Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/323830343a346133343a3a2f33322d3438203d3e20323637323234.roa
File:                     323830343a346133343a3a2f33322d3438203d3e20323637323234.roa (raw, json)
Hash identifier:          EwmYDcz8vvc5QYnF7PTHsrD+mM7rzzFK8Y5hDbw1NUk=
Subject key identifier:   66:E0:86:24:32:27:B9:FC:C5:65:AE:39:BE:9D:52:CA:FF:DD:1F:85
Certificate issuer:       /CN=D392D06DAD0BA1CB860889043CB27A3AE10540B3
Certificate serial:       0EA5FC924FA0A4913CFD960862C9BB1E1FBBE08E
Authority key identifier: D3:92:D0:6D:AD:0B:A1:CB:86:08:89:04:3C:B2:7A:3A:E1:05:40:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D392D06DAD0BA1CB860889043CB27A3AE10540B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/323830343a346133343a3a2f33322d3438203d3e20323637323234.roa
Signing time:             Fri 03 Apr 2026 17:56:32 +0000
ROA not before:           Fri 03 Apr 2026 17:51:32 +0000
ROA not after:            Fri 02 Apr 2027 17:56:32 +0000
asID:                     267224
IP address blocks:        2804:4a34::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/D392D06DAD0BA1CB860889043CB27A3AE10540B3.crl
                          rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/D392D06DAD0BA1CB860889043CB27A3AE10540B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D392D06DAD0BA1CB860889043CB27A3AE10540B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 Apr 2026 06:34:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:a5:fc:92:4f:a0:a4:91:3c:fd:96:08:62:c9:bb:1e:1f:bb:e0:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D392D06DAD0BA1CB860889043CB27A3AE10540B3
        Validity
            Not Before: Apr  3 17:51:32 2026 GMT
            Not After : Apr  2 17:56:32 2027 GMT
        Subject: CN=66E086243227B9FCC565AE39BE9D52CAFFDD1F85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3d:ca:e7:0a:26:5d:42:fc:0c:13:df:52:e0:
                    58:62:2a:94:a9:ab:dc:1b:f3:b7:54:dd:38:26:8b:
                    38:a3:0e:d5:cb:95:31:be:73:ee:40:f4:0f:a8:e6:
                    e0:e2:92:67:7a:65:85:0a:ad:49:26:e2:c4:6e:ac:
                    cc:b9:d8:d4:01:5b:49:d7:99:02:f4:ce:3b:bd:cb:
                    64:09:ef:71:1d:99:ac:12:45:a6:1a:c8:46:c8:d7:
                    60:51:f1:c9:72:6e:64:71:df:6e:bd:51:5b:2b:c0:
                    a0:b7:95:87:a9:40:c9:1d:6e:aa:bb:82:28:48:c6:
                    0f:7e:20:29:42:fe:bb:55:5b:ea:40:a1:1d:49:79:
                    19:a3:46:83:88:c8:82:1f:b4:5b:a8:35:ae:ca:6a:
                    64:7b:48:89:e6:df:f3:5f:1a:df:02:10:f2:ee:6a:
                    f4:15:2e:17:8d:26:11:0a:85:cc:8b:cb:1e:4a:9c:
                    0d:4e:e9:77:58:56:76:23:81:1f:9e:7c:76:74:aa:
                    c5:98:bb:10:ea:95:49:78:4a:81:b6:26:98:50:5a:
                    52:5f:c0:b4:cf:31:9a:f8:d9:5c:91:36:39:6d:d5:
                    c3:86:fd:93:7a:34:1a:64:9f:49:e0:63:0b:44:4a:
                    d7:77:f8:ab:fe:80:d1:dc:ca:81:41:1e:2c:3d:97:
                    18:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E0:86:24:32:27:B9:FC:C5:65:AE:39:BE:9D:52:CA:FF:DD:1F:85
            X509v3 Authority Key Identifier:
                keyid:D3:92:D0:6D:AD:0B:A1:CB:86:08:89:04:3C:B2:7A:3A:E1:05:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/D392D06DAD0BA1CB860889043CB27A3AE10540B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D392D06DAD0BA1CB860889043CB27A3AE10540B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/323830343a346133343a3a2f33322d3438203d3e20323637323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a34::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:d6:21:67:01:bc:15:ea:e9:e8:13:5b:68:04:82:90:de:c0:
         a1:93:b6:e7:a1:c5:3e:8c:d9:62:10:e8:61:8f:42:00:ba:5a:
         f0:c3:ef:2a:65:ee:b3:3d:24:a6:d7:20:c7:49:75:33:c8:8e:
         5f:79:40:44:52:32:67:8a:7a:a7:a4:66:3e:f0:6f:a0:6e:0e:
         09:62:b2:e0:ed:7d:2f:f6:64:68:97:bd:23:2a:fb:75:3b:3a:
         4f:5c:1a:a5:8a:29:20:53:b4:58:49:2d:78:9e:ad:9c:79:1f:
         40:ea:ba:9b:3f:b4:c7:21:e6:1e:e0:8d:a1:6f:fc:29:8d:d7:
         91:2d:b0:22:89:c0:5b:c7:f2:1b:fd:91:02:24:b6:58:13:be:
         48:2f:e8:43:dc:67:c7:96:3b:e1:e3:37:a9:f1:43:99:08:dd:
         d4:4f:07:0d:4e:c2:20:45:d8:6d:73:b4:5a:fc:2a:c2:4a:54:
         8a:2c:98:de:0a:f4:09:8c:db:84:86:52:2f:a5:84:37:9b:d3:
         07:a0:f4:81:ea:1c:7b:35:7d:6a:74:1c:84:8f:0a:5d:04:4d:
         18:b1:73:5d:38:3b:d3:4a:97:06:06:e1:3f:fe:8d:24:84:7c:
         99:da:f2:31:c5:d8:a1:f8:9a:3d:b3:49:67:75:d6:66:88:42:
         4c:31:ba:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 10:42:12 2026 by rpki-client