Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/323830343a356530383a3a2f33322d3438203d3e20323639303037.roa
File:                     323830343a356530383a3a2f33322d3438203d3e20323639303037.roa (raw, json)
Hash identifier:          WOZv+1mDikY5gVrsPgSllSznSHT+Bd0VCcje9kdlaKE=
Subject key identifier:   B8:48:CC:B8:74:19:41:B6:41:F1:C3:CF:E3:38:A7:1E:09:E2:FF:AD
Certificate issuer:       /CN=3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30
Certificate serial:       7F8E5EC7A4738EF14D81684623FFF4C9873544B4
Authority key identifier: 3B:18:B7:DC:9E:3A:9E:E8:2B:ED:80:DD:09:B5:7D:20:04:5B:0C:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/323830343a356530383a3a2f33322d3438203d3e20323639303037.roa
Signing time:             Wed 13 May 2026 15:36:29 +0000
ROA not before:           Wed 13 May 2026 15:31:29 +0000
ROA not after:            Wed 12 May 2027 15:36:29 +0000
asID:                     269007
IP address blocks:        2804:5e08::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.crl
                          rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 06:22:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:8e:5e:c7:a4:73:8e:f1:4d:81:68:46:23:ff:f4:c9:87:35:44:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30
        Validity
            Not Before: May 13 15:31:29 2026 GMT
            Not After : May 12 15:36:29 2027 GMT
        Subject: CN=B848CCB8741941B641F1C3CFE338A71E09E2FFAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cd:78:9d:84:a2:6c:88:08:ac:d1:07:59:ae:
                    b7:ae:db:29:1e:f2:d9:32:47:29:db:9f:d3:8f:a8:
                    12:ba:7f:cb:a4:e6:3c:6d:5a:88:f2:d6:87:96:d0:
                    15:c0:f1:19:4a:72:0c:50:41:a5:d8:ba:db:a5:97:
                    d3:dd:64:25:45:ef:0b:0d:d4:9c:59:b4:08:93:e5:
                    d0:e3:2a:36:b4:02:b1:b0:40:2c:88:ef:f5:0c:cf:
                    e9:8e:c3:ad:3a:83:bc:cf:0f:a4:1e:3d:6d:d9:74:
                    c5:58:e0:d8:7f:ad:28:40:70:f7:7e:1b:a9:f4:b4:
                    78:87:ff:5b:76:6b:0b:6b:63:e3:87:c6:09:d7:50:
                    cd:c3:4e:3d:75:ac:d8:f0:69:66:45:e3:13:7f:ac:
                    49:aa:97:45:ca:6b:b5:95:39:2c:f8:69:22:69:4b:
                    94:ac:c4:c4:17:2f:64:4f:7f:9c:2d:67:83:15:64:
                    34:f2:2a:b2:ef:fc:84:96:ba:7e:a5:7c:de:e3:2e:
                    ae:86:1b:70:ea:77:47:72:9a:3c:66:89:10:85:8e:
                    04:4f:e7:eb:52:02:2a:f9:c0:cf:a2:7a:e3:89:6a:
                    9f:05:ca:47:c7:5e:56:e0:d2:68:4a:eb:42:c1:46:
                    9e:d2:d7:bb:1a:36:75:23:dd:b5:c8:82:7a:6a:14:
                    cc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:48:CC:B8:74:19:41:B6:41:F1:C3:CF:E3:38:A7:1E:09:E2:FF:AD
            X509v3 Authority Key Identifier:
                keyid:3B:18:B7:DC:9E:3A:9E:E8:2B:ED:80:DD:09:B5:7D:20:04:5B:0C:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/323830343a356530383a3a2f33322d3438203d3e20323639303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e08::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:e9:ff:e3:1f:2e:b1:79:f7:5c:56:c4:6b:81:b1:a3:a7:7c:
         28:39:2c:a2:77:a9:91:ca:63:10:9d:e9:23:42:05:23:b4:5e:
         61:2e:d5:09:8a:75:b2:6c:98:32:a1:da:e9:c5:7c:d1:90:8e:
         be:ab:f4:a5:2d:f7:bf:6e:85:9f:f8:ba:d6:6c:3c:bd:07:cd:
         f2:e9:bd:54:4c:de:87:0d:5c:5b:e0:09:d0:c0:fb:fc:95:8f:
         47:03:eb:fe:6c:f5:a2:0e:94:f0:6b:cc:f6:59:b4:39:ba:32:
         16:f9:25:55:30:89:bc:9f:43:91:84:47:37:6d:fb:f2:ed:e8:
         ff:3f:8a:24:6c:72:14:96:f9:08:6a:c2:c5:67:a3:3b:f0:e9:
         77:48:6c:7e:fb:d3:48:d4:d0:52:1b:5a:b9:b6:ed:79:ab:cd:
         d0:4a:46:58:de:b1:52:d3:7c:f0:e0:88:5d:b7:f0:55:f1:2d:
         fd:ef:80:3c:f4:89:f5:bb:c9:58:64:ce:aa:fd:79:f3:61:9f:
         27:1f:3b:f1:fd:8e:be:da:7d:a9:e3:43:7b:c6:0e:b9:d2:7f:
         38:c2:32:c2:8a:e4:16:97:57:a7:c4:33:6a:71:a7:bf:fe:33:
         cb:9b:17:e1:ff:6b:2d:5c:65:e0:6c:a8:97:07:ca:b2:26:c7:
         9d:e2:5a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 19:37:37 2026 by rpki-client