Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/323830343a333466343a3a2f33332d3333203d3e20323635343931.roa
File:                     323830343a333466343a3a2f33332d3333203d3e20323635343931.roa (raw, json)
Hash identifier:          F5N92oQwA/lMS3d7sZ+MrrtnRCC6z2D3w4XLTO5J/A0=
Subject key identifier:   2F:77:AC:74:A1:62:84:15:41:0B:E6:FE:63:9E:B6:A4:DA:A0:A3:2A
Certificate issuer:       /CN=97353985EB7F9E5F1C08E715E408D9E7190540DF
Certificate serial:       5BCD993D7574CA1124A489B6625C9CFC43136F67
Authority key identifier: 97:35:39:85:EB:7F:9E:5F:1C:08:E7:15:E4:08:D9:E7:19:05:40:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97353985EB7F9E5F1C08E715E408D9E7190540DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/323830343a333466343a3a2f33332d3333203d3e20323635343931.roa
Signing time:             Fri 27 Mar 2026 13:14:05 +0000
ROA not before:           Fri 27 Mar 2026 13:09:05 +0000
ROA not after:            Fri 26 Mar 2027 13:14:05 +0000
asID:                     265491
IP address blocks:        2804:34f4::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/97353985EB7F9E5F1C08E715E408D9E7190540DF.crl
                          rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/97353985EB7F9E5F1C08E715E408D9E7190540DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97353985EB7F9E5F1C08E715E408D9E7190540DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 21:05:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:cd:99:3d:75:74:ca:11:24:a4:89:b6:62:5c:9c:fc:43:13:6f:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97353985EB7F9E5F1C08E715E408D9E7190540DF
        Validity
            Not Before: Mar 27 13:09:05 2026 GMT
            Not After : Mar 26 13:14:05 2027 GMT
        Subject: CN=2F77AC74A1628415410BE6FE639EB6A4DAA0A32A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a0:4d:76:f1:f4:0a:c1:fa:40:5a:cf:37:ae:
                    ca:e9:f5:b5:09:ec:c5:c4:6e:c3:56:36:e1:7a:8f:
                    86:07:cb:6a:f3:0b:92:32:2e:55:27:43:80:79:04:
                    e1:0c:ae:9f:cf:60:16:d2:c5:a5:1f:b6:0e:88:87:
                    f8:18:3a:64:0e:25:71:4f:df:a6:df:34:88:72:70:
                    60:f8:d2:28:0c:f3:63:d9:97:c0:ac:04:66:fd:7b:
                    fe:66:bb:1d:35:3b:3b:36:b7:80:77:c3:d1:5c:05:
                    e5:ab:d0:b1:6e:80:0c:37:7d:73:17:c6:c2:fc:87:
                    79:11:80:49:b5:2c:44:32:da:09:a7:37:90:f4:91:
                    3a:10:4c:17:7d:2d:c1:46:97:ae:ec:b7:a4:36:e3:
                    a2:c4:b9:33:05:ed:41:c7:92:99:bd:8b:09:39:8e:
                    1e:97:9a:6e:df:67:dd:ea:46:a3:2c:22:36:9f:d0:
                    71:ea:10:c5:f5:0b:ee:d3:62:9a:8b:86:5b:eb:1f:
                    92:12:85:45:b1:25:ca:8f:a9:06:6e:e5:3e:e6:27:
                    5b:22:26:b2:3a:5e:e2:c2:d2:28:e6:71:da:9d:c4:
                    5f:29:e9:66:26:85:9f:fe:2e:4e:1d:18:8e:ae:62:
                    ba:ff:d6:ae:89:0c:80:d7:85:37:90:1f:1f:a5:43:
                    c3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:77:AC:74:A1:62:84:15:41:0B:E6:FE:63:9E:B6:A4:DA:A0:A3:2A
            X509v3 Authority Key Identifier:
                keyid:97:35:39:85:EB:7F:9E:5F:1C:08:E7:15:E4:08:D9:E7:19:05:40:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/97353985EB7F9E5F1C08E715E408D9E7190540DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97353985EB7F9E5F1C08E715E408D9E7190540DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/323830343a333466343a3a2f33332d3333203d3e20323635343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34f4::/33

    Signature Algorithm: sha256WithRSAEncryption
         36:78:42:94:3f:54:bb:59:eb:42:d7:7d:33:7c:00:be:6d:f5:
         80:0f:b7:8f:16:e5:6e:29:97:72:61:80:78:96:0b:6b:a5:b2:
         19:2a:2e:21:b5:96:8b:26:e5:3c:e6:4b:71:44:cb:01:44:c3:
         5f:c2:0c:48:cc:db:31:f0:2f:b6:e1:61:86:91:ce:5b:38:00:
         06:5a:6e:14:19:a4:43:86:8e:f0:7f:69:59:3f:32:c9:08:34:
         bc:1a:eb:77:0f:a1:d5:44:fa:ed:4d:aa:32:84:88:e2:a5:0a:
         a4:ef:1e:bb:fe:68:5f:1c:dd:01:6d:4a:d8:13:bb:2c:05:f5:
         a5:4d:8e:0c:2d:67:0a:ad:99:53:59:7a:1a:88:f1:cc:30:20:
         d7:9b:7f:10:47:f5:7a:c0:d2:c4:ab:fb:7d:ed:ee:73:80:8f:
         74:cd:87:3a:0f:14:e1:19:be:fd:fe:79:7d:79:f4:f4:65:b6:
         f3:dc:0b:8f:dd:cf:8f:6d:58:ad:9c:68:a7:1b:c4:5c:bb:30:
         c5:14:77:5f:f9:c6:e4:2e:f6:d3:46:92:f1:18:00:3f:70:1d:
         6c:0c:9e:7e:7b:9f:d1:6e:8a:0d:ff:bb:b6:d5:48:c8:fd:cd:
         0f:b6:b2:6d:3d:9c:58:15:6e:a4:98:75:bd:f6:16:65:85:84:
         83:9b:82:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 21:42:22 2026 by rpki-client