Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/0/323830343a323761383a383030303a3a2f33342d3334203d3e20323633393135.roa
File:                     323830343a323761383a383030303a3a2f33342d3334203d3e20323633393135.roa (raw, json)
Hash identifier:          FbBdBljTCFb4GFjJmXe/b40n0/0clyMJlREVzTZoUZc=
Subject key identifier:   15:3E:8A:76:80:8F:47:41:DE:DE:87:59:28:B9:49:3C:B4:E3:13:20
Certificate issuer:       /CN=DCF2B01B127E8147448A26DC2DD6E136430B7F01
Certificate serial:       317EE531A75454D10BF64DEFBA7EA9468C5935A1
Authority key identifier: DC:F2:B0:1B:12:7E:81:47:44:8A:26:DC:2D:D6:E1:36:43:0B:7F:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCF2B01B127E8147448A26DC2DD6E136430B7F01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/0/323830343a323761383a383030303a3a2f33342d3334203d3e20323633393135.roa
Signing time:             Thu 09 Apr 2026 13:12:20 +0000
ROA not before:           Thu 09 Apr 2026 13:07:20 +0000
ROA not after:            Thu 08 Apr 2027 13:12:20 +0000
asID:                     263915
IP address blocks:        2804:27a8:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/0/DCF2B01B127E8147448A26DC2DD6E136430B7F01.crl
                          rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/0/DCF2B01B127E8147448A26DC2DD6E136430B7F01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCF2B01B127E8147448A26DC2DD6E136430B7F01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 Apr 2026 19:56:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:7e:e5:31:a7:54:54:d1:0b:f6:4d:ef:ba:7e:a9:46:8c:59:35:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCF2B01B127E8147448A26DC2DD6E136430B7F01
        Validity
            Not Before: Apr  9 13:07:20 2026 GMT
            Not After : Apr  8 13:12:20 2027 GMT
        Subject: CN=153E8A76808F4741DEDE875928B9493CB4E31320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fd:5c:67:46:29:72:92:95:5d:ee:f6:c5:bf:
                    10:55:8d:9c:cb:1f:51:c5:d9:b5:9e:e0:d8:ae:a5:
                    d1:f1:88:c2:1e:5f:f3:6d:4e:22:76:19:30:cd:f8:
                    2f:1e:f0:c5:c2:98:f8:10:78:82:ad:7a:89:75:b5:
                    7f:f2:29:ab:53:51:66:ba:22:51:c5:3c:28:95:ff:
                    16:0d:bb:5b:81:b2:8b:ad:ff:28:b0:50:64:ae:f7:
                    0f:87:92:4e:5e:a3:4f:c9:e4:89:cd:a5:86:a5:cb:
                    e5:df:22:2c:ce:d6:76:9b:33:91:78:2e:c4:d0:f7:
                    3c:27:92:50:20:8a:b7:ba:9e:e7:64:7c:ed:7b:de:
                    32:af:89:2c:af:22:9d:7c:0e:f6:db:c4:93:8a:b1:
                    8c:68:19:f4:b8:58:7a:6f:1a:cc:56:42:db:ae:1c:
                    4a:ee:0f:23:75:22:9e:5e:4c:c5:1f:2f:8b:19:0f:
                    59:ca:c0:84:0f:cf:77:8c:91:c7:62:9f:17:c1:b4:
                    0d:cb:27:25:d0:00:5c:71:fb:2d:61:e7:41:a3:b8:
                    fd:63:a9:b7:b5:c7:c2:fd:64:23:1e:79:90:94:6c:
                    ea:c7:6a:a8:1d:a1:67:02:de:90:1b:8e:76:8e:53:
                    fa:79:c5:3a:77:9b:40:82:06:02:9e:23:b2:21:51:
                    cf:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3E:8A:76:80:8F:47:41:DE:DE:87:59:28:B9:49:3C:B4:E3:13:20
            X509v3 Authority Key Identifier:
                keyid:DC:F2:B0:1B:12:7E:81:47:44:8A:26:DC:2D:D6:E1:36:43:0B:7F:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/0/DCF2B01B127E8147448A26DC2DD6E136430B7F01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCF2B01B127E8147448A26DC2DD6E136430B7F01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/0/323830343a323761383a383030303a3a2f33342d3334203d3e20323633393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27a8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3c:d9:7c:61:29:0d:b2:73:a7:db:fc:93:d1:05:8c:e3:de:1c:
         b3:3b:65:0c:d0:9b:74:c0:e0:78:95:b2:d3:ad:60:a9:1b:be:
         d6:29:3b:b7:f1:68:7f:f4:ae:a1:eb:31:78:12:97:3b:ce:c6:
         6f:f6:c4:d6:8c:e2:49:a1:a3:cf:b8:1b:9a:59:05:24:f6:a8:
         d2:b8:3f:0c:ce:f0:7a:bd:4f:b2:04:52:27:76:e8:c5:ca:ff:
         7e:a5:8f:25:0c:4b:04:03:5e:0f:75:0a:f4:ce:25:7e:cf:07:
         05:ca:58:5a:3a:82:07:ec:76:ff:b5:e9:90:5a:be:4f:bd:a6:
         4e:f0:18:84:df:71:a1:00:b2:b9:20:78:51:5d:5f:02:e4:b8:
         4d:a6:4a:aa:d8:ed:26:15:72:af:70:e3:b7:a9:56:3b:73:38:
         d6:c2:2a:23:7e:35:d9:72:84:20:bd:0a:47:9c:43:52:91:e7:
         59:11:28:8e:d8:86:17:fb:64:bc:35:4c:17:8b:d7:13:3a:1e:
         7d:a9:5c:05:9a:86:3b:a9:27:1d:9d:3c:5f:36:d3:11:21:76:
         cc:e5:4b:07:0d:2a:38:4b:56:9c:a1:41:7a:03:b5:48:5d:06:
         5b:fb:ca:43:8d:0a:44:7f:a1:51:4a:f1:17:a2:8f:21:4d:70:
         75:ed:33:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 00:51:24 2026 by rpki-client