Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/0/323830343a336335343a3a2f33322d313238203d3e20323636323034.roa
File:                     323830343a336335343a3a2f33322d313238203d3e20323636323034.roa (raw, json)
Hash identifier:          Rif9ul54rgUNw5Vifl6EMaXIRr10ZHBcG6QRQZwkf00=
Subject key identifier:   DE:BE:27:EF:3B:40:DE:DF:CB:50:D0:63:40:30:62:2A:13:08:73:5B
Certificate issuer:       /CN=F4B3C74EAFF7141322F52B0F137F331CDCCB9BD6
Certificate serial:       27EE18ECC547749DDEFB347A0FD10917DD977D6B
Authority key identifier: F4:B3:C7:4E:AF:F7:14:13:22:F5:2B:0F:13:7F:33:1C:DC:CB:9B:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4B3C74EAFF7141322F52B0F137F331CDCCB9BD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/0/323830343a336335343a3a2f33322d313238203d3e20323636323034.roa
Signing time:             Tue 28 Apr 2026 23:13:40 +0000
ROA not before:           Tue 28 Apr 2026 23:08:40 +0000
ROA not after:            Tue 27 Apr 2027 23:13:40 +0000
asID:                     266204
IP address blocks:        2804:3c54::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/0/F4B3C74EAFF7141322F52B0F137F331CDCCB9BD6.crl
                          rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/0/F4B3C74EAFF7141322F52B0F137F331CDCCB9BD6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4B3C74EAFF7141322F52B0F137F331CDCCB9BD6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 07:57:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ee:18:ec:c5:47:74:9d:de:fb:34:7a:0f:d1:09:17:dd:97:7d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4B3C74EAFF7141322F52B0F137F331CDCCB9BD6
        Validity
            Not Before: Apr 28 23:08:40 2026 GMT
            Not After : Apr 27 23:13:40 2027 GMT
        Subject: CN=DEBE27EF3B40DEDFCB50D0634030622A1308735B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:29:58:40:61:65:a1:d3:ba:99:cd:2d:df:e0:
                    aa:d5:56:aa:8f:56:8d:eb:6a:20:a2:fc:01:df:29:
                    52:0d:40:22:51:fe:56:d7:99:74:77:96:4d:98:b2:
                    4a:f0:2a:a7:bc:59:c8:3a:a7:ef:6b:1c:4c:1d:f5:
                    7a:f4:a2:d3:e7:97:34:eb:7e:98:5e:12:d6:46:73:
                    b7:f6:53:85:3b:13:9a:60:1c:b3:91:6c:b2:f3:4a:
                    39:a8:f9:b6:8f:58:8d:2f:4b:a6:d6:ed:f3:3b:52:
                    04:06:9c:65:e2:5b:36:e9:f8:3b:c6:92:47:0f:45:
                    f7:90:e1:7a:5e:34:9d:45:3b:db:e3:15:30:f0:d0:
                    ba:77:de:b7:31:7a:88:dc:0d:6d:43:7b:51:b2:44:
                    1e:71:bf:ae:44:7e:84:ea:ec:11:90:a1:a2:c9:60:
                    1e:96:8d:cd:41:c5:98:d2:48:58:35:2b:42:9f:48:
                    74:2b:87:e6:69:a3:1d:01:36:79:0f:0f:4c:af:d1:
                    e0:54:1d:67:eb:d4:d1:52:6f:49:12:1b:be:45:92:
                    2c:09:e7:0b:07:2f:62:bb:ef:76:fb:1d:24:43:d2:
                    c8:b7:6a:0f:b0:f2:3d:88:60:c4:8a:c9:38:ce:27:
                    be:b3:4d:03:93:44:a3:8d:30:79:34:bd:7f:08:52:
                    8f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BE:27:EF:3B:40:DE:DF:CB:50:D0:63:40:30:62:2A:13:08:73:5B
            X509v3 Authority Key Identifier:
                keyid:F4:B3:C7:4E:AF:F7:14:13:22:F5:2B:0F:13:7F:33:1C:DC:CB:9B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/0/F4B3C74EAFF7141322F52B0F137F331CDCCB9BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4B3C74EAFF7141322F52B0F137F331CDCCB9BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/0/323830343a336335343a3a2f33322d313238203d3e20323636323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c54::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:20:b2:9a:7d:e5:0f:b7:fc:2f:aa:43:f6:49:01:89:d4:c3:
         3c:b9:84:4d:3f:a9:9e:a4:9d:84:12:d7:9b:e6:15:6b:f6:1a:
         77:28:b9:37:a3:0f:e2:dc:41:54:fd:32:44:4d:43:25:04:c7:
         06:3b:33:9e:29:3c:0e:8d:7b:68:c6:0d:ad:af:99:a8:64:ba:
         cb:3e:d1:33:00:6d:9d:47:23:e8:75:1b:d0:9e:8b:89:c5:2b:
         ce:a6:f1:6a:6e:e8:c6:c7:da:bf:7c:43:24:6b:33:f1:b3:7a:
         15:8d:99:27:56:df:97:3e:5a:85:89:d7:1e:ec:b0:3c:38:06:
         b3:f1:e0:2c:04:dd:0e:54:e4:96:fc:d8:6c:1b:60:1e:33:b6:
         91:33:3c:5c:1a:91:c2:46:ee:38:9d:a8:d0:85:00:af:ac:87:
         91:f4:ea:f8:57:51:c4:e2:a9:df:68:92:9f:e8:c6:44:8d:52:
         8e:4c:3e:e8:c7:f0:7c:03:1b:55:de:30:fb:e9:da:20:d0:01:
         74:06:86:bf:92:b5:aa:13:31:8b:49:d0:ea:8b:d2:80:06:f2:
         ba:42:73:67:95:19:e5:1e:8c:18:c2:d0:36:86:ce:29:22:cf:
         88:03:3c:7e:70:c5:95:2c:ca:6e:53:28:63:3c:70:f0:14:02:
         39:37:66:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:36:52 2026 by rpki-client