Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfNQq9Vr95vxAJjEkYuKGPFx4LBno59gwuRH2BeHLU8Q/0/323830343a383530343a3a2f33322d313238203d3e20323732353532.roa
File:                     323830343a383530343a3a2f33322d313238203d3e20323732353532.roa (raw, json)
Hash identifier:          YjdOpFPOJzsSTuycCCZj9Cs46bUWsFlhRZaYLeMnqlY=
Subject key identifier:   DB:47:4A:EB:C8:2A:D6:A9:24:5F:85:35:EE:CB:E2:09:2A:DB:6A:62
Certificate issuer:       /CN=F3C37DB435C3DD0D2919B2525FDF688DCCB533FE
Certificate serial:       10C5AE74C2D93D5214A76F60DB5C9C95E12E2941
Authority key identifier: F3:C3:7D:B4:35:C3:DD:0D:29:19:B2:52:5F:DF:68:8D:CC:B5:33:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C37DB435C3DD0D2919B2525FDF688DCCB533FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfNQq9Vr95vxAJjEkYuKGPFx4LBno59gwuRH2BeHLU8Q/0/323830343a383530343a3a2f33322d313238203d3e20323732353532.roa
Signing time:             Thu 02 Apr 2026 03:50:17 +0000
ROA not before:           Thu 02 Apr 2026 03:45:17 +0000
ROA not after:            Thu 01 Apr 2027 03:50:17 +0000
asID:                     272552
IP address blocks:        2804:8504::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AfNQq9Vr95vxAJjEkYuKGPFx4LBno59gwuRH2BeHLU8Q/0/F3C37DB435C3DD0D2919B2525FDF688DCCB533FE.crl
                          rsync://rpki-repo.registro.br/repo/AfNQq9Vr95vxAJjEkYuKGPFx4LBno59gwuRH2BeHLU8Q/0/F3C37DB435C3DD0D2919B2525FDF688DCCB533FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C37DB435C3DD0D2919B2525FDF688DCCB533FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 05:48:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c5:ae:74:c2:d9:3d:52:14:a7:6f:60:db:5c:9c:95:e1:2e:29:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3C37DB435C3DD0D2919B2525FDF688DCCB533FE
        Validity
            Not Before: Apr  2 03:45:17 2026 GMT
            Not After : Apr  1 03:50:17 2027 GMT
        Subject: CN=DB474AEBC82AD6A9245F8535EECBE2092ADB6A62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:66:d2:2b:10:2f:26:32:ea:fd:d8:cd:ca:d8:
                    d2:0a:2a:45:cd:75:ed:d6:fc:24:b6:c6:75:cc:8e:
                    f2:f8:53:ef:d7:6b:ea:40:dc:05:43:69:bc:07:96:
                    13:00:d5:9e:10:e1:11:0d:a7:f9:7c:08:63:19:3e:
                    e2:ae:df:4b:f9:09:91:aa:e7:0d:f1:2d:60:af:4e:
                    1d:95:82:74:91:88:e6:93:aa:88:61:bd:d3:6a:13:
                    47:77:25:ed:03:b7:24:fe:77:f9:ac:fd:c9:e5:44:
                    0a:8b:89:3d:8b:42:73:92:5c:e5:5d:35:6f:f0:17:
                    38:75:a1:d9:ab:07:14:2e:fb:d0:63:76:ce:47:a6:
                    ff:b6:00:84:de:d9:b5:c7:4a:ee:e5:47:8a:19:b5:
                    0d:33:ff:d4:3c:cf:20:da:27:42:6f:fe:86:11:7d:
                    04:c8:9f:b9:33:ae:94:01:27:2c:43:a8:82:19:b3:
                    ff:bd:eb:76:14:f0:84:60:44:9f:28:d8:62:1e:a2:
                    ef:3d:68:e8:c2:3b:26:d0:30:eb:63:78:61:4a:c0:
                    23:9d:03:1c:a3:9f:61:8c:78:72:fd:55:c6:48:76:
                    92:bd:7a:a7:7f:8b:73:72:09:ce:6b:02:c0:57:67:
                    7d:54:cf:87:6a:6d:26:f9:f8:da:05:35:69:a0:c4:
                    7e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:47:4A:EB:C8:2A:D6:A9:24:5F:85:35:EE:CB:E2:09:2A:DB:6A:62
            X509v3 Authority Key Identifier:
                keyid:F3:C3:7D:B4:35:C3:DD:0D:29:19:B2:52:5F:DF:68:8D:CC:B5:33:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfNQq9Vr95vxAJjEkYuKGPFx4LBno59gwuRH2BeHLU8Q/0/F3C37DB435C3DD0D2919B2525FDF688DCCB533FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C37DB435C3DD0D2919B2525FDF688DCCB533FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfNQq9Vr95vxAJjEkYuKGPFx4LBno59gwuRH2BeHLU8Q/0/323830343a383530343a3a2f33322d313238203d3e20323732353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8504::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:56:4e:c6:52:43:90:81:9e:bb:6f:47:e1:b1:6d:3c:55:54:
         86:92:6d:98:46:32:f2:ae:2b:b7:63:25:dd:35:8b:70:58:c6:
         c5:d8:88:99:fc:a5:af:dc:9d:90:64:60:92:eb:9e:e9:0c:b9:
         76:59:fc:50:83:ef:2b:b3:c1:3b:18:58:6e:b2:b3:11:04:eb:
         52:f5:d2:d4:01:4b:8b:a1:5b:d2:9e:23:6c:dd:4f:2f:c8:37:
         dd:d9:4e:e4:5b:23:bf:85:13:18:0e:ff:d9:ab:e0:2e:f6:ca:
         9f:c3:1f:98:5c:1e:08:01:fd:25:b3:b7:1e:1f:9c:47:cf:ed:
         41:2e:84:b7:28:3b:86:35:68:6b:21:50:b1:ad:e0:cf:96:19:
         c8:eb:55:f6:4f:33:15:84:b6:e3:05:2b:24:ea:fe:2f:e8:76:
         4e:64:5c:9f:4b:04:22:47:95:8f:57:24:fd:74:c4:84:c9:74:
         e5:37:76:75:fc:38:11:b6:eb:46:06:97:de:89:d9:f8:38:90:
         57:24:d5:a1:c3:1b:bd:a6:01:3c:84:90:76:29:36:d3:89:41:
         6e:c0:19:bb:58:4b:3a:70:87:ec:bb:9b:ec:24:46:92:21:46:
         b9:c8:92:32:ed:9e:49:7b:5a:50:4a:05:0e:c2:02:bc:3d:ec:
         9b:ff:7a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:59:11 2026 by rpki-client