Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a663a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a663a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          ctAOeQ4NnY6yRvGHrGoXqvgPQ8RE1gLsc6DEs9Vukjk=
Subject key identifier:   7D:13:C0:D6:0B:4F:F4:B0:A1:E4:DE:6C:6A:96:5F:28:4E:E1:58:38
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       1367C536F31DE6400A84D08D3939A6955145CA11
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a663a3a2f34382d313238203d3e203532353830.roa
Signing time:             Wed 01 Apr 2026 19:28:22 +0000
ROA not before:           Wed 01 Apr 2026 19:23:22 +0000
ROA not after:            Wed 31 Mar 2027 19:28:22 +0000
asID:                     52580
IP address blocks:        2804:cf8:f::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 00:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:67:c5:36:f3:1d:e6:40:0a:84:d0:8d:39:39:a6:95:51:45:ca:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr  1 19:23:22 2026 GMT
            Not After : Mar 31 19:28:22 2027 GMT
        Subject: CN=7D13C0D60B4FF4B0A1E4DE6C6A965F284EE15838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:62:04:ea:be:9b:da:6c:90:91:eb:98:40:d9:
                    42:1c:fd:c5:c6:02:1b:24:4f:cc:91:f9:45:13:ca:
                    e6:4c:85:e1:e3:99:36:d6:43:de:c1:d5:72:63:0c:
                    59:ce:7f:cc:f4:6d:0b:d7:05:af:96:11:7c:fc:5d:
                    f6:45:d5:f3:fd:e6:d3:a8:ba:a0:b8:92:2f:23:92:
                    55:61:aa:2a:ea:f5:d4:a8:99:72:09:fb:67:f4:e3:
                    5b:35:6b:0c:aa:c9:14:27:42:4e:c5:73:2a:7f:24:
                    03:d7:17:87:0f:d7:66:86:fc:51:d8:24:77:47:fe:
                    30:19:5e:85:6d:a9:84:c6:75:3b:5d:ab:b8:c7:b9:
                    89:1a:d9:ab:28:38:35:f8:05:ad:92:29:c3:94:a3:
                    43:48:a1:03:ca:de:d3:ae:3b:af:fb:4f:b5:2b:e6:
                    6c:66:e5:6d:de:bd:76:be:c6:be:54:e1:7b:31:fc:
                    9e:9e:be:3b:3e:70:54:6d:b8:e4:d5:2f:e3:c2:9c:
                    5a:e2:7d:0a:74:85:7b:70:2c:c6:d9:6c:e1:42:41:
                    43:85:a9:f6:39:0d:f5:58:26:52:0f:7e:31:3c:ad:
                    d2:e6:f3:e2:85:1d:50:5f:69:53:08:e5:59:b3:fe:
                    7c:9c:79:91:87:67:26:69:e0:cd:db:cf:a0:3f:dd:
                    b0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:13:C0:D6:0B:4F:F4:B0:A1:E4:DE:6C:6A:96:5F:28:4E:E1:58:38
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a663a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:f::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:45:b0:ad:3a:0a:71:fd:42:8a:08:76:64:cb:c9:00:74:ee:
         67:06:e0:9e:45:3c:ab:20:3f:02:da:13:01:05:5c:05:27:6a:
         88:0c:b0:ba:47:0c:a6:1e:9d:40:34:77:d7:02:00:c2:dc:0c:
         8b:e1:4b:42:70:fc:54:bc:23:07:76:1a:d6:84:83:b4:30:40:
         34:b9:cb:ad:ba:89:25:57:88:28:7c:c2:1e:d3:aa:62:8a:ec:
         36:74:e9:9d:8d:c5:fb:bc:b7:4f:e9:e2:6c:57:6a:46:39:4d:
         bf:1b:96:a4:7e:35:6f:7f:ad:7c:08:ea:fa:cc:0f:91:7c:fd:
         ae:0e:46:46:84:c8:3d:72:05:7a:a1:8c:74:6e:59:54:c2:32:
         24:1c:9c:ba:fe:85:53:a3:a6:26:5d:9a:8b:7f:39:fc:c8:21:
         d8:1d:62:60:ac:5f:b3:bf:52:81:c0:b0:08:73:76:25:55:3f:
         fc:49:1c:92:b7:8b:7c:cf:35:52:62:b2:00:81:04:ce:eb:6a:
         6c:29:c8:23:b6:2b:1d:4a:e0:36:06:8c:50:ca:33:73:5f:1c:
         ab:1c:8f:ce:29:36:cc:78:64:87:70:cc:92:76:aa:6b:ab:83:
         46:65:a0:71:33:7b:8f:e0:fb:50:84:d2:88:c7:88:0d:b2:b6:
         d5:c9:d6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:49:57 2026 by rpki-client