Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6nLbY8nMzZUCWLzUSEuJsr4K4oB6EEQVegQC9Jr9ZQwX/0/323830343a6266633a3a2f33322d313238203d3e203532363534.roa
File:                     323830343a6266633a3a2f33322d313238203d3e203532363534.roa (raw, json)
Hash identifier:          NQvwKJuKY5xGxAsUlCOJUYqiZv45mtEinXjmcQdAIjw=
Subject key identifier:   79:BC:62:EC:8E:C9:F1:13:2A:5D:F6:A7:C7:B3:B3:A2:9D:D1:C1:A2
Certificate issuer:       /CN=B36412BFA2E018A568277A58C32CDDE3B826763B
Certificate serial:       4933915B5262346B9521D1A0C5C01C7D06B3EA5E
Authority key identifier: B3:64:12:BF:A2:E0:18:A5:68:27:7A:58:C3:2C:DD:E3:B8:26:76:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B36412BFA2E018A568277A58C32CDDE3B826763B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6nLbY8nMzZUCWLzUSEuJsr4K4oB6EEQVegQC9Jr9ZQwX/0/323830343a6266633a3a2f33322d313238203d3e203532363534.roa
Signing time:             Fri 24 Apr 2026 19:41:13 +0000
ROA not before:           Fri 24 Apr 2026 19:36:13 +0000
ROA not after:            Fri 23 Apr 2027 19:41:13 +0000
asID:                     52654
IP address blocks:        2804:bfc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6nLbY8nMzZUCWLzUSEuJsr4K4oB6EEQVegQC9Jr9ZQwX/0/B36412BFA2E018A568277A58C32CDDE3B826763B.crl
                          rsync://rpki-repo.registro.br/repo/6nLbY8nMzZUCWLzUSEuJsr4K4oB6EEQVegQC9Jr9ZQwX/0/B36412BFA2E018A568277A58C32CDDE3B826763B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B36412BFA2E018A568277A58C32CDDE3B826763B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:04:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:33:91:5b:52:62:34:6b:95:21:d1:a0:c5:c0:1c:7d:06:b3:ea:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36412BFA2E018A568277A58C32CDDE3B826763B
        Validity
            Not Before: Apr 24 19:36:13 2026 GMT
            Not After : Apr 23 19:41:13 2027 GMT
        Subject: CN=79BC62EC8EC9F1132A5DF6A7C7B3B3A29DD1C1A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:11:ee:73:a0:b1:44:41:f1:29:27:2e:72:86:
                    b5:12:ef:d9:e0:0f:ef:d0:53:06:61:de:88:46:57:
                    45:b2:ac:1a:76:f9:6a:95:f7:4b:5b:06:97:23:aa:
                    53:0a:81:c1:44:7a:91:68:41:e0:6b:06:01:4e:ac:
                    ce:08:3a:ce:f5:a3:39:d4:2e:ca:92:d6:bd:ac:64:
                    1e:25:c5:67:19:9f:ef:d7:9b:d5:10:ac:35:0e:6e:
                    4b:a7:63:4f:e3:27:3c:62:6e:8a:8d:ca:3f:de:b1:
                    15:a8:3c:e2:60:43:12:f5:bc:02:51:89:24:68:79:
                    0e:a4:65:92:94:aa:13:b4:bf:31:68:c1:f6:dd:cf:
                    f2:19:a5:22:e3:cd:a0:f6:37:15:16:fc:47:75:53:
                    75:c0:a9:8a:74:8d:ae:e3:74:58:5a:2e:33:60:aa:
                    9f:cd:4e:30:5a:17:ea:4b:05:3b:52:3c:10:fc:33:
                    21:99:9a:af:ac:94:71:97:9b:94:74:99:cb:63:29:
                    ca:a7:cb:91:59:f1:09:6a:4e:e0:ca:83:de:84:73:
                    62:10:80:79:3b:c7:e6:c7:d7:dd:a7:b2:54:d5:0c:
                    ec:13:da:ff:bd:af:84:6c:7e:71:d8:e2:e5:80:f8:
                    86:64:3f:87:76:6d:30:45:37:b6:f7:e0:7a:ee:57:
                    93:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BC:62:EC:8E:C9:F1:13:2A:5D:F6:A7:C7:B3:B3:A2:9D:D1:C1:A2
            X509v3 Authority Key Identifier:
                keyid:B3:64:12:BF:A2:E0:18:A5:68:27:7A:58:C3:2C:DD:E3:B8:26:76:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6nLbY8nMzZUCWLzUSEuJsr4K4oB6EEQVegQC9Jr9ZQwX/0/B36412BFA2E018A568277A58C32CDDE3B826763B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B36412BFA2E018A568277A58C32CDDE3B826763B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6nLbY8nMzZUCWLzUSEuJsr4K4oB6EEQVegQC9Jr9ZQwX/0/323830343a6266633a3a2f33322d313238203d3e203532363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:bfc::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:66:de:25:20:60:b4:21:11:57:81:d4:67:5c:d4:3a:64:a1:
         3d:6a:b3:7c:3d:78:96:b1:be:59:a7:26:48:76:a6:54:47:37:
         ad:e0:a6:01:91:6c:13:be:9c:17:f2:af:5e:2c:12:51:2a:9e:
         f3:5a:ba:9d:20:3b:b8:60:a3:99:bf:b9:e1:7e:de:4b:34:2b:
         e0:76:e6:ae:9d:f5:91:0c:92:f9:70:f7:e9:77:d0:49:e7:c0:
         0c:e9:02:de:04:21:c5:38:70:6a:d5:8f:a8:b8:6d:69:30:a1:
         1b:29:32:56:67:b2:fc:63:18:82:b1:87:8d:6d:ea:76:6d:2e:
         c5:a7:09:09:e7:49:02:16:a3:2d:08:4c:2c:10:54:1b:0b:c4:
         d6:7f:9e:05:32:1f:86:0f:d3:2e:51:cd:dc:73:55:e5:f1:bc:
         8d:0b:94:c9:3c:06:4a:2f:62:03:a7:2b:53:17:80:ab:f8:fb:
         24:68:86:5a:8f:d1:d1:68:a8:09:ab:1d:41:d0:5f:0a:62:91:
         13:42:a1:2e:4d:b5:2a:0a:76:8d:21:a6:65:4c:20:b4:cb:4b:
         03:a2:78:ce:81:11:10:ea:82:3b:23:aa:9a:7a:0b:17:14:49:
         6b:31:3d:ff:7f:3e:11:14:6d:80:3a:d6:8c:2b:dd:52:05:1e:
         6a:3a:f6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:19:01 2026 by rpki-client