Route Origin Authorization

$ rpki-client -vvvf rpki.n3solucoes.com.br/repo/n3solucoes/0/323830343a353961343a3a2f33322d3334203d3e20323638373135.roa
File:                     323830343a353961343a3a2f33322d3334203d3e20323638373135.roa (raw, json)
Hash identifier:          iy4rX3/eQM1XpUm1waPkLyu+KNVjA+dCXj4Bqv90CS4=
Subject key identifier:   78:6D:2E:4C:71:71:46:5F:35:1C:87:25:81:F4:7B:73:22:B4:37:74
Certificate issuer:       /CN=C596687E885EF43C0C33F7C76310AA3F116F81BE
Certificate serial:       583E7E5EF68AB1C7A575CBE12F3A1982CE53A75E
Authority key identifier: C5:96:68:7E:88:5E:F4:3C:0C:33:F7:C7:63:10:AA:3F:11:6F:81:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C596687E885EF43C0C33F7C76310AA3F116F81BE.cer
Subject info access:      rsync://rpki.n3solucoes.com.br/repo/n3solucoes/0/323830343a353961343a3a2f33322d3334203d3e20323638373135.roa
Signing time:             Wed 12 Aug 2026 19:49:29 +0000
ROA not before:           Wed 12 Aug 2026 19:44:29 +0000
ROA not after:            Wed 11 Aug 2027 19:49:29 +0000
asID:                     268715
IP address blocks:        2804:59a4::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.n3solucoes.com.br/repo/n3solucoes/0/C596687E885EF43C0C33F7C76310AA3F116F81BE.crl
                          rsync://rpki.n3solucoes.com.br/repo/n3solucoes/0/C596687E885EF43C0C33F7C76310AA3F116F81BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C596687E885EF43C0C33F7C76310AA3F116F81BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 19:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:3e:7e:5e:f6:8a:b1:c7:a5:75:cb:e1:2f:3a:19:82:ce:53:a7:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C596687E885EF43C0C33F7C76310AA3F116F81BE
        Validity
            Not Before: Aug 12 19:44:29 2026 GMT
            Not After : Aug 11 19:49:29 2027 GMT
        Subject: CN=786D2E4C7171465F351C872581F47B7322B43774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:46:77:6d:58:1a:e3:08:2d:26:b4:bc:14:f6:
                    27:d1:0c:13:88:02:1f:e9:23:b7:f4:17:e4:58:39:
                    c7:fd:fd:a1:12:40:ac:9f:4b:21:8f:16:6b:33:f6:
                    48:3b:95:07:5b:96:2b:ba:72:24:b2:4e:52:a6:ca:
                    60:c0:6b:ea:62:d0:1f:18:13:40:5c:ff:ff:e1:f6:
                    32:42:ed:8b:19:01:fc:5e:46:d0:28:05:0c:b1:57:
                    8b:97:25:11:1b:de:df:d7:a2:75:12:e6:0b:3f:91:
                    89:c4:27:25:d0:62:e1:0c:e5:06:9c:c9:9f:c6:0a:
                    87:07:2b:c7:ba:ca:f8:a3:6f:b2:13:7e:fd:fb:d1:
                    4c:3b:98:2e:e9:25:cc:87:fe:86:a2:c1:5e:dc:53:
                    1e:4c:a8:ab:5f:22:cb:52:6e:0c:34:f0:2e:f1:0b:
                    65:e7:92:14:51:4a:2d:bd:b9:2e:4a:d3:11:46:fd:
                    28:92:59:5c:a6:9c:cb:ec:26:6d:a6:cc:57:f9:f5:
                    27:2a:54:d9:c8:38:af:cb:ef:4e:9c:58:34:2e:d5:
                    90:72:34:7c:5b:4d:e1:14:60:11:24:f4:0c:0a:43:
                    d6:64:f8:74:c9:ea:16:e2:48:0c:f0:0a:43:94:37:
                    d8:86:74:7e:01:de:10:27:05:1a:42:18:34:45:b4:
                    4c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:6D:2E:4C:71:71:46:5F:35:1C:87:25:81:F4:7B:73:22:B4:37:74
            X509v3 Authority Key Identifier:
                keyid:C5:96:68:7E:88:5E:F4:3C:0C:33:F7:C7:63:10:AA:3F:11:6F:81:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.n3solucoes.com.br/repo/n3solucoes/0/C596687E885EF43C0C33F7C76310AA3F116F81BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C596687E885EF43C0C33F7C76310AA3F116F81BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.n3solucoes.com.br/repo/n3solucoes/0/323830343a353961343a3a2f33322d3334203d3e20323638373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:9c:d0:26:0f:5c:01:3f:a7:f7:9d:5a:2a:aa:89:60:a4:74:
         8f:2a:14:7b:75:1e:b7:cf:88:fa:8c:3b:14:33:66:8c:02:13:
         ea:9b:f4:49:65:4c:63:d1:a9:dc:5d:b8:33:90:9e:53:16:45:
         3b:28:1f:f7:85:09:3a:07:14:11:ac:95:24:55:c2:80:d0:1d:
         18:61:bd:92:01:83:1c:ea:de:df:dd:ef:8d:22:84:2f:8b:6e:
         56:b1:da:98:52:6f:13:ac:93:a0:ac:ba:62:7c:42:aa:2b:60:
         64:67:84:73:24:ff:53:3a:55:b9:53:7a:0a:ad:7a:89:ce:e4:
         ae:4f:d9:d3:09:0e:1c:17:d0:89:d3:d7:f9:ee:66:68:c4:0e:
         64:29:9b:c6:96:ec:a2:54:6c:5d:e0:18:e2:8d:6d:82:c0:e9:
         5c:7e:c1:d0:72:74:21:2f:c3:57:d4:8d:40:58:eb:de:a8:4c:
         aa:32:74:9f:e1:4d:d6:6a:7c:8b:55:ea:20:34:a2:af:cc:0c:
         00:a6:2d:d4:59:03:96:72:aa:14:d3:87:1b:2d:62:9e:b2:6b:
         16:0b:73:29:bf:7c:aa:7b:b7:b6:38:0f:28:f7:75:7e:28:a5:
         55:2f:e9:53:00:8d:77:88:c0:2e:0e:d3:78:49:01:a1:30:88:
         fa:39:04:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 05:53:47 2026 by rpki-client