Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/323830343a376530343a3a2f33322d3334203d3e20323731353937.roa
File:                     323830343a376530343a3a2f33322d3334203d3e20323731353937.roa (raw, json)
Hash identifier:          ERY7fX2dsrKpFlE8bq7J/GcWuqcAKTCxzmCk9TGWSMo=
Subject key identifier:   95:39:C0:69:77:E2:35:A6:41:F0:C9:B5:46:48:62:60:2A:01:2F:4C
Certificate issuer:       /CN=B191DF220BC62DB6A525C9A4D6A09F762F806D45
Certificate serial:       1BAB4EF1259543CF1137D08B4DDB6AF47D7DE3E1
Authority key identifier: B1:91:DF:22:0B:C6:2D:B6:A5:25:C9:A4:D6:A0:9F:76:2F:80:6D:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/323830343a376530343a3a2f33322d3334203d3e20323731353937.roa
Signing time:             Tue 21 Apr 2026 22:27:33 +0000
ROA not before:           Tue 21 Apr 2026 22:22:33 +0000
ROA not after:            Tue 20 Apr 2027 22:27:33 +0000
asID:                     271597
IP address blocks:        2804:7e04::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.crl
                          rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 13:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ab:4e:f1:25:95:43:cf:11:37:d0:8b:4d:db:6a:f4:7d:7d:e3:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B191DF220BC62DB6A525C9A4D6A09F762F806D45
        Validity
            Not Before: Apr 21 22:22:33 2026 GMT
            Not After : Apr 20 22:27:33 2027 GMT
        Subject: CN=9539C06977E235A641F0C9B5464862602A012F4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:20:c1:09:45:f1:f9:1c:25:0d:cd:6b:69:db:
                    67:60:f7:34:70:78:ab:3d:7d:4f:8f:76:ca:0d:73:
                    28:b3:ac:e1:5b:09:cf:56:33:f9:72:c7:54:55:cf:
                    8c:4a:9d:7c:67:df:bf:2e:b0:43:6d:e5:80:58:af:
                    ed:35:53:70:a4:24:04:51:e5:58:44:40:ed:1a:26:
                    af:98:90:57:f1:c9:7a:9e:7f:2e:97:a4:a8:18:0e:
                    42:48:36:7c:26:75:73:e6:4d:c8:f2:e7:70:35:df:
                    05:9c:5f:4d:b0:f8:b2:af:df:e5:7d:3b:fd:98:c2:
                    b6:9f:49:bf:50:c2:32:af:33:cc:82:87:66:a3:40:
                    c0:24:d6:4a:19:73:dd:ce:a4:0e:b3:80:c3:5a:77:
                    4a:f4:e1:d6:1f:e9:dc:6a:21:06:8a:16:99:bd:3c:
                    99:d4:51:81:0d:ab:af:a7:c3:25:77:d0:7f:7a:96:
                    b2:0c:3d:3e:4f:55:84:c7:ca:b7:ad:85:bb:77:e5:
                    56:1b:71:65:d0:c1:70:ca:47:e3:ad:90:f6:96:bd:
                    81:7d:ef:02:0d:a6:a9:8f:58:a9:5e:c8:02:b7:27:
                    5b:f5:da:2b:f7:55:2b:1a:9d:3c:01:16:57:e2:3e:
                    e9:0f:ce:48:84:a5:10:3b:f6:33:04:34:3c:4e:e6:
                    b5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:39:C0:69:77:E2:35:A6:41:F0:C9:B5:46:48:62:60:2A:01:2F:4C
            X509v3 Authority Key Identifier:
                keyid:B1:91:DF:22:0B:C6:2D:B6:A5:25:C9:A4:D6:A0:9F:76:2F:80:6D:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/323830343a376530343a3a2f33322d3334203d3e20323731353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e04::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:e3:45:b6:90:0b:78:b8:c0:0c:30:c8:58:e0:05:fd:cc:69:
         c6:1e:56:52:e6:31:7f:56:7d:90:d6:a3:1a:19:55:5a:27:94:
         c4:0e:3d:d6:e9:c6:0d:42:c7:6d:ec:9c:af:02:b6:54:be:f3:
         ca:da:d0:ca:e7:00:62:1d:58:de:8e:c0:e1:82:43:99:c3:65:
         f3:c4:18:d6:5c:ab:e0:56:0a:69:42:4e:12:fe:74:65:a9:2b:
         e2:77:66:0b:81:ce:fd:d4:71:d3:ef:fc:38:ba:e0:e0:95:ab:
         c0:dc:0c:0a:97:b4:d6:68:38:43:a1:bb:d7:dc:22:79:bd:d8:
         83:67:64:b6:5e:5d:12:5f:c3:18:92:95:eb:66:a0:30:ab:57:
         ed:bd:bb:f9:1a:78:3f:3e:26:ae:ab:5d:35:73:43:48:98:22:
         1e:e3:ff:95:ad:2d:39:87:2f:3f:37:99:94:69:67:60:19:0d:
         14:50:a8:5d:ba:b1:0d:9e:a7:cf:4c:e2:c8:e2:6b:a6:77:b0:
         83:3f:04:3b:6c:b0:8f:c4:49:0e:fe:d9:ee:9d:75:fc:ef:60:
         16:a1:13:6a:84:0d:3f:b7:54:4f:42:3a:fb:3c:0e:69:ef:20:
         27:9e:c0:6c:7d:7e:dc:82:df:15:ed:29:54:f9:fe:1c:37:3a:
         7e:c3:96:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:09:22 2026 by rpki-client