Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8grffuSVE2z9P7q7vmPoZpu88Cud4ZgFZFnDiF85NPJN/0/323830343a393334303a3a2f33322d3334203d3e20323734373635.roa
File:                     323830343a393334303a3a2f33322d3334203d3e20323734373635.roa (raw, json)
Hash identifier:          PQABk2tGRjgi0HdXA6Gy+3w/ea3Zk1+Pw+6uEtit/6E=
Subject key identifier:   2C:5E:1A:09:01:30:D1:37:97:FA:B3:F8:8E:F2:DD:A2:F4:69:44:E9
Certificate issuer:       /CN=B02C7E4BAD2C4D04EDA13AA1D86843222B031CEB
Certificate serial:       793CA519C14A5BB38B2EB953907D8CA7A6CF52B9
Authority key identifier: B0:2C:7E:4B:AD:2C:4D:04:ED:A1:3A:A1:D8:68:43:22:2B:03:1C:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B02C7E4BAD2C4D04EDA13AA1D86843222B031CEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8grffuSVE2z9P7q7vmPoZpu88Cud4ZgFZFnDiF85NPJN/0/323830343a393334303a3a2f33322d3334203d3e20323734373635.roa
Signing time:             Fri 01 May 2026 03:14:21 +0000
ROA not before:           Fri 01 May 2026 03:09:21 +0000
ROA not after:            Fri 30 Apr 2027 03:14:21 +0000
asID:                     274765
IP address blocks:        2804:9340::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8grffuSVE2z9P7q7vmPoZpu88Cud4ZgFZFnDiF85NPJN/0/B02C7E4BAD2C4D04EDA13AA1D86843222B031CEB.crl
                          rsync://rpki-repo.registro.br/repo/8grffuSVE2z9P7q7vmPoZpu88Cud4ZgFZFnDiF85NPJN/0/B02C7E4BAD2C4D04EDA13AA1D86843222B031CEB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B02C7E4BAD2C4D04EDA13AA1D86843222B031CEB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 06:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:3c:a5:19:c1:4a:5b:b3:8b:2e:b9:53:90:7d:8c:a7:a6:cf:52:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B02C7E4BAD2C4D04EDA13AA1D86843222B031CEB
        Validity
            Not Before: May  1 03:09:21 2026 GMT
            Not After : Apr 30 03:14:21 2027 GMT
        Subject: CN=2C5E1A090130D13797FAB3F88EF2DDA2F46944E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0e:16:eb:e8:68:c9:1f:83:19:c1:80:2a:31:
                    f4:a7:87:d1:79:54:c8:39:d4:47:4b:35:26:05:41:
                    30:e9:d2:53:4d:9c:c6:67:66:16:7a:12:71:c3:a8:
                    64:78:b5:3d:77:fa:bb:b2:30:e1:ec:19:d0:c5:9d:
                    e0:78:a0:85:e0:4d:72:ee:2c:e1:8e:a9:02:98:a1:
                    8f:2f:63:e8:da:8f:74:53:aa:6b:30:2d:fd:79:4a:
                    92:88:d6:50:8e:e4:f6:ce:d9:82:1d:4c:eb:6d:52:
                    68:be:b1:59:5d:2f:2b:04:5a:0b:0b:ac:08:d5:6c:
                    15:a2:0c:17:9a:03:05:3e:fa:cb:eb:37:8e:7d:f2:
                    c6:09:9b:af:77:88:a5:2c:06:3a:4c:2b:c4:37:53:
                    5b:6b:ce:f0:f2:1e:a8:8f:c6:e2:60:e4:77:fa:fe:
                    6c:7a:e0:6e:1d:cf:30:a1:3e:77:e1:b1:44:ed:f0:
                    ee:97:ce:1b:93:52:b5:1c:13:9d:05:61:43:d5:28:
                    38:b5:54:13:bc:8a:af:5f:a4:c7:17:f4:fa:1c:bf:
                    54:09:ef:6a:ee:69:2e:fc:3d:ed:fd:a5:1d:0d:95:
                    73:de:86:a7:fc:93:3f:8e:f0:63:70:39:d3:ef:89:
                    00:e7:81:38:f4:a9:46:40:44:02:25:6e:5d:96:b9:
                    26:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:5E:1A:09:01:30:D1:37:97:FA:B3:F8:8E:F2:DD:A2:F4:69:44:E9
            X509v3 Authority Key Identifier:
                keyid:B0:2C:7E:4B:AD:2C:4D:04:ED:A1:3A:A1:D8:68:43:22:2B:03:1C:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8grffuSVE2z9P7q7vmPoZpu88Cud4ZgFZFnDiF85NPJN/0/B02C7E4BAD2C4D04EDA13AA1D86843222B031CEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B02C7E4BAD2C4D04EDA13AA1D86843222B031CEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8grffuSVE2z9P7q7vmPoZpu88Cud4ZgFZFnDiF85NPJN/0/323830343a393334303a3a2f33322d3334203d3e20323734373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9340::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:e3:18:82:02:50:f9:b3:8a:94:97:af:5d:90:03:6f:ba:9b:
         ce:06:5d:d1:06:ad:ed:d4:07:fe:b5:8f:f9:8b:e1:e7:6f:4a:
         12:5c:73:a3:1f:08:04:b2:00:ab:a6:5e:b6:96:94:ce:6f:3b:
         74:72:af:0c:c8:ba:e5:31:08:66:be:28:48:b6:f3:61:2b:f4:
         99:a7:05:dd:0b:34:ac:b9:20:5e:5e:49:f2:e6:15:fe:73:41:
         2b:30:96:80:40:f8:0a:85:74:05:6c:fa:11:42:5e:f1:c7:27:
         8d:17:32:96:59:78:8b:e0:20:90:f4:75:9a:aa:79:bf:4d:b2:
         51:97:87:e8:b9:ef:07:e6:7c:8d:c1:92:f5:c2:ec:2a:91:ad:
         3e:53:a9:0f:48:92:6b:2b:5c:61:b5:df:e7:81:df:94:9e:07:
         35:74:24:00:42:17:aa:d5:67:80:ff:88:aa:31:2d:53:a5:52:
         0a:5f:cd:9b:de:2d:a0:30:c5:87:b4:4e:56:fd:7c:3b:db:f0:
         d0:c3:af:ba:62:b4:cc:44:99:04:78:56:2f:54:45:d3:4e:39:
         8a:98:36:08:ed:43:96:a7:95:bc:81:68:41:3e:a4:21:fb:3b:
         60:e6:b2:bd:3d:88:42:5e:3b:a0:10:e6:e0:85:0c:52:70:c6:
         9d:0e:ed:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:24:31 2026 by rpki-client