Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFrmDUsqAE8dhmS7TmupCp4cJEXcXAm8ewV6iKRfJM2W/0/323830343a393763303a3a2f33322d3438203d3e20323735363433.roa
File:                     323830343a393763303a3a2f33322d3438203d3e20323735363433.roa (raw, json)
Hash identifier:          wiwUvddtT/CaN1irpfvMCqy6tm2vdMB+7vBmb1sY9gk=
Subject key identifier:   7E:F1:D2:A9:32:55:34:CD:6C:75:AB:FE:82:D0:2F:B0:73:A2:41:B6
Certificate issuer:       /CN=31DC0C0B281B0CB85FD521C54914660BD36614E3
Certificate serial:       74FE9E7B3B9C9079B4F6A750CF25DA4A62EF900D
Authority key identifier: 31:DC:0C:0B:28:1B:0C:B8:5F:D5:21:C5:49:14:66:0B:D3:66:14:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31DC0C0B281B0CB85FD521C54914660BD36614E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFrmDUsqAE8dhmS7TmupCp4cJEXcXAm8ewV6iKRfJM2W/0/323830343a393763303a3a2f33322d3438203d3e20323735363433.roa
Signing time:             Mon 02 Mar 2026 12:04:45 +0000
ROA not before:           Mon 02 Mar 2026 11:59:45 +0000
ROA not after:            Mon 01 Mar 2027 12:04:45 +0000
asID:                     275643
IP address blocks:        2804:97c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFrmDUsqAE8dhmS7TmupCp4cJEXcXAm8ewV6iKRfJM2W/0/31DC0C0B281B0CB85FD521C54914660BD36614E3.crl
                          rsync://rpki-repo.registro.br/repo/EFrmDUsqAE8dhmS7TmupCp4cJEXcXAm8ewV6iKRfJM2W/0/31DC0C0B281B0CB85FD521C54914660BD36614E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31DC0C0B281B0CB85FD521C54914660BD36614E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 14:44:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:fe:9e:7b:3b:9c:90:79:b4:f6:a7:50:cf:25:da:4a:62:ef:90:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31DC0C0B281B0CB85FD521C54914660BD36614E3
        Validity
            Not Before: Mar  2 11:59:45 2026 GMT
            Not After : Mar  1 12:04:45 2027 GMT
        Subject: CN=7EF1D2A9325534CD6C75ABFE82D02FB073A241B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9d:45:4c:14:ff:15:e1:00:29:84:88:51:b7:
                    88:b3:53:7b:58:ec:aa:be:82:78:64:2f:db:d8:86:
                    92:41:a7:78:d8:50:65:d6:6a:27:ee:1d:05:0f:16:
                    28:fc:13:7d:fb:c4:98:c1:73:78:db:58:c8:35:4c:
                    21:a2:3f:be:a8:f4:1a:0f:98:72:ce:ba:33:91:1c:
                    f5:38:bf:fa:81:a4:13:27:ff:21:ec:fe:93:27:7b:
                    98:c2:ee:c3:8d:d7:b0:b1:b0:b7:5e:d2:3f:1e:bc:
                    2a:07:82:40:26:93:68:47:81:7e:1b:74:83:46:2e:
                    82:17:f8:89:43:20:52:df:21:5b:0d:19:79:ed:e6:
                    e2:45:2f:8e:93:c4:99:ca:b9:1a:52:9b:f4:69:3d:
                    f6:f4:13:54:2d:d6:6f:24:39:09:b5:30:8f:56:b0:
                    f7:4e:52:a1:00:a4:b0:b0:10:11:6a:fd:8f:56:ad:
                    d8:16:20:3c:a6:1e:3b:d0:ac:54:46:3e:79:12:ae:
                    ec:64:49:2f:da:14:1e:4f:24:2b:74:86:12:c6:69:
                    17:58:0b:b5:e0:9a:de:1c:12:e4:9b:a8:71:07:68:
                    87:5c:ba:48:c1:97:23:db:e6:f1:c9:23:13:cb:ef:
                    70:77:5a:c8:ab:4f:38:f1:c9:b7:22:45:b9:51:c5:
                    83:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F1:D2:A9:32:55:34:CD:6C:75:AB:FE:82:D0:2F:B0:73:A2:41:B6
            X509v3 Authority Key Identifier:
                keyid:31:DC:0C:0B:28:1B:0C:B8:5F:D5:21:C5:49:14:66:0B:D3:66:14:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFrmDUsqAE8dhmS7TmupCp4cJEXcXAm8ewV6iKRfJM2W/0/31DC0C0B281B0CB85FD521C54914660BD36614E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31DC0C0B281B0CB85FD521C54914660BD36614E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFrmDUsqAE8dhmS7TmupCp4cJEXcXAm8ewV6iKRfJM2W/0/323830343a393763303a3a2f33322d3438203d3e20323735363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:97c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:f1:37:ca:54:6e:37:62:21:de:25:8e:d3:83:a9:ce:ac:b5:
         01:30:f9:d4:5e:06:5e:53:b2:26:4c:36:da:e5:c1:11:fe:20:
         24:61:80:10:87:b2:1f:70:9e:66:b1:cd:d0:7d:8f:aa:a3:27:
         32:bd:69:56:1d:76:7f:8a:bd:b0:8f:9e:44:3e:a6:9a:74:15:
         fb:f2:32:85:1a:92:24:c2:76:7f:f3:bf:c9:6e:de:13:bf:59:
         74:51:35:86:8a:eb:30:5d:0f:13:07:26:87:92:50:7d:9b:47:
         4e:e2:ea:cb:98:37:c3:c8:a1:a7:83:1d:91:cc:c5:35:f2:91:
         97:23:6d:32:a8:aa:53:4c:07:d9:83:0f:8a:02:31:21:b1:94:
         88:ea:45:72:7f:ba:4c:e5:7a:b5:72:8d:12:79:6e:4a:07:78:
         11:0f:38:d8:16:d2:5b:2c:f9:b2:ae:87:0f:cb:8e:a8:ba:90:
         f0:3b:ac:41:f7:4a:86:3e:1f:e3:cc:a8:aa:c7:bb:4d:ed:86:
         ba:96:72:a6:09:69:63:1f:d5:eb:23:be:e4:82:0d:34:16:13:
         82:fd:bc:56:21:c8:88:0d:b2:0d:48:b9:69:02:0e:b8:80:71:
         e0:9f:14:74:e6:e9:54:5e:3f:4d:7f:dd:b9:41:0b:61:32:1c:
         76:18:ab:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:02:06 2026 by rpki-client