Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/323830343a333831633a3a2f33322d3332203d3e20323636343537.roa
File:                     323830343a333831633a3a2f33322d3332203d3e20323636343537.roa (raw, json)
Hash identifier:          pq7sEZuF0XjbqE1hl7cRDb6YtMN1jN8BOIRFUKlL9c4=
Subject key identifier:   DC:37:44:BE:DA:F7:97:1C:4A:C5:17:28:29:8B:CA:8B:70:22:91:F1
Certificate issuer:       /CN=41A111B11C25CD882E748B0F1AC3E7BBA029024A
Certificate serial:       034447BBAD703AC3228F9591191840D8735939C3
Authority key identifier: 41:A1:11:B1:1C:25:CD:88:2E:74:8B:0F:1A:C3:E7:BB:A0:29:02:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41A111B11C25CD882E748B0F1AC3E7BBA029024A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/323830343a333831633a3a2f33322d3332203d3e20323636343537.roa
Signing time:             Fri 11 Sep 2026 19:37:41 +0000
ROA not before:           Fri 11 Sep 2026 19:32:41 +0000
ROA not after:            Fri 10 Sep 2027 19:37:41 +0000
asID:                     266457
IP address blocks:        2804:381c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/41A111B11C25CD882E748B0F1AC3E7BBA029024A.crl
                          rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/41A111B11C25CD882E748B0F1AC3E7BBA029024A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41A111B11C25CD882E748B0F1AC3E7BBA029024A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 03:22:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:44:47:bb:ad:70:3a:c3:22:8f:95:91:19:18:40:d8:73:59:39:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41A111B11C25CD882E748B0F1AC3E7BBA029024A
        Validity
            Not Before: Sep 11 19:32:41 2026 GMT
            Not After : Sep 10 19:37:41 2027 GMT
        Subject: CN=DC3744BEDAF7971C4AC51728298BCA8B702291F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b5:8d:0f:ce:d5:1b:a9:78:eb:96:ee:31:ef:
                    95:ad:73:52:1e:c8:bb:94:8e:a1:dd:8f:d4:18:7c:
                    c3:69:36:af:58:2e:a1:3a:68:7c:a4:3a:b8:5a:94:
                    78:41:8a:e4:5a:ba:ff:17:7e:e0:c0:76:92:d9:0e:
                    97:1d:d2:9a:01:b7:8c:2f:69:f4:1b:18:a9:04:81:
                    49:0a:16:0f:7c:34:53:fd:af:d6:85:7f:39:0f:f2:
                    e5:c3:4c:ae:de:84:88:1a:01:b4:4a:a9:5e:26:c5:
                    db:87:83:09:43:ae:f6:47:e1:69:e3:85:41:01:f3:
                    0e:de:cd:7b:11:88:ec:d1:2f:80:61:73:1a:3d:e5:
                    4a:5e:07:6a:28:b9:ff:92:93:eb:2a:4c:a2:4a:68:
                    2f:50:27:2d:4c:c1:e9:4a:1e:22:dc:5a:f8:5d:91:
                    e5:ee:54:3f:81:f7:9e:62:eb:0f:94:94:2f:51:b4:
                    15:e4:9e:82:23:3b:d8:b7:9d:fe:13:f6:e3:10:41:
                    35:92:78:78:28:c3:d9:7a:89:f9:c2:4c:40:bd:9d:
                    2c:0c:bd:eb:30:ec:fb:b1:f4:08:bd:45:5b:a1:e0:
                    4a:0b:5a:22:c4:39:fb:4b:b6:59:11:9d:52:5f:df:
                    4c:ba:49:fd:8b:23:16:bc:df:ba:8f:88:ca:1a:37:
                    c4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:37:44:BE:DA:F7:97:1C:4A:C5:17:28:29:8B:CA:8B:70:22:91:F1
            X509v3 Authority Key Identifier:
                keyid:41:A1:11:B1:1C:25:CD:88:2E:74:8B:0F:1A:C3:E7:BB:A0:29:02:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/41A111B11C25CD882E748B0F1AC3E7BBA029024A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41A111B11C25CD882E748B0F1AC3E7BBA029024A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/323830343a333831633a3a2f33322d3332203d3e20323636343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:381c::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:ce:19:43:1f:55:66:d0:be:fd:ee:2a:5a:42:40:08:40:13:
         53:12:1a:d3:8e:ff:72:4f:0f:28:60:ae:9b:3a:6e:09:9b:50:
         24:fa:9d:01:6d:0d:19:5b:85:da:1a:ea:ed:a1:f9:27:57:99:
         06:09:ef:2d:a7:34:ce:d0:51:47:25:d3:03:bf:85:d4:5d:6a:
         07:6b:65:39:91:ef:7c:d8:78:9e:85:56:40:35:c7:46:47:ce:
         8e:78:e3:ef:12:ac:41:69:f7:19:c9:5d:29:7f:5c:2e:d3:5a:
         d4:b6:82:07:e5:63:3f:6e:a9:8d:4d:e2:ac:a6:79:21:d9:68:
         2f:df:0a:e2:9b:7e:eb:8f:85:9c:1c:db:75:ca:7b:32:13:cd:
         6a:08:f1:ee:8f:e3:66:c2:d9:be:0b:e2:6d:37:0b:80:4a:45:
         c8:16:c1:c6:8e:82:13:e8:f5:d5:ea:d4:15:b1:f1:12:f7:c0:
         e7:aa:90:2d:74:c6:88:b4:cf:2c:f8:18:d5:ce:72:c8:f5:85:
         c2:5a:53:40:6d:a0:62:8d:76:2d:53:db:5a:d3:21:e7:d7:0c:
         6e:04:80:26:a4:67:95:2d:c2:92:75:00:4a:fa:0d:dd:20:41:
         7f:58:af:dc:0d:6f:ec:17:5f:a9:af:40:87:f5:a4:9b:98:42:
         7a:85:1d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:16:26 2026 by rpki-client