Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a383130303a3a2f34302d3430203d3e20323638373930.roa
File:                     323830343a356162343a383130303a3a2f34302d3430203d3e20323638373930.roa (raw, json)
Hash identifier:          yxcjHLd/6FAAIacP7WIpW1c9gwImNYDzOD1YnDvfD9Q=
Subject key identifier:   E7:95:4B:82:5D:7B:42:C7:04:F8:8F:17:E3:6D:F5:56:15:E2:EB:E5
Certificate issuer:       /CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
Certificate serial:       6784F6B49C29F5B3BDF99E509C80DF02851CBEB1
Authority key identifier: D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a383130303a3a2f34302d3430203d3e20323638373930.roa
Signing time:             Tue 17 Mar 2026 22:38:01 +0000
ROA not before:           Tue 17 Mar 2026 22:33:01 +0000
ROA not after:            Tue 16 Mar 2027 22:38:01 +0000
asID:                     268790
IP address blocks:        2804:5ab4:8100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl
                          rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 14:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:84:f6:b4:9c:29:f5:b3:bd:f9:9e:50:9c:80:df:02:85:1c:be:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
        Validity
            Not Before: Mar 17 22:33:01 2026 GMT
            Not After : Mar 16 22:38:01 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a7:f1:39:f2:27:94:5a:d6:d5:c6:7e:cf:29:
                    62:58:e6:40:ea:e3:04:53:61:0e:0c:45:3f:87:d5:
                    7a:fe:f2:78:1a:8e:83:c3:99:41:37:37:5e:20:46:
                    fc:6b:78:a1:80:fc:2d:d6:6f:0b:ac:06:25:af:54:
                    ff:7a:b0:da:c0:ac:70:89:9d:e6:18:2e:63:0d:5a:
                    9e:88:30:45:fe:8d:3e:80:b8:dd:78:09:de:9b:a7:
                    f3:d3:44:23:86:d3:5c:b6:0f:ac:1e:fd:d2:bb:9d:
                    8f:36:b6:41:1e:c7:b8:d8:d6:e4:d5:c9:a1:99:e9:
                    5e:39:c2:08:84:07:fc:b8:35:68:3c:fe:0a:14:0e:
                    fb:4f:ab:03:5a:09:c1:12:20:d3:c3:2c:0a:e8:83:
                    ea:69:a3:a8:70:df:08:35:6d:99:3b:ae:18:0e:b8:
                    20:0b:2b:b8:86:99:94:93:2c:47:6c:3a:d8:86:c9:
                    5b:4f:16:24:2b:1a:37:cc:8a:22:ae:c8:8b:0e:75:
                    6e:9f:4d:17:06:49:e2:16:9c:8c:6b:7c:68:80:6d:
                    fa:54:1e:a2:a2:aa:f5:61:4c:c1:91:20:61:c7:32:
                    9b:7c:ab:18:f1:8e:61:b3:43:57:3b:f2:6b:12:1b:
                    56:79:b3:5b:51:bb:03:e3:5f:ef:b3:f5:14:a3:7c:
                    aa:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:95:4B:82:5D:7B:42:C7:04:F8:8F:17:E3:6D:F5:56:15:E2:EB:E5
            X509v3 Authority Key Identifier:
                keyid:D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a383130303a3a2f34302d3430203d3e20323638373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ab4:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         0a:24:a4:44:1b:14:e0:e0:6b:16:cb:2a:95:0a:ad:57:05:26:
         75:48:fc:4a:f4:7a:67:4e:2d:eb:1a:06:70:4e:da:02:35:a9:
         d1:d1:e9:ce:3a:ef:9f:49:c2:2b:9f:8a:5e:e8:ec:3c:f8:50:
         3d:d9:3d:cf:c3:4a:27:1b:4f:52:ef:26:12:80:ee:d0:30:55:
         2b:8a:c2:6b:e0:32:94:a3:93:eb:79:c1:15:4c:aa:57:c4:ab:
         ff:1a:25:1b:21:c1:0b:d1:a6:4c:c4:7e:8c:2c:0d:3b:d7:5b:
         2a:be:df:c1:16:2f:9a:94:0d:43:77:66:64:de:d3:e9:20:9b:
         3c:b1:00:45:65:76:f6:dc:b7:4f:94:62:57:a0:4f:02:67:b0:
         98:ec:de:ad:a6:a1:a9:44:e6:94:90:aa:dc:ec:38:a1:e3:be:
         48:53:77:77:5b:0a:11:b7:07:0f:8c:f7:ec:b3:86:d7:12:00:
         e9:6b:e5:9a:92:85:93:ba:d4:bb:ac:7e:da:70:1c:df:6b:b7:
         62:8d:b9:7a:69:7a:90:e1:1b:09:6f:e9:60:16:bb:b0:58:b9:
         c8:e8:8e:59:2a:4b:38:c5:34:28:bc:de:3f:7e:8f:ec:91:0d:
         13:30:e6:3e:52:4f:fb:7e:13:e8:7c:4d:c7:11:d3:f8:a7:1a:
         19:10:b6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:21:21 2026 by rpki-client