Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31333a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a31333a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          7PKM6Wm8EFGgGqf9VBEUrXQENk6I8MDp4uos6H7mB6Y=
Subject key identifier:   40:B4:8D:39:40:6A:D8:0A:01:20:7B:92:36:42:5A:F0:94:E9:A3:D5
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       7C72C736AEC2BD08C939E21E59405DAF7B7FED0E
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31333a3a2f34382d313238203d3e203532353830.roa
Signing time:             Wed 01 Apr 2026 19:28:15 +0000
ROA not before:           Wed 01 Apr 2026 19:23:15 +0000
ROA not after:            Wed 31 Mar 2027 19:28:15 +0000
asID:                     52580
IP address blocks:        2804:cf8:13::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 00:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:72:c7:36:ae:c2:bd:08:c9:39:e2:1e:59:40:5d:af:7b:7f:ed:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr  1 19:23:15 2026 GMT
            Not After : Mar 31 19:28:15 2027 GMT
        Subject: CN=40B48D39406AD80A01207B9236425AF094E9A3D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f8:fd:81:3e:d2:b3:68:cd:e5:66:67:4d:4f:
                    9d:69:42:40:1a:34:a1:2d:e4:fe:5b:9f:8b:c8:b9:
                    8e:1d:4a:e7:1f:60:2e:df:36:7d:6a:05:cc:61:ce:
                    c3:6c:23:5a:32:b0:fe:41:52:c5:75:1a:a4:1c:a0:
                    6e:76:18:e8:47:84:a6:61:1b:b5:50:8b:cf:93:96:
                    da:5a:98:4d:fc:86:44:92:5a:f9:ac:44:65:5b:21:
                    82:2b:da:36:36:03:a4:55:ef:10:86:9c:6a:53:63:
                    8f:0a:95:19:91:33:cb:e1:45:b8:99:53:f8:d3:33:
                    a7:8e:f0:6e:52:cc:77:be:36:ee:9b:78:00:bd:f2:
                    9c:17:43:cd:e3:b1:a3:ad:f2:55:25:72:ef:4d:a4:
                    ea:74:86:aa:31:fd:7e:2d:cd:93:cf:c2:e5:24:7f:
                    fe:c1:77:df:b7:02:e6:14:02:af:d6:72:ab:d7:a8:
                    12:9a:45:e8:3d:a6:d7:99:18:ff:bb:97:94:f0:62:
                    54:da:1c:ff:8c:9a:7d:f3:02:43:bd:57:f9:d6:3f:
                    a0:2c:92:dd:3d:29:29:a7:6b:8a:f2:65:ae:ba:5b:
                    69:59:b8:00:77:d5:fe:37:be:d4:37:da:f0:54:36:
                    17:e4:f8:22:6a:1c:da:78:00:39:36:22:89:fb:c9:
                    be:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B4:8D:39:40:6A:D8:0A:01:20:7B:92:36:42:5A:F0:94:E9:A3:D5
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31333a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:13::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:f9:14:cd:8d:6f:ec:77:a6:ee:62:e2:3a:2a:6a:22:b7:ac:
         f9:33:89:70:02:0e:36:97:d8:fb:a5:b5:54:66:8e:9b:48:b4:
         9a:13:86:e6:c6:24:c2:bd:97:bc:29:02:b7:5c:59:ef:08:72:
         c2:69:b4:86:4b:1e:e2:96:99:1f:af:77:f2:59:ae:01:09:51:
         3c:29:fd:22:63:95:5c:98:f4:35:75:a3:e9:0e:8b:2c:d1:59:
         57:88:28:05:e5:73:85:a1:09:07:9b:ea:ff:ef:22:05:a6:a7:
         e6:46:6a:65:94:54:bd:86:2a:8e:20:de:e9:fd:a3:03:50:82:
         1a:06:8e:04:7b:71:b8:37:9e:eb:aa:3e:0a:d9:7d:bd:e0:9b:
         16:58:0f:09:d0:62:f8:a9:5e:45:ab:83:ca:46:95:3f:65:0e:
         0d:2e:1c:0c:ef:90:fb:6a:3e:82:89:38:19:15:d7:fc:5c:bb:
         5c:29:ac:de:e3:7a:cb:b2:7b:77:63:28:46:74:ac:15:b6:35:
         57:7c:42:d9:53:57:91:74:f0:4b:4b:41:74:76:5b:cf:b9:44:
         76:5a:a6:6a:b4:e7:6e:cb:93:f8:df:8b:d6:12:34:9c:0a:01:
         22:cf:15:ef:db:fb:5b:4a:04:75:f4:93:7e:60:b5:3c:99:2f:
         6c:d7:d4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:52:57 2026 by rpki-client