Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/323830343a386662633a3a2f33322d313238203d3e20323733353038.roa
File:                     323830343a386662633a3a2f33322d313238203d3e20323733353038.roa (raw, json)
Hash identifier:          eT8k/oSvy6Wo8pOI25vF2CnpgQx5rZEFpajWLaENu2Q=
Subject key identifier:   41:DD:D0:B7:DC:A1:12:C4:D1:84:18:D0:2B:CC:91:C3:10:A8:31:E9
Certificate issuer:       /CN=4F13601ED15DE77633F89012A7D2AD0E725C8891
Certificate serial:       5DA7C19519880D8817E9F4A733F53E532AE3D585
Authority key identifier: 4F:13:60:1E:D1:5D:E7:76:33:F8:90:12:A7:D2:AD:0E:72:5C:88:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F13601ED15DE77633F89012A7D2AD0E725C8891.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/323830343a386662633a3a2f33322d313238203d3e20323733353038.roa
Signing time:             Fri 17 Apr 2026 14:35:26 +0000
ROA not before:           Fri 17 Apr 2026 14:30:26 +0000
ROA not after:            Fri 16 Apr 2027 14:35:26 +0000
asID:                     273508
IP address blocks:        2804:8fbc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/4F13601ED15DE77633F89012A7D2AD0E725C8891.crl
                          rsync://rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/4F13601ED15DE77633F89012A7D2AD0E725C8891.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F13601ED15DE77633F89012A7D2AD0E725C8891.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 15:48:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a7:c1:95:19:88:0d:88:17:e9:f4:a7:33:f5:3e:53:2a:e3:d5:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F13601ED15DE77633F89012A7D2AD0E725C8891
        Validity
            Not Before: Apr 17 14:30:26 2026 GMT
            Not After : Apr 16 14:35:26 2027 GMT
        Subject: CN=41DDD0B7DCA112C4D18418D02BCC91C310A831E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f2:3b:86:5e:ed:66:62:fa:60:1e:27:25:47:
                    8d:de:3f:c6:aa:aa:d0:fa:de:51:a7:c4:35:4d:df:
                    3c:b4:8e:81:6b:e7:97:95:eb:d0:99:6a:45:69:97:
                    b5:f8:b3:b2:37:0d:0f:ec:eb:30:05:d9:29:bb:ed:
                    53:6b:b1:92:3f:c9:ad:fb:35:30:a8:29:a5:75:e7:
                    3e:f7:ae:fa:bb:4b:b2:70:e9:21:f0:fc:f1:ad:21:
                    10:77:b9:fc:2e:f5:b2:c3:4f:8d:b0:7d:53:5b:8c:
                    a6:1b:0a:07:4f:4c:25:24:1f:61:40:f8:88:f5:67:
                    51:39:2d:fe:a6:0d:52:65:a4:e4:31:a8:bf:dd:33:
                    46:eb:97:7c:0a:56:57:6b:f5:9c:90:16:04:c1:7b:
                    7b:2f:d7:24:57:1e:03:32:7a:6d:d4:8e:be:bc:b0:
                    b6:83:77:4c:e5:c8:91:09:fb:7d:99:6d:c0:75:70:
                    e2:73:7b:6a:9b:27:ac:3a:15:64:23:1c:38:1f:2b:
                    90:61:a8:5d:f3:58:24:98:a4:6e:5d:90:49:c7:85:
                    ca:5f:18:b5:d2:be:46:32:2f:01:c5:da:50:43:56:
                    57:66:40:01:8f:0a:71:4c:9c:0c:33:0f:ea:da:e6:
                    77:1b:49:cd:fb:51:0e:dc:4a:4d:f9:f0:1f:e6:31:
                    20:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:DD:D0:B7:DC:A1:12:C4:D1:84:18:D0:2B:CC:91:C3:10:A8:31:E9
            X509v3 Authority Key Identifier:
                keyid:4F:13:60:1E:D1:5D:E7:76:33:F8:90:12:A7:D2:AD:0E:72:5C:88:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/4F13601ED15DE77633F89012A7D2AD0E725C8891.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F13601ED15DE77633F89012A7D2AD0E725C8891.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BZUUFvvfzLrNnZnN1MheN2BpzkbYXJ98mbugZjEGjBgR/0/323830343a386662633a3a2f33322d313238203d3e20323733353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8fbc::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:75:63:fc:d5:5b:a4:a2:77:28:4a:7c:7d:09:d7:be:32:8d:
         95:b3:36:bf:c8:4d:54:cf:8b:9b:93:67:c4:9d:35:0d:2a:d9:
         83:ac:c3:a1:db:97:72:aa:50:8b:44:90:04:fc:fb:93:69:19:
         86:e6:fc:c0:29:94:c4:e1:16:0c:23:0a:26:d9:80:c8:fe:59:
         ec:37:10:ca:bc:ad:48:06:52:33:78:1b:57:83:37:18:72:71:
         4f:3f:b2:d9:d4:4c:d1:3a:0a:0b:19:9c:fb:de:77:16:36:28:
         f1:0b:93:cd:c0:c2:51:b5:b0:d0:55:84:00:e5:e3:30:42:99:
         3e:6f:94:90:22:63:f2:eb:1a:ad:bf:07:2f:d7:70:63:3c:c8:
         51:5d:2b:99:2e:d2:11:18:cd:10:fb:a0:ff:7f:3d:65:83:78:
         67:d6:02:ea:42:98:2b:33:08:92:12:f0:41:61:0b:0f:4a:74:
         f1:53:a7:c1:96:64:03:08:fb:9f:fb:5c:aa:27:d9:ee:51:12:
         a5:c4:43:e8:24:59:1b:fe:39:b7:11:e0:f0:f8:fa:2e:f4:94:
         7c:b4:cc:1a:2d:d7:c4:f2:7e:f1:3c:cd:2d:3b:8f:fe:cc:e2:
         48:63:fc:ab:45:7f:50:93:49:59:57:c2:06:91:34:52:24:77:
         a4:a5:28:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:11:30 2026 by rpki-client