Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2jWaLStsnbCpUGuc7YQCE3iQqNjjgcuEE8er7Nx18JpG/0/323830343a376630633a3a2f33342d3334203d3e20323731363633.roa
File:                     323830343a376630633a3a2f33342d3334203d3e20323731363633.roa (raw, json)
Hash identifier:          KnOgaGkm0gudyEXmII6QV/fpEvhRFmK79izJtYt9Gtc=
Subject key identifier:   87:FD:78:3D:BD:01:E4:36:00:42:26:7A:EA:42:B7:29:FB:35:8E:69
Certificate issuer:       /CN=C157E5F588C0832A94818A6C0EEC46D363140D95
Certificate serial:       20D0EE92EDC2C005552ECEEEC3A1562F28DA61C8
Authority key identifier: C1:57:E5:F5:88:C0:83:2A:94:81:8A:6C:0E:EC:46:D3:63:14:0D:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C157E5F588C0832A94818A6C0EEC46D363140D95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2jWaLStsnbCpUGuc7YQCE3iQqNjjgcuEE8er7Nx18JpG/0/323830343a376630633a3a2f33342d3334203d3e20323731363633.roa
Signing time:             Wed 22 Apr 2026 21:24:02 +0000
ROA not before:           Wed 22 Apr 2026 21:19:02 +0000
ROA not after:            Wed 21 Apr 2027 21:24:02 +0000
asID:                     271663
IP address blocks:        2804:7f0c::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2jWaLStsnbCpUGuc7YQCE3iQqNjjgcuEE8er7Nx18JpG/0/C157E5F588C0832A94818A6C0EEC46D363140D95.crl
                          rsync://rpki-repo.registro.br/repo/2jWaLStsnbCpUGuc7YQCE3iQqNjjgcuEE8er7Nx18JpG/0/C157E5F588C0832A94818A6C0EEC46D363140D95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C157E5F588C0832A94818A6C0EEC46D363140D95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 10:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d0:ee:92:ed:c2:c0:05:55:2e:ce:ee:c3:a1:56:2f:28:da:61:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C157E5F588C0832A94818A6C0EEC46D363140D95
        Validity
            Not Before: Apr 22 21:19:02 2026 GMT
            Not After : Apr 21 21:24:02 2027 GMT
        Subject: CN=87FD783DBD01E4360042267AEA42B729FB358E69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f3:2a:12:1f:59:14:12:dd:a5:2b:ee:e5:ad:
                    cc:98:7f:33:fe:84:03:0e:66:19:b7:94:96:5e:ee:
                    af:1d:be:88:dd:de:55:eb:73:9c:df:b2:65:32:29:
                    3d:e7:e8:6b:5f:e6:5f:52:dd:80:44:17:76:0f:15:
                    92:8b:84:2f:33:bd:85:15:59:85:e5:09:b3:c6:3f:
                    73:bc:01:50:b8:a5:35:06:26:ca:46:44:04:60:e9:
                    be:b3:50:d4:42:db:dd:35:d8:f4:84:66:ef:34:59:
                    8f:eb:d5:22:54:05:c6:e7:61:4b:32:ab:17:10:05:
                    f4:89:48:a8:0b:00:65:28:55:62:61:c5:aa:5e:33:
                    b9:2b:37:ce:f4:73:e2:a7:76:61:81:6b:a7:0f:75:
                    65:6b:1e:a5:8d:b0:e9:a5:21:04:5e:1b:08:12:41:
                    f4:e7:cb:b6:02:64:4e:d4:d1:79:46:ec:47:86:05:
                    31:c9:43:f9:ed:08:57:58:23:17:ba:fa:b9:a4:61:
                    8c:d9:c4:00:a5:ad:a3:f5:38:dc:c5:83:36:cf:1a:
                    cd:1a:d8:b3:4d:c7:aa:cb:aa:f8:76:c6:c5:1e:d0:
                    05:d2:a5:89:dc:b2:60:89:92:7a:e8:64:9b:3a:20:
                    57:ae:35:9c:b3:b7:fa:46:db:73:0d:ce:00:5c:ae:
                    11:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FD:78:3D:BD:01:E4:36:00:42:26:7A:EA:42:B7:29:FB:35:8E:69
            X509v3 Authority Key Identifier:
                keyid:C1:57:E5:F5:88:C0:83:2A:94:81:8A:6C:0E:EC:46:D3:63:14:0D:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2jWaLStsnbCpUGuc7YQCE3iQqNjjgcuEE8er7Nx18JpG/0/C157E5F588C0832A94818A6C0EEC46D363140D95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C157E5F588C0832A94818A6C0EEC46D363140D95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2jWaLStsnbCpUGuc7YQCE3iQqNjjgcuEE8er7Nx18JpG/0/323830343a376630633a3a2f33342d3334203d3e20323731363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f0c::/34

    Signature Algorithm: sha256WithRSAEncryption
         6e:d3:43:21:32:51:78:82:b2:9a:a6:05:da:00:06:9a:79:97:
         97:73:7e:0d:d4:30:20:63:af:41:88:a9:d4:b8:7a:9e:d2:fc:
         de:95:55:67:62:be:58:ab:3b:92:81:ed:f4:19:c8:a6:f1:8c:
         00:59:fd:c4:da:73:57:4b:5c:5a:85:26:43:04:05:d7:a1:79:
         ec:5b:6b:3c:b0:d8:11:f2:90:35:5d:d7:65:52:a6:6d:c8:38:
         81:5a:a5:a7:4f:c4:b3:2e:61:f1:50:b9:6f:87:b4:6f:f8:e7:
         54:b6:a6:b2:36:9c:d6:c2:82:8f:a1:53:4b:a9:2e:d6:b1:37:
         04:e8:19:d7:40:97:1a:f9:de:14:6f:37:22:ff:29:75:26:12:
         43:e4:f7:b1:a4:bc:35:83:48:42:91:2b:0a:83:72:4d:69:91:
         52:d2:c0:af:a1:b4:27:1e:a5:e5:65:0b:9f:a8:36:dd:93:a7:
         33:95:3a:7b:99:48:ea:ed:b6:ce:1d:aa:3b:98:e7:d2:31:74:
         0a:82:74:d1:bd:9c:0b:24:f1:1a:b5:ab:de:96:c6:63:46:9e:
         60:63:53:af:45:f3:26:a7:3e:1e:5f:d6:c2:3a:e4:a4:37:6e:
         57:97:f6:58:5e:d7:ab:7e:eb:a5:ce:9d:3f:3b:86:2b:08:c0:
         b5:5e:40:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:30:49 2026 by rpki-client