Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/323830343a383966383a3a2f33322d3438203d3e20323733363338.roa
File:                     323830343a383966383a3a2f33322d3438203d3e20323733363338.roa (raw, json)
Hash identifier:          D/kkHYuZLdl56ai6VLajhl/b6MjT6Pg6yuxPS9iOFUI=
Subject key identifier:   51:DA:A0:70:73:85:8D:63:C5:12:8A:05:C8:70:79:2E:C4:4F:8C:D6
Certificate issuer:       /CN=C4B997E21D1B67210A47D2B6BE3ABA51A9B24915
Certificate serial:       2C7F0EDFD14E8ADA1FD1EB79C7C6E2C0D8470510
Authority key identifier: C4:B9:97:E2:1D:1B:67:21:0A:47:D2:B6:BE:3A:BA:51:A9:B2:49:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B997E21D1B67210A47D2B6BE3ABA51A9B24915.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/323830343a383966383a3a2f33322d3438203d3e20323733363338.roa
Signing time:             Tue 05 May 2026 17:47:34 +0000
ROA not before:           Tue 05 May 2026 17:42:34 +0000
ROA not after:            Tue 04 May 2027 17:47:34 +0000
asID:                     273638
IP address blocks:        2804:89f8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/C4B997E21D1B67210A47D2B6BE3ABA51A9B24915.crl
                          rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/C4B997E21D1B67210A47D2B6BE3ABA51A9B24915.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B997E21D1B67210A47D2B6BE3ABA51A9B24915.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 14:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:7f:0e:df:d1:4e:8a:da:1f:d1:eb:79:c7:c6:e2:c0:d8:47:05:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4B997E21D1B67210A47D2B6BE3ABA51A9B24915
        Validity
            Not Before: May  5 17:42:34 2026 GMT
            Not After : May  4 17:47:34 2027 GMT
        Subject: CN=51DAA07073858D63C5128A05C870792EC44F8CD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6e:b9:c6:8a:2c:c0:cb:6c:f2:9e:e5:e3:e3:
                    54:d3:c4:c2:a2:4e:92:24:8f:90:d5:bc:0b:56:43:
                    9f:7e:15:7a:7f:04:1e:c5:f2:17:a3:59:d4:a1:2b:
                    59:6f:7c:e1:48:4a:b3:de:23:f4:51:87:64:73:1d:
                    c8:13:c5:cb:bd:46:68:85:f7:52:e7:36:70:01:33:
                    07:b9:81:86:f8:ba:fa:e1:ac:e5:d7:8b:31:5e:6c:
                    58:7e:f5:46:9e:c7:92:2a:1b:a5:16:95:a1:d3:e8:
                    06:af:8d:0f:25:f7:46:65:bf:56:cc:e4:ba:12:08:
                    bc:99:dd:21:ed:98:9b:19:f5:1e:cb:e6:2c:b1:07:
                    9f:35:3f:37:7e:5f:6a:23:ba:6c:26:67:2f:87:f3:
                    03:7b:95:05:f0:3d:11:aa:df:f2:11:89:91:8d:f9:
                    b1:6b:02:f7:61:27:fa:d0:5b:20:fe:fb:57:95:1c:
                    ea:96:84:6c:22:d5:80:41:0f:2f:f3:d9:40:8c:f6:
                    cb:84:3a:30:30:d1:4b:c0:4e:93:7d:67:a0:66:79:
                    04:8a:0e:4a:e5:d2:bc:83:2d:18:7e:0e:a2:82:a8:
                    00:b6:bf:97:f8:d8:fb:dd:fd:27:af:80:60:ce:4e:
                    2a:f8:03:d4:9f:64:c8:43:a1:93:58:de:19:75:7e:
                    4f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DA:A0:70:73:85:8D:63:C5:12:8A:05:C8:70:79:2E:C4:4F:8C:D6
            X509v3 Authority Key Identifier:
                keyid:C4:B9:97:E2:1D:1B:67:21:0A:47:D2:B6:BE:3A:BA:51:A9:B2:49:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/C4B997E21D1B67210A47D2B6BE3ABA51A9B24915.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B997E21D1B67210A47D2B6BE3ABA51A9B24915.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/323830343a383966383a3a2f33322d3438203d3e20323733363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:89f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:02:23:15:aa:5a:77:c7:19:ba:89:a7:f8:2b:22:e1:d2:ad:
         0a:c0:9b:51:be:e5:db:af:25:02:f9:2c:2c:b6:67:ef:3e:7c:
         97:9d:19:9c:38:6c:f5:2d:ad:69:01:e9:a3:29:75:58:0f:80:
         8c:8d:1c:69:5b:09:a3:a6:18:e3:6d:c9:39:4a:f6:a1:14:62:
         3c:e4:06:79:33:43:79:6a:d5:0a:e9:9f:2b:84:b7:2d:c0:b4:
         53:e0:5a:52:f5:31:c1:15:ec:2b:70:ea:6b:95:0a:7b:73:9b:
         51:5d:a9:d3:6f:2f:94:26:3e:ae:6b:5c:8b:59:6c:19:3f:e9:
         d6:63:a4:17:f0:18:ee:a5:93:6b:af:dc:b1:b2:8c:81:d6:5b:
         9a:16:36:d2:0d:c3:6d:88:85:00:31:d1:fb:90:43:aa:64:b4:
         19:2d:1b:1d:42:00:2b:e6:7d:83:09:ac:e4:3a:25:17:2d:38:
         a8:0e:83:56:4d:ad:d5:60:6b:c0:15:27:95:d1:2b:38:ed:ee:
         87:da:e8:9b:d4:fa:b1:c3:50:8f:08:46:3d:dc:f0:7e:00:85:
         81:b2:f1:2c:31:58:87:89:c1:1f:94:4b:63:59:c7:f8:3c:82:
         9b:7f:53:d7:29:dd:7e:c0:8f:c0:3f:db:0e:88:48:ed:cd:79:
         a6:ed:b9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:20:41 2026 by rpki-client