Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7SJGduP7QWRqCRvTofYhEqkdEYrfy1a8WXSv9jf935Ce/0/323830343a383034343a3a2f33322d313238203d3e20323731373430.roa
File:                     323830343a383034343a3a2f33322d313238203d3e20323731373430.roa (raw, json)
Hash identifier:          moijT2KSvNZf+47lw++LtmTd+Nlgx6LY5RUMIJ4Tjxo=
Subject key identifier:   08:1B:01:F4:85:E8:4F:30:F3:58:FB:E7:D7:9A:02:CA:73:82:34:99
Certificate issuer:       /CN=57C0EB8D1464B36C7C008A1E5B148F3D44C32AE5
Certificate serial:       3B1F0040D9A15F8C0A041A89B8F8572F1A6D753F
Authority key identifier: 57:C0:EB:8D:14:64:B3:6C:7C:00:8A:1E:5B:14:8F:3D:44:C3:2A:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57C0EB8D1464B36C7C008A1E5B148F3D44C32AE5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7SJGduP7QWRqCRvTofYhEqkdEYrfy1a8WXSv9jf935Ce/0/323830343a383034343a3a2f33322d313238203d3e20323731373430.roa
Signing time:             Thu 09 Apr 2026 14:31:07 +0000
ROA not before:           Thu 09 Apr 2026 14:26:07 +0000
ROA not after:            Thu 08 Apr 2027 14:31:07 +0000
asID:                     271740
IP address blocks:        2804:8044::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7SJGduP7QWRqCRvTofYhEqkdEYrfy1a8WXSv9jf935Ce/0/57C0EB8D1464B36C7C008A1E5B148F3D44C32AE5.crl
                          rsync://rpki-repo.registro.br/repo/7SJGduP7QWRqCRvTofYhEqkdEYrfy1a8WXSv9jf935Ce/0/57C0EB8D1464B36C7C008A1E5B148F3D44C32AE5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57C0EB8D1464B36C7C008A1E5B148F3D44C32AE5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 19:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:1f:00:40:d9:a1:5f:8c:0a:04:1a:89:b8:f8:57:2f:1a:6d:75:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57C0EB8D1464B36C7C008A1E5B148F3D44C32AE5
        Validity
            Not Before: Apr  9 14:26:07 2026 GMT
            Not After : Apr  8 14:31:07 2027 GMT
        Subject: CN=081B01F485E84F30F358FBE7D79A02CA73823499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ad:e6:d1:4a:d3:bc:74:dc:52:5c:44:25:aa:
                    11:5b:ff:0b:35:ec:f7:e5:45:a6:c6:02:95:4f:57:
                    f0:a4:b8:b3:df:70:25:8b:0f:f3:d1:49:a7:9f:e2:
                    e4:59:29:14:5a:41:c4:35:7a:a8:51:21:8b:42:35:
                    6e:8f:c1:ff:f6:b7:bd:21:97:dd:1d:69:66:33:74:
                    c1:6e:1d:db:4f:23:d1:c2:06:d9:01:f0:04:08:34:
                    09:56:fa:24:8e:e6:07:fa:ea:b0:3b:ee:57:79:ad:
                    3e:08:bc:85:fb:25:0e:64:55:64:86:a6:b9:b7:2a:
                    73:1d:ef:87:6e:3e:00:f4:f8:63:e3:19:f6:26:34:
                    39:0c:ad:d6:89:57:b4:ec:d0:69:c9:12:ad:31:43:
                    53:07:e4:81:94:76:a7:4b:22:f0:7c:35:bf:b6:40:
                    eb:0f:ce:3d:86:b7:1f:ab:cc:82:d6:f0:34:65:15:
                    5b:b5:de:ef:b8:79:6d:1b:3c:8b:9c:4d:25:f3:77:
                    eb:74:d4:36:9c:c2:e0:38:3b:55:98:06:ff:48:b6:
                    64:34:0c:1d:59:74:67:3b:4d:79:90:59:ca:13:96:
                    03:a7:b1:e6:3e:98:f0:9c:72:b0:61:eb:9e:2d:e8:
                    e2:e4:2f:51:94:e3:e8:d7:3a:45:21:fb:7b:a6:df:
                    d1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:1B:01:F4:85:E8:4F:30:F3:58:FB:E7:D7:9A:02:CA:73:82:34:99
            X509v3 Authority Key Identifier:
                keyid:57:C0:EB:8D:14:64:B3:6C:7C:00:8A:1E:5B:14:8F:3D:44:C3:2A:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7SJGduP7QWRqCRvTofYhEqkdEYrfy1a8WXSv9jf935Ce/0/57C0EB8D1464B36C7C008A1E5B148F3D44C32AE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57C0EB8D1464B36C7C008A1E5B148F3D44C32AE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7SJGduP7QWRqCRvTofYhEqkdEYrfy1a8WXSv9jf935Ce/0/323830343a383034343a3a2f33322d313238203d3e20323731373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8044::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:ad:0d:b1:59:6a:82:1c:cb:99:1f:d3:06:d4:6d:a6:47:dd:
         76:63:a5:bf:a1:d2:2e:43:23:ed:c1:fd:b3:97:3d:fe:ff:2f:
         51:48:ee:75:a5:8a:3c:46:44:31:8e:f3:56:70:7b:66:4a:a2:
         d3:b5:e3:7c:c4:55:eb:a0:38:ec:d1:f6:e8:e8:3e:3c:d9:53:
         05:0d:98:ae:8c:0f:3a:12:24:ac:74:b2:6e:40:d6:53:9c:d6:
         5f:d6:0f:2f:06:d5:91:ff:cc:9e:93:16:b9:1b:ab:8e:2d:43:
         84:a2:e0:14:63:fb:27:34:52:72:7b:77:e4:d8:84:28:64:b9:
         95:5d:3c:a8:81:c8:99:0c:17:0f:47:62:58:32:28:66:43:e5:
         f3:29:d9:db:30:ae:5b:4e:5c:41:72:ed:2f:e7:78:67:00:57:
         0c:50:23:f9:51:80:3a:88:19:a1:12:3a:1a:4d:c3:07:eb:c9:
         87:70:65:04:9f:af:74:b4:69:9f:f4:f1:49:46:6a:9e:e3:cf:
         e4:d5:80:58:04:57:ba:82:08:bc:03:ac:36:e0:b1:ac:82:be:
         af:dd:0e:8c:d4:bd:56:27:4d:bf:08:d8:fd:30:69:f2:24:e1:
         ea:65:b4:8c:b6:5b:ed:75:7e:63:f3:22:33:de:d0:4e:09:c2:
         8f:f5:8a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:03:01 2026 by rpki-client