63:38:0f:f3:c6:3e:
                    3e:ef:54:d1:2d:f2:4a:81:20:6d:74:83:fe:12:fc:
                    7c:9b:53:73:3f:b4:e1:da:7b:bf:13:1e:41:be:17:
                    79:9c:c7:54:99:31:57:32:de:31:ad:0d:9f:4f:49:
                    d9:b8:a9:7e:6d:fa:3b:6f:bc:31:33:c8:23:75:62:
                    e3:63:ff:af:9a:05:ad:48:ed:0f:3f:de:a7:78:d1:
                    20:6e:73:2d:5f:72:3c:98:42:9b:1b:0d:c3:9b:02:
                    77:72:c0:fb:52:8e:56:b3:a4:30:77:27:2f:e9:fb:
                    1f:0f:cc:aa:63:f9:34:0b:56:df:cb:6b:04:34:2a:
                    9a:7e:e4:bf:09:dc:2e:5d:b8:c8:2c:71:5e:e6:90:
                    e5:77:58:8d:79:e8:40:44:91:e8:74:54:c6:11:46:
                    26:1f:7a:ce:49:e9:4c:22:06:d5:46:99:fe:ca:69:
                    f6:ac:24:07:12:c6:35:e5:7f:ae:b9:c4:88:08:2b:
                    eb:5f:e3:bf:1c:2b:93:4d:98:4a:b6:fe:42:3d:f1:
                    5f:22:09:c4:ca:66:3d:2d:ed:a6:a6:f0:2b:9b:99:
                    9a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E6:41:39:67:99:42:52:B1:7D:33:5F:D0:A8:F9:AF:93:3F:1A:79
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31323a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:79:40:3c:ea:15:ab:c7:a1:05:f2:a2:53:a0:2a:a5:3a:60:
         85:47:d0:07:78:4f:c1:d6:b6:21:a6:82:a1:58:7a:23:30:bc:
         72:eb:88:89:48:48:5c:cc:8b:dc:4b:24:e8:b7:52:2e:eb:29:
         0c:5d:48:a7:f5:3b:2f:24:1e:a4:53:cc:34:f8:96:dc:4e:f9:
         a2:df:9b:1b:ac:20:4d:22:67:0f:20:6c:81:b4:5e:84:80:f4:
         e2:b2:e2:2e:c0:af:40:5c:2b:ed:a2:75:93:ef:29:7d:3b:1a:
         e2:e9:99:b9:dc:28:7b:88:35:2c:7b:61:2d:68:f2:dd:2f:a3:
         42:72:13:ca:24:d5:ab:90:70:3c:ef:24:e4:01:fc:78:6a:98:
         7c:97:5a:8b:7e:79:fb:ce:84:bf:9e:7f:70:ff:26:b8:b4:29:
         38:8f:6f:71:10:4c:ca:b3:33:89:ef:30:96:da:2d:46:3a:7d:
         15:65:2e:a2:2f:df:d2:21:9d:e1:12:b0:9d:6f:51:98:d2:de:
         b6:05:52:8c:4c:2e:ca:a5:a1:74:36:24:9a:90:6a:1c:98:ef:
         12:5b:d7:f7:7c:5a:1d:17:19:cd:1d:7a:3e:36:83:d2:1e:21:
         8a:47:d2:29:77:71:3b:32:ba:23:6c:65:39:e1:f1:27:6b:22:
         8f:2a:bd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:52:32 2026 by rpki-client