Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/323830343a386135383a616130303a3a2f34302d3430203d3e20323733363633.roa
File:                     323830343a386135383a616130303a3a2f34302d3430203d3e20323733363633.roa (raw, json)
Hash identifier:          xAQEtkvHrd5Xble4DbGfCL1lCO4NmuROcmBAE0pU3FU=
Subject key identifier:   1B:C0:30:1D:3D:D1:5D:DB:99:90:C2:75:6A:FE:FE:9B:36:CA:38:2F
Certificate issuer:       /CN=7A2D9BBABC9B9CDA4EC74440C03DB4258E307977
Certificate serial:       747C52B218A093CFC68C806BFEAA50FD5EDE3ACA
Authority key identifier: 7A:2D:9B:BA:BC:9B:9C:DA:4E:C7:44:40:C0:3D:B4:25:8E:30:79:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A2D9BBABC9B9CDA4EC74440C03DB4258E307977.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/323830343a386135383a616130303a3a2f34302d3430203d3e20323733363633.roa
Signing time:             Wed 29 Apr 2026 01:15:53 +0000
ROA not before:           Wed 29 Apr 2026 01:10:53 +0000
ROA not after:            Wed 28 Apr 2027 01:15:53 +0000
asID:                     273663
IP address blocks:        2804:8a58:aa00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/7A2D9BBABC9B9CDA4EC74440C03DB4258E307977.crl
                          rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/7A2D9BBABC9B9CDA4EC74440C03DB4258E307977.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A2D9BBABC9B9CDA4EC74440C03DB4258E307977.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 15:05:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:7c:52:b2:18:a0:93:cf:c6:8c:80:6b:fe:aa:50:fd:5e:de:3a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A2D9BBABC9B9CDA4EC74440C03DB4258E307977
        Validity
            Not Before: Apr 29 01:10:53 2026 GMT
            Not After : Apr 28 01:15:53 2027 GMT
        Subject: CN=1BC0301D3DD15DDB9990C2756AFEFE9B36CA382F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:78:11:ee:b2:6a:ac:ea:86:77:89:24:bb:70:
                    fe:d9:98:4f:73:c2:c8:d0:f6:b9:47:3f:d4:26:32:
                    94:08:10:0c:f0:49:e1:51:1d:2a:92:c3:25:ce:f1:
                    96:06:f1:ba:f3:e8:37:d7:77:b9:ee:01:d1:92:ad:
                    09:c4:72:6f:49:1f:33:da:90:44:6f:2c:c1:99:c4:
                    c5:3d:29:e7:5b:85:ab:73:26:05:4b:7f:5c:64:ec:
                    4a:16:b5:7d:78:4b:e2:63:a8:a5:7a:4b:f9:69:af:
                    f9:35:dc:3f:6e:d6:14:d7:e4:54:c9:b2:9b:31:33:
                    e7:ad:7d:9f:fa:2c:a0:b6:aa:e0:3e:b5:1b:e6:31:
                    de:6f:a7:20:08:1e:2d:2f:ad:a7:9f:43:64:5b:6d:
                    ed:1b:95:14:8a:93:1d:ff:72:d4:35:12:17:72:f2:
                    6b:c3:d9:c4:fd:c7:05:73:13:e8:f6:af:f8:ef:ac:
                    c9:56:a4:86:42:1c:52:41:2a:17:31:2e:06:63:fc:
                    6c:cd:98:a4:9e:66:5a:00:95:eb:63:ab:34:ac:91:
                    f1:1c:fd:f5:c2:08:2e:2e:bc:00:1c:a6:a8:3f:97:
                    b0:af:e5:85:25:ec:9f:8c:66:7a:58:97:ed:dd:2b:
                    af:17:26:ef:45:e3:b1:50:99:64:85:b4:7c:b8:f1:
                    da:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C0:30:1D:3D:D1:5D:DB:99:90:C2:75:6A:FE:FE:9B:36:CA:38:2F
            X509v3 Authority Key Identifier:
                keyid:7A:2D:9B:BA:BC:9B:9C:DA:4E:C7:44:40:C0:3D:B4:25:8E:30:79:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/7A2D9BBABC9B9CDA4EC74440C03DB4258E307977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A2D9BBABC9B9CDA4EC74440C03DB4258E307977.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/323830343a386135383a616130303a3a2f34302d3430203d3e20323733363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a58:aa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         38:d0:93:20:ed:65:98:ed:cc:2d:50:ae:5a:8b:d0:96:35:17:
         27:2b:17:47:df:53:78:2b:5b:18:e2:10:37:4a:14:de:5e:fa:
         b4:5b:41:a8:44:80:04:2c:d0:3d:62:74:a6:5d:96:71:de:73:
         77:f8:02:3d:7b:ef:65:3f:36:ae:85:85:85:fe:90:47:b4:f2:
         4c:8f:48:f4:07:16:9c:85:b3:3e:4f:3b:5f:5c:67:9a:88:d5:
         dd:f6:71:62:d2:35:8b:53:d3:ed:60:7b:52:82:42:e6:83:f4:
         a4:a1:b5:b2:92:ff:e4:0c:42:30:79:24:2b:1d:05:7a:86:39:
         8a:b7:ae:6d:43:56:d9:09:07:8c:b2:60:0e:9a:91:0d:08:2d:
         b4:1d:af:ba:27:a5:bd:ab:a5:70:79:59:43:6f:c4:ae:71:e3:
         54:17:e4:e1:f2:70:8a:67:a0:82:c5:96:9b:03:4b:9b:51:8c:
         a3:dc:3f:0b:d8:7a:82:33:d4:f2:f5:f2:6c:17:a9:41:2f:51:
         a8:cb:ad:80:5e:2b:84:e6:8a:2a:c0:43:fb:c2:b6:86:97:af:
         9f:86:de:81:08:5d:34:fb:77:80:7d:50:cf:7c:7a:8b:66:d3:
         c8:4c:c8:58:f0:85:34:1d:a2:0b:f3:14:d1:ca:73:f6:54:b1:
         87:5c:28:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:48:13 2026 by rpki-client