Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/323830343a333034303a3a2f33322d3438203d3e20323634393339.roa
File:                     323830343a333034303a3a2f33322d3438203d3e20323634393339.roa (raw, json)
Hash identifier:          pGbuZ4I02GicRGimuFYo+NzJ1zt4gJsIryIhNtPUfjo=
Subject key identifier:   DF:20:4A:52:5F:D3:99:52:6B:F0:72:31:AD:9B:B3:02:96:5B:D3:97
Certificate issuer:       /CN=00A0649BEB784D778983813CFFD9D01F42F24C95
Certificate serial:       5393438ED733EE4DB0C289E483FAFA95776CD20E
Authority key identifier: 00:A0:64:9B:EB:78:4D:77:89:83:81:3C:FF:D9:D0:1F:42:F2:4C:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/323830343a333034303a3a2f33322d3438203d3e20323634393339.roa
Signing time:             Thu 09 Apr 2026 23:18:17 +0000
ROA not before:           Thu 09 Apr 2026 23:13:17 +0000
ROA not after:            Thu 08 Apr 2027 23:18:17 +0000
asID:                     264939
IP address blocks:        2804:3040::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.crl
                          rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 01:34:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:93:43:8e:d7:33:ee:4d:b0:c2:89:e4:83:fa:fa:95:77:6c:d2:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00A0649BEB784D778983813CFFD9D01F42F24C95
        Validity
            Not Before: Apr  9 23:13:17 2026 GMT
            Not After : Apr  8 23:18:17 2027 GMT
        Subject: CN=DF204A525FD399526BF07231AD9BB302965BD397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bf:20:95:f9:9a:96:8e:5d:5a:e0:41:05:f9:
                    59:f2:a8:ea:ed:5a:88:90:df:00:4e:00:40:5f:a3:
                    11:ee:ef:d3:30:8d:40:de:51:1d:99:c9:53:a8:9a:
                    75:19:c6:b1:f7:dd:03:77:ff:32:cb:b3:20:29:91:
                    1b:d5:5c:f1:40:44:2f:28:48:bd:fa:a2:c5:f5:bd:
                    9f:fb:bf:9e:86:8d:25:d9:61:61:00:94:73:f9:05:
                    f2:6f:b7:cc:53:34:5a:5e:4a:73:3b:ea:e7:9d:af:
                    ca:f2:27:32:cf:4a:8e:31:db:a8:b9:df:a2:b3:2f:
                    a5:14:f7:61:4f:3d:4d:2d:c9:ba:34:2c:53:95:e7:
                    4d:f9:34:51:68:fc:f4:82:06:11:a9:49:48:95:03:
                    1e:46:26:24:8a:16:6c:37:05:7d:0a:82:db:c5:4b:
                    a2:f5:93:be:b9:4a:f2:3c:50:d5:3a:0d:db:96:bc:
                    e1:6b:48:40:0f:41:ff:30:d5:66:d1:7d:80:fa:ac:
                    95:d7:52:64:1d:23:2f:15:3d:cd:f8:2f:68:10:04:
                    6f:35:89:28:20:1e:07:fd:27:00:0f:24:90:b5:09:
                    ed:74:26:51:ec:e5:29:02:74:3b:72:c3:09:13:71:
                    ed:60:1d:e7:ea:a5:5f:b9:f4:05:12:a3:e6:8e:1c:
                    a9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:20:4A:52:5F:D3:99:52:6B:F0:72:31:AD:9B:B3:02:96:5B:D3:97
            X509v3 Authority Key Identifier:
                keyid:00:A0:64:9B:EB:78:4D:77:89:83:81:3C:FF:D9:D0:1F:42:F2:4C:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/323830343a333034303a3a2f33322d3438203d3e20323634393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3040::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:32:02:6e:0b:58:6f:da:47:16:ca:4d:b2:0d:df:ab:77:be:
         12:68:12:a2:10:7a:66:3f:d2:2a:97:e4:d9:d9:da:be:cc:01:
         ba:02:15:8c:b7:db:9c:2a:0c:8f:e2:77:47:7e:68:3b:7e:f8:
         c1:a4:db:d9:65:ac:2c:0e:90:84:a6:99:43:77:3d:ed:14:af:
         74:2a:fc:44:b5:c7:db:92:e7:f5:60:e6:6f:09:89:a4:ac:03:
         3d:b5:e4:0c:28:e6:44:91:16:05:c2:d8:df:bf:51:40:56:50:
         05:33:94:53:1a:2d:f2:63:23:00:4e:fb:54:35:51:c2:7a:15:
         70:31:35:e6:50:5b:7c:f1:44:ae:92:3a:9f:4f:0e:b6:93:4e:
         0a:71:48:82:3b:52:c4:bd:25:c4:b8:b1:20:f4:8f:73:35:7a:
         62:93:27:e9:29:42:fe:d5:68:e5:ac:85:a3:42:c3:26:57:dd:
         a2:19:f7:57:89:24:50:91:16:a0:74:e7:8c:3c:90:1a:93:3a:
         9f:d5:2d:bd:9d:e4:e9:e9:1a:f8:2b:95:3c:dc:6a:40:d5:d4:
         5a:f5:e9:96:c3:9b:56:cb:08:05:c7:5b:1b:49:00:4f:6b:4c:
         aa:c8:9f:56:98:8d:f0:1b:ed:3e:7e:93:f2:26:43:7a:e0:5e:
         55:f6:7d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:37:53 2026 by rpki-client