Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/323830343a333466343a383030303a3a2f33342d3334203d3e20323635343931.roa
File:                     323830343a333466343a383030303a3a2f33342d3334203d3e20323635343931.roa (raw, json)
Hash identifier:          ZTjIHoUKiocIXIFANkrky88JOFTsjMpJRts1I/VumEw=
Subject key identifier:   39:EB:5F:BB:DE:41:5C:7E:72:06:DA:06:13:E3:FC:32:91:7B:B2:12
Certificate issuer:       /CN=97353985EB7F9E5F1C08E715E408D9E7190540DF
Certificate serial:       31AD795AF52281EAE28D0F048442947C51820B55
Authority key identifier: 97:35:39:85:EB:7F:9E:5F:1C:08:E7:15:E4:08:D9:E7:19:05:40:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97353985EB7F9E5F1C08E715E408D9E7190540DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/323830343a333466343a383030303a3a2f33342d3334203d3e20323635343931.roa
Signing time:             Fri 27 Mar 2026 13:14:04 +0000
ROA not before:           Fri 27 Mar 2026 13:09:04 +0000
ROA not after:            Fri 26 Mar 2027 13:14:04 +0000
asID:                     265491
IP address blocks:        2804:34f4:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/97353985EB7F9E5F1C08E715E408D9E7190540DF.crl
                          rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/97353985EB7F9E5F1C08E715E408D9E7190540DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97353985EB7F9E5F1C08E715E408D9E7190540DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 21:05:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ad:79:5a:f5:22:81:ea:e2:8d:0f:04:84:42:94:7c:51:82:0b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97353985EB7F9E5F1C08E715E408D9E7190540DF
        Validity
            Not Before: Mar 27 13:09:04 2026 GMT
            Not After : Mar 26 13:14:04 2027 GMT
        Subject: CN=39EB5FBBDE415C7E7206DA0613E3FC32917BB212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fb:d6:b9:05:0e:fa:72:91:f8:a1:cc:39:35:
                    59:c4:e9:52:d2:45:a5:04:28:57:56:98:a3:19:a2:
                    5e:16:20:66:8d:1a:e6:4e:cd:53:5c:7c:e5:28:3f:
                    77:95:a3:f6:1e:5b:06:ac:6d:67:10:22:b2:5a:4f:
                    57:98:30:30:37:e8:64:d7:b7:62:c5:cc:36:75:21:
                    09:29:05:31:3b:6c:a5:fb:12:44:1e:92:f1:4b:73:
                    12:5b:03:a7:57:62:3d:b2:9a:9a:65:4e:b3:fd:30:
                    eb:0b:88:9c:c7:dd:48:66:c1:33:46:86:2c:5c:68:
                    aa:0d:51:44:6c:22:78:1f:18:2c:36:b9:4b:b6:fc:
                    c4:22:9e:39:ab:5f:d5:0d:36:41:15:b0:7d:36:2b:
                    09:05:63:1e:0d:d0:fd:cc:b9:55:e7:38:53:fb:c1:
                    84:bf:9a:1a:4b:fa:09:69:39:ac:71:5c:ff:a4:ed:
                    31:5c:24:aa:75:14:47:3b:5a:b0:28:82:f7:33:0a:
                    23:41:c6:48:73:15:62:59:59:55:14:7b:c0:3c:47:
                    14:ed:73:59:4b:f4:ff:d0:92:8b:ad:b3:13:1e:42:
                    d2:71:b2:25:32:ea:b8:6a:f8:27:d1:ee:a2:8c:c1:
                    f6:67:2b:03:66:26:fe:49:86:99:6f:75:9e:4f:af:
                    a5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:EB:5F:BB:DE:41:5C:7E:72:06:DA:06:13:E3:FC:32:91:7B:B2:12
            X509v3 Authority Key Identifier:
                keyid:97:35:39:85:EB:7F:9E:5F:1C:08:E7:15:E4:08:D9:E7:19:05:40:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/97353985EB7F9E5F1C08E715E408D9E7190540DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97353985EB7F9E5F1C08E715E408D9E7190540DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/323830343a333466343a383030303a3a2f33342d3334203d3e20323635343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34f4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8c:4b:b1:a0:55:e6:db:61:6f:b4:65:cf:14:43:8c:19:0b:56:
         44:64:f9:c2:a4:48:a3:82:9f:e9:e3:a3:ac:01:eb:84:f5:09:
         39:1d:5c:30:39:56:c4:a0:cf:4d:d7:82:83:f3:00:7d:c8:c2:
         44:70:6c:2c:6b:bb:f9:7e:ce:d4:54:e1:41:3c:df:c0:2e:a5:
         5f:e7:cc:02:ed:b3:fc:01:87:de:73:c2:9d:9c:76:0a:fd:64:
         2e:ba:9e:a2:b1:08:a7:b2:4d:39:44:e1:2c:cd:a1:4f:2f:3b:
         b2:70:4b:14:b4:69:ba:60:95:96:1c:b0:bc:58:a3:88:10:5e:
         cc:a7:ba:f2:52:7c:40:97:4f:ee:35:fa:93:f9:56:10:3a:48:
         44:02:7f:37:29:d4:6a:f5:78:a1:d4:2b:7c:fa:23:cc:b7:29:
         fe:2c:6f:12:f6:a1:3f:df:80:9b:a4:fd:23:d2:9a:e5:44:ad:
         a3:cb:24:84:be:4d:8c:6a:42:3e:4e:60:8c:53:d7:1e:93:77:
         2c:ad:bf:cd:43:05:1f:5d:a6:fe:83:09:90:b1:28:c1:5c:ad:
         eb:1d:6e:85:e9:49:bf:c8:0d:00:6b:49:a9:79:7a:ed:42:f9:
         d3:df:2e:52:c2:0c:31:e0:dc:3b:80:25:a8:1d:cc:ed:b6:2d:
         b3:dc:a7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 21:42:19 2026 by rpki-client