Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMVwJ2HAQi8rzGiv1Vi9PmCAoFqiChpni6T2SzJrZ24G/0/323830343a393336343a3a2f33322d3332203d3e20323734373734.roa
File:                     323830343a393336343a3a2f33322d3332203d3e20323734373734.roa (raw, json)
Hash identifier:          SdQepmuKqMXCH+Ln/pdMEMFCvjxnclTyIHAs8E8D3uE=
Subject key identifier:   35:5E:2F:D8:D9:B8:58:08:5E:9C:25:D2:FF:B2:B8:38:48:35:5C:EC
Certificate issuer:       /CN=58A28FA55A129B3ED7724531E87F15ECD22B918D
Certificate serial:       54FA12A6ED68549DD5F0F039402F993F49B55E39
Authority key identifier: 58:A2:8F:A5:5A:12:9B:3E:D7:72:45:31:E8:7F:15:EC:D2:2B:91:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A28FA55A129B3ED7724531E87F15ECD22B918D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMVwJ2HAQi8rzGiv1Vi9PmCAoFqiChpni6T2SzJrZ24G/0/323830343a393336343a3a2f33322d3332203d3e20323734373734.roa
Signing time:             Thu 02 Apr 2026 21:54:36 +0000
ROA not before:           Thu 02 Apr 2026 21:49:36 +0000
ROA not after:            Thu 01 Apr 2027 21:54:36 +0000
asID:                     274774
IP address blocks:        2804:9364::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BMVwJ2HAQi8rzGiv1Vi9PmCAoFqiChpni6T2SzJrZ24G/0/58A28FA55A129B3ED7724531E87F15ECD22B918D.crl
                          rsync://rpki-repo.registro.br/repo/BMVwJ2HAQi8rzGiv1Vi9PmCAoFqiChpni6T2SzJrZ24G/0/58A28FA55A129B3ED7724531E87F15ECD22B918D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A28FA55A129B3ED7724531E87F15ECD22B918D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 23:41:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:fa:12:a6:ed:68:54:9d:d5:f0:f0:39:40:2f:99:3f:49:b5:5e:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58A28FA55A129B3ED7724531E87F15ECD22B918D
        Validity
            Not Before: Apr  2 21:49:36 2026 GMT
            Not After : Apr  1 21:54:36 2027 GMT
        Subject: CN=355E2FD8D9B858085E9C25D2FFB2B83848355CEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1c:1f:26:fd:27:cc:fd:5d:f9:9a:0e:0c:1e:
                    2e:56:c8:80:95:c3:d7:fc:09:bd:8b:ab:34:93:c0:
                    46:6b:3f:ff:71:c3:82:2f:9c:47:0b:bf:00:23:c6:
                    78:6f:6b:80:aa:69:00:65:5b:d3:c5:3b:b2:69:53:
                    e3:82:c6:90:3d:98:5a:d9:21:4d:17:6b:75:da:1f:
                    1d:15:21:06:af:ce:15:43:b6:55:97:f1:92:62:a7:
                    3b:90:5f:74:af:76:01:6c:1a:fb:d9:44:40:f5:71:
                    47:9f:0f:4c:8d:d4:0e:49:da:63:fd:87:b3:40:d6:
                    fa:ca:94:0b:dc:28:7b:12:cf:3e:02:d0:e5:56:b2:
                    8e:23:8c:5a:ca:d1:35:e6:6c:ee:c9:23:13:50:fb:
                    6d:3c:27:38:f2:7f:7c:94:99:55:d5:f1:a9:d3:e2:
                    46:30:72:46:9a:7a:bb:6e:72:26:4b:ef:0a:ab:dc:
                    39:9e:db:1a:5f:9e:4d:0e:09:48:0a:63:94:9f:60:
                    02:86:ea:e9:98:d7:bc:77:e2:46:5a:d7:9d:c0:5c:
                    4b:87:e2:83:12:1c:de:37:f9:96:e4:9c:50:52:eb:
                    05:cc:08:82:3f:87:31:41:12:ce:6e:09:db:62:86:
                    03:d0:20:ac:ac:2a:6a:7c:35:58:21:ac:28:47:9b:
                    5b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5E:2F:D8:D9:B8:58:08:5E:9C:25:D2:FF:B2:B8:38:48:35:5C:EC
            X509v3 Authority Key Identifier:
                keyid:58:A2:8F:A5:5A:12:9B:3E:D7:72:45:31:E8:7F:15:EC:D2:2B:91:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMVwJ2HAQi8rzGiv1Vi9PmCAoFqiChpni6T2SzJrZ24G/0/58A28FA55A129B3ED7724531E87F15ECD22B918D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A28FA55A129B3ED7724531E87F15ECD22B918D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMVwJ2HAQi8rzGiv1Vi9PmCAoFqiChpni6T2SzJrZ24G/0/323830343a393336343a3a2f33322d3332203d3e20323734373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9364::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:55:a6:c8:9c:12:85:d6:8c:e9:67:82:d3:04:f6:e4:e6:64:
         a9:f8:f0:10:dd:cc:3b:23:4b:71:02:64:01:90:d3:c8:2f:dd:
         27:db:93:78:27:76:b5:5d:68:06:e2:84:f7:1b:64:a6:44:ce:
         d7:37:b3:d3:18:7c:9a:ff:cb:df:cd:2d:99:f8:bb:a6:9a:aa:
         7f:3a:16:fc:0c:9d:a5:33:72:74:a9:ec:59:05:fd:b9:16:c1:
         8f:92:b0:4c:7a:70:1c:05:98:ea:7f:1c:f3:4e:fd:83:88:79:
         32:95:a1:24:ec:40:28:16:15:56:e7:4c:c9:cd:a7:74:86:e5:
         8b:0c:6b:b4:d4:3e:53:59:63:29:d9:d9:f4:e5:9e:30:10:21:
         9e:13:ed:cc:fe:5e:0c:06:67:23:6f:22:f4:2c:79:4a:92:0b:
         99:21:be:51:b4:68:75:48:84:12:0a:8b:41:73:96:22:d0:61:
         1e:58:56:81:03:10:a5:6b:4e:ae:55:f1:6e:e7:32:87:70:28:
         7c:62:78:54:4c:c2:f5:dd:a6:44:33:ea:70:98:d8:3f:37:63:
         fb:0a:4b:dc:5d:ff:90:cf:28:2c:8c:9e:1f:77:85:91:a6:64:
         97:a6:9f:7b:95:03:1d:19:17:fb:e6:da:ca:c5:98:cd:75:ba:
         0e:94:f6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:18:24 2026 by rpki-client