Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/323830343a373538383a3a2f33322d3332203d3e20323731303533.roa
File:                     323830343a373538383a3a2f33322d3332203d3e20323731303533.roa (raw, json)
Hash identifier:          UZ3xPsMf4KsRX2mC2lx7bCkO4CA/b5TnZLbnexpAtmQ=
Subject key identifier:   81:7F:29:FC:5C:50:CC:BA:AF:57:0F:11:45:94:66:EA:B9:F1:58:C1
Certificate issuer:       /CN=1CFA53FD7928C175C7432E73DD1472955E5A35FD
Certificate serial:       2BA1A0EC3B9A0A0DD1B8D7224A17833E98D688B2
Authority key identifier: 1C:FA:53:FD:79:28:C1:75:C7:43:2E:73:DD:14:72:95:5E:5A:35:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CFA53FD7928C175C7432E73DD1472955E5A35FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/323830343a373538383a3a2f33322d3332203d3e20323731303533.roa
Signing time:             Fri 10 Apr 2026 18:03:45 +0000
ROA not before:           Fri 10 Apr 2026 17:58:45 +0000
ROA not after:            Fri 09 Apr 2027 18:03:45 +0000
asID:                     271053
IP address blocks:        2804:7588::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.crl
                          rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CFA53FD7928C175C7432E73DD1472955E5A35FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 15:58:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a1:a0:ec:3b:9a:0a:0d:d1:b8:d7:22:4a:17:83:3e:98:d6:88:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CFA53FD7928C175C7432E73DD1472955E5A35FD
        Validity
            Not Before: Apr 10 17:58:45 2026 GMT
            Not After : Apr  9 18:03:45 2027 GMT
        Subject: CN=817F29FC5C50CCBAAF570F11459466EAB9F158C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8e:99:f6:a1:21:c0:6f:e7:7d:5b:2c:59:47:
                    82:0d:2f:67:ec:db:e4:7e:69:3f:77:32:d4:cc:22:
                    f8:a8:e5:ae:68:8e:76:28:69:60:bf:02:a5:8e:13:
                    d4:e6:7c:5d:b0:77:02:8c:c7:f1:80:b9:79:bb:46:
                    3f:2d:00:32:5d:35:6b:18:3f:c2:59:6e:51:f3:b9:
                    ff:be:7b:e7:ad:e3:cd:b5:83:50:c0:f3:bc:42:2a:
                    e3:1c:0d:6d:3b:24:8b:49:26:87:f9:db:56:76:03:
                    51:d9:ef:f4:65:11:e1:b5:9f:9e:e8:f8:e9:63:c8:
                    5e:4a:dc:16:b9:e5:5c:a5:60:05:d7:a2:43:70:20:
                    f1:70:1e:f4:ff:48:43:48:3c:89:43:d3:cf:a9:aa:
                    a9:42:9c:c1:39:9a:d5:57:3d:44:fe:21:5e:ef:42:
                    30:c7:27:ce:f8:68:64:bb:01:bc:1b:b4:ff:99:ac:
                    99:5c:7d:74:20:bc:58:e2:6e:00:1e:67:97:c5:18:
                    04:68:ba:d5:3f:e0:ff:e2:b1:c6:a1:59:f7:82:b6:
                    95:78:7d:f7:a2:2c:66:75:82:ca:8c:21:ea:e5:b9:
                    7f:e2:3d:f1:5c:a8:2d:4c:ba:ce:5b:93:43:a2:44:
                    bf:31:46:8d:50:bb:09:c5:4e:2b:39:a8:c2:1f:5f:
                    01:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:7F:29:FC:5C:50:CC:BA:AF:57:0F:11:45:94:66:EA:B9:F1:58:C1
            X509v3 Authority Key Identifier:
                keyid:1C:FA:53:FD:79:28:C1:75:C7:43:2E:73:DD:14:72:95:5E:5A:35:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CFA53FD7928C175C7432E73DD1472955E5A35FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/323830343a373538383a3a2f33322d3332203d3e20323731303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7588::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:3f:e7:47:f7:16:80:86:8f:6f:ba:a3:90:d3:be:3d:f2:04:
         56:78:9f:4a:09:af:f0:4b:93:11:af:8b:3d:39:4f:1d:a5:52:
         76:66:e5:bc:54:d2:a0:12:3b:94:52:a4:e7:8a:ad:42:b2:bd:
         40:ea:17:10:a1:c9:0c:cf:f4:32:fe:51:c6:dc:55:bc:85:2b:
         aa:37:3d:46:86:99:1d:88:45:22:bd:a6:c0:c0:4d:3f:02:c4:
         67:aa:00:98:0a:ad:3e:b8:26:95:6f:49:96:55:21:d0:89:00:
         8e:f3:ba:c6:98:1e:f0:7d:0c:e0:84:66:ef:cb:ad:2b:f5:d8:
         52:0d:45:f5:21:ae:97:34:ce:eb:68:43:12:13:d4:50:d0:53:
         70:84:9a:8b:a6:25:98:ce:07:70:d7:e6:28:4c:b4:0c:f9:5b:
         88:01:da:84:88:cf:53:d7:07:f3:a0:21:be:e8:02:9c:a9:7e:
         98:62:6f:c2:05:9b:7d:3b:0d:46:19:4a:28:2b:a1:6e:c4:08:
         78:a0:db:91:28:4f:c2:97:d8:48:9d:6f:30:40:9d:4b:76:c3:
         31:72:07:be:24:be:98:81:53:e5:f0:f4:52:cc:ee:78:b4:59:
         88:b7:dc:cc:f9:58:59:3d:a7:0c:89:29:1f:6a:1b:47:4d:cb:
         9c:3a:32:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:56:38 2026 by rpki-client