Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/323830343a373337303a3a2f33322d313238203d3e20323730393135.roa
File:                     323830343a373337303a3a2f33322d313238203d3e20323730393135.roa (raw, json)
Hash identifier:          jZYoQdTQfom+0sI79xqowlSObfE7p/Ep3Qqy1pznBtU=
Subject key identifier:   AA:91:59:68:E1:E1:D0:46:3C:66:E5:57:79:DB:63:F9:3D:AA:95:CB
Certificate issuer:       /CN=24433D21977FD690D9A22FE9B7A0D866F38A662D
Certificate serial:       4190FBB624E8E2F76E3A4B0D7EE6ED8F9CB3311B
Authority key identifier: 24:43:3D:21:97:7F:D6:90:D9:A2:2F:E9:B7:A0:D8:66:F3:8A:66:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24433D21977FD690D9A22FE9B7A0D866F38A662D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/323830343a373337303a3a2f33322d313238203d3e20323730393135.roa
Signing time:             Thu 26 Mar 2026 13:23:53 +0000
ROA not before:           Thu 26 Mar 2026 13:18:53 +0000
ROA not after:            Thu 25 Mar 2027 13:23:53 +0000
asID:                     270915
IP address blocks:        2804:7370::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/24433D21977FD690D9A22FE9B7A0D866F38A662D.crl
                          rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/24433D21977FD690D9A22FE9B7A0D866F38A662D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24433D21977FD690D9A22FE9B7A0D866F38A662D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:90:fb:b6:24:e8:e2:f7:6e:3a:4b:0d:7e:e6:ed:8f:9c:b3:31:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24433D21977FD690D9A22FE9B7A0D866F38A662D
        Validity
            Not Before: Mar 26 13:18:53 2026 GMT
            Not After : Mar 25 13:23:53 2027 GMT
        Subject: CN=AA915968E1E1D0463C66E55779DB63F93DAA95CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:64:62:2d:cd:96:d2:02:4c:f2:73:26:9b:50:
                    45:2b:e3:c8:47:98:20:86:39:1c:6b:eb:a9:bb:73:
                    63:c5:3a:c4:62:9f:d9:9b:0e:95:9b:18:bc:76:61:
                    5b:d3:c3:bd:85:72:b2:2d:43:4a:c0:b7:7b:ea:0e:
                    25:27:07:57:89:79:46:cc:9f:c4:71:9c:62:19:b9:
                    0a:8e:ea:cf:b3:6d:b2:21:6b:49:6c:2f:09:c8:e2:
                    a4:39:d9:c4:11:ca:66:1a:e9:a1:51:d1:34:e0:f2:
                    0b:41:d0:ce:99:24:22:f2:45:95:72:4d:8c:e1:24:
                    65:aa:fa:28:6c:16:9b:51:dd:00:d3:c8:4b:27:bb:
                    de:e1:2f:84:39:2f:1f:5e:22:84:6c:6d:81:8a:b7:
                    31:bc:95:a7:cd:f0:98:ab:69:54:bf:40:05:89:12:
                    40:b1:e9:94:41:aa:a8:88:62:e4:42:cf:26:d8:e9:
                    40:e8:fa:fc:f4:6f:09:13:2b:07:dd:18:bb:12:0a:
                    89:5b:3e:c1:3d:4d:63:2a:c2:cd:43:8c:89:b4:eb:
                    3e:80:ac:e9:7a:ec:95:64:0d:e6:dd:41:7a:74:df:
                    bd:1b:be:af:b9:59:9a:dc:2b:d0:37:ef:bc:89:a5:
                    58:cf:37:62:a7:72:38:4e:af:b6:ea:12:51:2e:1d:
                    15:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:91:59:68:E1:E1:D0:46:3C:66:E5:57:79:DB:63:F9:3D:AA:95:CB
            X509v3 Authority Key Identifier:
                keyid:24:43:3D:21:97:7F:D6:90:D9:A2:2F:E9:B7:A0:D8:66:F3:8A:66:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/24433D21977FD690D9A22FE9B7A0D866F38A662D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24433D21977FD690D9A22FE9B7A0D866F38A662D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/323830343a373337303a3a2f33322d313238203d3e20323730393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7370::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:95:db:b3:43:c0:8d:da:ae:a4:bf:49:a0:12:5f:19:15:91:
         8a:3e:12:04:df:32:65:14:d4:70:5f:4a:8f:83:6b:ef:14:c4:
         13:8f:ce:74:60:5f:3f:15:78:3f:38:f8:57:bc:55:bb:65:2d:
         88:d4:37:73:99:a5:07:00:d6:45:0f:fd:4b:30:ec:97:6f:35:
         6b:43:66:45:66:00:aa:58:7a:1b:d4:c7:9f:3e:35:37:05:43:
         98:5f:64:91:21:a9:91:1c:26:0a:4a:38:97:90:5e:a9:bf:5d:
         dc:e7:b1:d0:84:54:19:99:bc:78:3d:ea:6e:1d:bb:8d:ce:6b:
         60:53:b7:52:7f:14:1e:77:00:13:47:9c:85:e7:bd:aa:8a:83:
         8d:09:31:5e:7b:16:71:3a:ea:f5:5e:25:26:2d:52:0b:88:10:
         4c:40:1f:fe:bd:0a:da:68:8a:b8:3e:19:fe:30:9b:22:f8:5a:
         ea:9d:80:93:7c:2d:1a:b9:5a:96:f9:b3:07:e2:f2:54:4a:ba:
         98:39:72:73:ff:05:31:5c:de:3b:27:e7:f3:a2:c8:ec:c5:df:
         80:6d:7b:46:56:04:74:2e:5d:7b:71:35:5e:7b:7d:e4:59:63:
         e8:03:07:98:6f:61:01:37:5e:86:e7:4a:a7:86:bf:14:cf:43:
         be:d3:fa:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:43:45 2026 by rpki-client