Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a383230303a3a2f34302d3430203d3e20323638373930.roa
File:                     323830343a356162343a383230303a3a2f34302d3430203d3e20323638373930.roa (raw, json)
Hash identifier:          I9kpxU/jB4uQUugDBUhho1QZ4ALmV80nff6JjiI5HJQ=
Subject key identifier:   09:9C:9D:53:90:F3:59:FB:D5:B9:C0:1D:FB:3A:38:ED:78:42:EE:D7
Certificate issuer:       /CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
Certificate serial:       351D89FE571630206699F2AFCE23082D125B9715
Authority key identifier: D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a383230303a3a2f34302d3430203d3e20323638373930.roa
Signing time:             Tue 17 Mar 2026 22:38:02 +0000
ROA not before:           Tue 17 Mar 2026 22:33:02 +0000
ROA not after:            Tue 16 Mar 2027 22:38:02 +0000
asID:                     268790
IP address blocks:        2804:5ab4:8200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl
                          rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 14:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:1d:89:fe:57:16:30:20:66:99:f2:af:ce:23:08:2d:12:5b:97:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
        Validity
            Not Before: Mar 17 22:33:02 2026 GMT
            Not After : Mar 16 22:38:02 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a7:15:bb:b6:6a:b3:d2:7c:ce:53:75:53:9c:
                    c1:50:01:d5:20:00:e3:66:75:e2:66:4b:85:63:10:
                    70:1e:4c:d3:eb:e2:33:5a:23:e4:48:97:6f:e8:0a:
                    06:d8:fc:b2:be:d4:fa:55:5b:fd:aa:56:60:34:7f:
                    8b:3e:ce:47:49:90:f4:70:c8:a5:0e:5f:b5:46:66:
                    9a:79:98:56:aa:19:86:48:24:de:9a:28:58:ec:ab:
                    a2:60:fb:38:57:16:aa:96:25:9f:b6:4e:85:e6:c8:
                    e1:e3:6d:7e:70:15:31:1d:df:54:43:21:b1:b1:b8:
                    9c:c3:82:84:02:3e:b0:9f:79:72:04:3a:77:a5:a8:
                    78:a2:33:46:63:d5:f3:1b:a0:e2:fc:89:78:0e:77:
                    5b:e6:71:86:a1:4b:0b:e8:dd:a3:7d:2e:98:cb:d5:
                    61:e8:b5:87:8e:60:03:51:ec:bc:e2:22:19:26:b2:
                    18:b3:d2:75:f8:a0:8a:51:36:04:7e:fa:fb:bd:bc:
                    87:37:ec:5a:92:f4:47:05:bb:4f:14:f4:38:62:fd:
                    25:92:30:ab:59:bd:b9:94:3b:0d:b1:87:ba:65:c2:
                    bf:27:09:07:46:4d:9c:e8:12:ca:80:c7:7a:5e:c4:
                    e6:f8:d5:63:7c:5a:d3:73:1b:b8:d7:74:33:e0:6a:
                    fc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:9C:9D:53:90:F3:59:FB:D5:B9:C0:1D:FB:3A:38:ED:78:42:EE:D7
            X509v3 Authority Key Identifier:
                keyid:D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a383230303a3a2f34302d3430203d3e20323638373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ab4:8200::/40

    Signature Algorithm: sha256WithRSAEncryption
         8f:9c:14:77:de:0d:00:b9:df:8b:7e:f5:45:1b:3f:5b:a7:48:
         77:5f:5b:4d:9d:f7:f6:79:1d:8a:99:73:6d:c5:7c:41:c3:76:
         c7:65:80:e4:56:0c:15:9a:fb:6c:7e:bc:7e:20:77:6b:93:69:
         6e:e6:ff:59:9d:1b:f6:78:8f:85:85:e7:be:a3:ce:e7:15:ba:
         ba:fd:a5:07:b7:12:53:3c:4f:dc:8a:6c:ec:73:a8:a5:fd:18:
         04:a5:06:cc:4c:90:a9:f5:02:d5:60:2a:1e:a8:18:ae:71:10:
         6f:31:77:5a:4e:28:9c:17:3c:e0:cf:cf:dc:47:fd:48:4c:4c:
         be:fc:54:24:e1:bd:72:20:00:f1:68:02:b3:b0:2d:c4:d4:0f:
         d5:14:9c:57:e9:4b:b1:33:6e:a4:2a:25:18:bd:16:5d:38:f5:
         b4:3e:00:f8:b4:41:0d:ee:9f:87:48:20:c7:43:47:d2:60:8c:
         89:d7:d9:76:b8:5a:a9:d4:04:07:b3:ab:e0:0d:41:a1:c1:81:
         64:9e:b9:6f:10:04:9d:cf:6d:b5:34:9b:bf:81:f7:bd:60:ec:
         84:0a:7b:bc:64:b1:63:7a:05:87:4b:24:f0:7c:21:ba:ad:a5:
         ee:3c:f9:81:ac:00:5a:01:9e:8e:e3:1e:b6:99:8b:fe:a8:ba:
         2b:62:bf:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:44:44 2026 by rpki-client