Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KsQrLB47KH4UgvK73rTAigXieDMceMe8h5hHLZzEFnr/0/323830343a373164303a3a2f33332d3333203d3e20323730383133.roa
File:                     323830343a373164303a3a2f33332d3333203d3e20323730383133.roa (raw, json)
Hash identifier:          I/FE1wsWKJLO4zFpvng8WPqEmXXUaNWJ4ggP1OOGS4k=
Subject key identifier:   BD:AA:A1:43:6B:7E:32:A0:D9:9D:5E:80:58:6B:18:87:C9:3E:7F:55
Certificate issuer:       /CN=983D147131A7E86DB9F7D675A0685BDD6C4F2328
Certificate serial:       422BF4D900A6102B3133D435EF1C31A69CE2B179
Authority key identifier: 98:3D:14:71:31:A7:E8:6D:B9:F7:D6:75:A0:68:5B:DD:6C:4F:23:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/983D147131A7E86DB9F7D675A0685BDD6C4F2328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KsQrLB47KH4UgvK73rTAigXieDMceMe8h5hHLZzEFnr/0/323830343a373164303a3a2f33332d3333203d3e20323730383133.roa
Signing time:             Mon 13 Apr 2026 15:31:18 +0000
ROA not before:           Mon 13 Apr 2026 15:26:18 +0000
ROA not after:            Mon 12 Apr 2027 15:31:18 +0000
asID:                     270813
IP address blocks:        2804:71d0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KsQrLB47KH4UgvK73rTAigXieDMceMe8h5hHLZzEFnr/0/983D147131A7E86DB9F7D675A0685BDD6C4F2328.crl
                          rsync://rpki-repo.registro.br/repo/7KsQrLB47KH4UgvK73rTAigXieDMceMe8h5hHLZzEFnr/0/983D147131A7E86DB9F7D675A0685BDD6C4F2328.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/983D147131A7E86DB9F7D675A0685BDD6C4F2328.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 15:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:2b:f4:d9:00:a6:10:2b:31:33:d4:35:ef:1c:31:a6:9c:e2:b1:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983D147131A7E86DB9F7D675A0685BDD6C4F2328
        Validity
            Not Before: Apr 13 15:26:18 2026 GMT
            Not After : Apr 12 15:31:18 2027 GMT
        Subject: CN=BDAAA1436B7E32A0D99D5E80586B1887C93E7F55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3b:a2:96:09:51:23:4d:4e:96:e7:2f:ec:83:
                    51:9c:02:e5:03:bf:32:b8:fe:69:c2:84:94:7e:29:
                    de:f5:45:5d:77:82:e4:5e:c3:52:fa:23:57:ed:30:
                    d5:e0:87:82:89:96:66:a3:ab:2b:2a:43:ac:b5:09:
                    4c:8d:79:2e:f9:22:32:c3:6e:65:05:01:a1:70:e5:
                    be:8c:5e:b3:5c:f9:f2:7b:49:b0:b0:b9:2f:74:5f:
                    e9:3d:09:81:1a:41:89:ae:79:56:87:86:55:6d:f8:
                    3b:e3:f8:06:c7:4d:db:e5:1f:08:5b:aa:5a:1b:27:
                    37:3b:49:08:34:e1:7f:1f:52:14:c5:b6:b9:a7:1c:
                    18:ab:09:c1:7f:a4:f3:ee:f8:92:1a:19:e8:f5:8b:
                    c7:41:74:a2:93:ff:95:7a:4a:ad:b2:06:51:f0:b9:
                    68:9d:dd:19:d9:a9:6c:45:35:ec:11:52:b5:db:ac:
                    86:0c:9c:ab:d8:76:e4:14:cd:8e:29:b5:6b:8c:b2:
                    49:88:2c:c8:28:9f:5f:89:2a:b7:b6:4e:f7:b2:86:
                    c8:9f:87:58:72:48:2b:26:3a:d7:73:06:67:e9:a2:
                    49:1f:47:c5:aa:fc:db:98:c8:80:20:95:12:a6:4a:
                    65:c1:e5:37:c7:48:f0:56:d7:e5:7a:d6:97:47:e5:
                    6d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AA:A1:43:6B:7E:32:A0:D9:9D:5E:80:58:6B:18:87:C9:3E:7F:55
            X509v3 Authority Key Identifier:
                keyid:98:3D:14:71:31:A7:E8:6D:B9:F7:D6:75:A0:68:5B:DD:6C:4F:23:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KsQrLB47KH4UgvK73rTAigXieDMceMe8h5hHLZzEFnr/0/983D147131A7E86DB9F7D675A0685BDD6C4F2328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/983D147131A7E86DB9F7D675A0685BDD6C4F2328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KsQrLB47KH4UgvK73rTAigXieDMceMe8h5hHLZzEFnr/0/323830343a373164303a3a2f33332d3333203d3e20323730383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:71d0::/33

    Signature Algorithm: sha256WithRSAEncryption
         1d:12:dc:3c:7f:dc:68:31:e8:f8:c8:cb:3c:b6:22:0c:c8:7e:
         1a:ff:b0:45:50:f1:12:28:60:c6:0c:e6:49:dd:df:d4:44:3b:
         85:e0:50:23:f1:05:b1:5a:97:78:fa:0e:f5:ed:13:d5:8d:aa:
         98:68:08:c9:2a:cc:7f:50:07:37:db:b5:a4:41:e3:42:a0:8c:
         8b:fc:f4:66:05:49:ea:03:61:1a:e1:fc:4d:50:75:32:22:a9:
         ae:5a:05:2f:d0:06:23:2d:b0:5f:cd:00:9b:2e:c8:ea:a5:b7:
         e4:66:d2:f8:72:ac:9e:a2:4a:28:4c:12:32:e7:c8:8f:5a:b4:
         03:5a:b0:3d:24:a0:50:10:fd:aa:91:cf:74:35:17:f1:6e:7c:
         a3:69:9a:d1:ad:b4:43:ca:a8:07:e5:cf:91:fe:0a:b4:95:14:
         16:86:b7:43:b1:f3:1a:d3:4d:e0:ed:54:55:ed:75:d1:2f:70:
         5c:a0:4c:f9:31:a1:60:83:f7:2c:a5:8b:81:a5:d1:5f:f8:8f:
         83:df:62:e8:42:1b:d6:30:70:f0:77:35:ac:b7:9e:94:28:c9:
         ee:6d:37:f6:a7:53:8c:af:e7:99:bb:32:1a:29:72:8a:a2:75:
         2a:f0:8e:a5:12:31:ca:de:cc:c1:83:36:ea:19:22:be:6f:fc:
         07:3d:d1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:33:27 2026 by rpki-client