Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31383a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a31383a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          KwPfC6yGVRjQAr3zj+xajikdRZv/Vpz69FAgjRBmd0M=
Subject key identifier:   13:20:BB:B7:D7:67:73:4D:72:5D:6F:AF:35:07:42:8C:BD:F5:5D:DD
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       4291B4846DA30645900EDF6DCE55A25CEC931E88
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31383a3a2f34382d313238203d3e203532353830.roa
Signing time:             Wed 01 Apr 2026 19:28:17 +0000
ROA not before:           Wed 01 Apr 2026 19:23:17 +0000
ROA not after:            Wed 31 Mar 2027 19:28:17 +0000
asID:                     52580
IP address blocks:        2804:cf8:18::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 00:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:91:b4:84:6d:a3:06:45:90:0e:df:6d:ce:55:a2:5c:ec:93:1e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr  1 19:23:17 2026 GMT
            Not After : Mar 31 19:28:17 2027 GMT
        Subject: CN=1320BBB7D767734D725D6FAF3507428CBDF55DDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:86:1e:92:e7:85:8d:90:98:0b:4e:58:89:f0:
                    b9:d1:3e:13:d6:b2:65:7a:15:23:52:8d:35:6c:00:
                    17:8c:ab:e0:6a:c5:67:67:ff:34:01:38:40:09:2a:
                    39:87:d5:e9:72:a8:31:1d:c2:53:74:94:4b:03:f5:
                    5b:65:22:fa:77:a7:6a:0b:aa:79:24:70:83:03:1c:
                    ce:45:75:5b:76:bc:60:f2:8c:5b:60:6b:43:f8:43:
                    27:db:cb:2f:19:aa:27:3a:8c:48:0c:fc:95:75:8d:
                    ec:09:4f:b3:03:0f:ac:d0:2a:dd:fe:3b:76:ad:fb:
                    bb:2b:0c:ff:67:2b:4a:8c:c6:35:1f:db:fd:1f:06:
                    ff:12:75:24:8d:9a:ac:bc:12:86:fa:b2:4c:bb:56:
                    b2:c3:33:60:42:b7:d6:0a:d6:2f:81:2b:dc:c2:77:
                    4a:31:71:dc:82:ef:4d:f7:6e:4e:dc:6a:75:f0:5b:
                    ee:29:c7:ca:fb:86:78:53:d6:35:23:f7:11:a0:26:
                    7d:fd:66:33:a5:52:84:c1:cb:06:1b:10:03:a4:4c:
                    2f:49:22:54:b4:72:30:64:18:fe:f8:f6:fe:91:b5:
                    a7:13:53:40:6f:f4:60:49:fc:44:c8:9c:41:f3:f6:
                    30:03:26:fe:1e:82:53:8b:0a:6d:34:1d:87:48:49:
                    80:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:20:BB:B7:D7:67:73:4D:72:5D:6F:AF:35:07:42:8C:BD:F5:5D:DD
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31383a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:18::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:11:1b:8d:33:1b:54:a6:83:43:db:af:54:6b:b6:5e:8b:21:
         b9:aa:24:b5:50:6c:25:9d:87:34:7c:75:e9:5d:aa:69:7b:61:
         e1:fc:44:9e:8d:6b:51:85:e7:56:cb:93:1a:a1:3f:f2:72:c9:
         6a:0b:44:0a:34:30:5d:97:95:f5:d6:d0:82:3e:6a:d7:e1:d0:
         ba:b1:50:31:70:9e:b1:b3:ef:d5:f2:54:0e:18:73:b9:8a:c1:
         cd:a6:44:97:05:08:46:d4:95:00:72:1b:3f:76:a9:58:a1:94:
         86:25:f8:6d:13:5b:fe:82:c7:23:7e:ad:49:b4:52:03:e9:08:
         f1:79:91:21:7c:04:c2:ef:cb:0d:f6:9a:81:6f:d4:21:05:5d:
         36:cb:b4:eb:74:4b:f7:b9:f7:9b:8c:f1:60:4d:ae:a8:41:80:
         60:93:f7:c6:76:36:59:7c:29:d3:ef:df:4b:e2:14:55:4b:f4:
         75:d9:72:45:2d:6b:83:d2:e7:a3:fe:27:07:37:ea:8c:2a:19:
         c9:a2:3b:10:06:9e:05:35:d2:d4:2c:86:c0:7d:d3:db:0d:aa:
         c0:64:e6:7f:97:d4:97:3a:39:64:ca:76:bf:0d:2f:f2:63:2a:
         f1:d7:c5:1e:d5:33:c7:c5:c1:da:2e:04:b9:aa:93:56:1d:b6:
         55:9f:c5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 17:03:26 2026 by rpki-client