Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/323830343a366264633a3a2f33322d3332203d3e20323638363035.roa
File:                     323830343a366264633a3a2f33322d3332203d3e20323638363035.roa (raw, json)
Hash identifier:          Kl5X4EyHC5MLRGT8q3qzd/xJro5Jtmo5TYS5ws/R/kA=
Subject key identifier:   1B:DD:00:60:22:82:D1:63:B2:0A:4F:4D:80:6F:A6:C3:23:8A:1A:6B
Certificate issuer:       /CN=CA7A1F58E10C61CDF9AA917F1B7168A9BA99804D
Certificate serial:       35EC94CAA6D8CE1399B90973641816ACB269351D
Authority key identifier: CA:7A:1F:58:E1:0C:61:CD:F9:AA:91:7F:1B:71:68:A9:BA:99:80:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA7A1F58E10C61CDF9AA917F1B7168A9BA99804D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/323830343a366264633a3a2f33322d3332203d3e20323638363035.roa
Signing time:             Mon 27 Apr 2026 17:55:08 +0000
ROA not before:           Mon 27 Apr 2026 17:50:08 +0000
ROA not after:            Mon 26 Apr 2027 17:55:08 +0000
asID:                     268605
IP address blocks:        2804:6bdc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/CA7A1F58E10C61CDF9AA917F1B7168A9BA99804D.crl
                          rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/CA7A1F58E10C61CDF9AA917F1B7168A9BA99804D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA7A1F58E10C61CDF9AA917F1B7168A9BA99804D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 14:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ec:94:ca:a6:d8:ce:13:99:b9:09:73:64:18:16:ac:b2:69:35:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA7A1F58E10C61CDF9AA917F1B7168A9BA99804D
        Validity
            Not Before: Apr 27 17:50:08 2026 GMT
            Not After : Apr 26 17:55:08 2027 GMT
        Subject: CN=1BDD00602282D163B20A4F4D806FA6C3238A1A6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a9:2b:14:6b:6d:a9:9d:61:84:da:41:21:d7:
                    f5:03:c9:a0:2d:6c:2f:58:7f:f0:97:4a:2e:9c:86:
                    96:32:d2:ff:d6:91:eb:2f:9d:63:74:bc:dc:e0:0e:
                    1e:74:b1:ea:4b:3e:f6:ca:51:fc:10:43:4e:55:31:
                    ab:7a:b1:91:2a:a6:e3:c6:72:8e:91:d2:1e:7b:c6:
                    5b:9a:2c:b6:7d:47:e7:c2:e8:ce:aa:cf:3e:46:a1:
                    a7:49:41:e3:a2:fe:ef:62:b1:dc:0b:9a:55:c2:52:
                    5e:46:2f:b8:f6:6d:17:2f:80:22:02:0e:1b:9f:48:
                    b2:67:ce:65:6b:5e:76:19:f9:4e:45:e6:75:36:e7:
                    65:d1:95:37:d1:1c:79:0f:be:80:24:5a:d6:28:d0:
                    5e:71:96:0e:d7:4f:f1:54:71:a2:97:37:8e:14:db:
                    28:14:6e:1c:21:9f:5a:4f:5e:5d:a2:55:f6:5c:8d:
                    6b:db:23:be:e8:a2:b6:1c:f8:30:87:2a:d4:49:af:
                    10:b4:5b:9c:46:12:ff:80:01:d0:07:8f:b4:ea:b7:
                    0b:18:61:5b:d4:95:5f:49:96:6b:8a:91:16:c5:66:
                    ab:94:27:52:70:45:d6:1c:3f:a5:81:82:bb:e5:95:
                    8b:ef:21:5d:82:fe:b9:16:e7:ba:77:a7:2a:8e:e9:
                    80:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DD:00:60:22:82:D1:63:B2:0A:4F:4D:80:6F:A6:C3:23:8A:1A:6B
            X509v3 Authority Key Identifier:
                keyid:CA:7A:1F:58:E1:0C:61:CD:F9:AA:91:7F:1B:71:68:A9:BA:99:80:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/CA7A1F58E10C61CDF9AA917F1B7168A9BA99804D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA7A1F58E10C61CDF9AA917F1B7168A9BA99804D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/323830343a366264633a3a2f33322d3332203d3e20323638363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:da:21:c2:44:69:96:71:38:9f:0d:c1:ae:bb:86:84:20:b9:
         6b:f5:bd:14:3d:4e:ff:b6:d9:41:41:dd:cb:21:ae:99:59:fb:
         6d:70:62:86:94:a3:85:b6:c9:7c:05:c1:1b:29:90:70:96:a0:
         78:d9:f9:23:6d:df:f1:f3:e8:35:a9:a7:57:7c:4f:ca:92:3d:
         14:55:ed:17:94:ba:bc:42:90:14:ba:9e:cc:34:b0:ad:f7:35:
         1c:6d:8e:9d:ba:e5:5b:06:43:da:f8:c1:21:1d:12:5d:e1:c3:
         d2:ce:6d:3e:a8:74:0a:28:3c:47:10:e8:30:0f:22:43:f6:6a:
         11:6b:c3:5b:a0:fb:14:98:67:00:61:d3:8b:1e:99:e7:ce:93:
         4e:e0:97:23:a4:ea:52:a8:55:c9:25:d3:4a:a6:f4:97:76:71:
         fa:f9:73:65:f1:55:e3:75:25:3b:ad:34:8a:7b:00:98:b0:4a:
         fa:d4:db:11:5a:2f:ec:9b:5b:de:1b:a9:83:c1:c3:f9:64:e9:
         bd:50:15:1d:5f:5a:54:ec:5a:97:c2:c1:60:c3:74:0e:c1:d1:
         de:a0:c5:90:70:3c:4a:08:c6:2d:c0:84:75:52:62:fd:73:e1:
         1d:2a:a4:9a:c7:2e:e3:38:53:14:0c:4f:ef:db:5a:b0:17:1f:
         8f:3e:61:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:36:41 2026 by rpki-client