Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/323830343a383637383a3a2f33322d313238203d3e20323732363435.roa
File:                     323830343a383637383a3a2f33322d313238203d3e20323732363435.roa (raw, json)
Hash identifier:          1YFS3Vz777oJY+WAXSJiKeI7GWqNn/SC+dMyMZ/Jmac=
Subject key identifier:   5F:66:A0:15:74:E9:C2:82:0B:10:D8:AE:05:BF:8D:2C:C3:3F:BE:C8
Certificate issuer:       /CN=3490EF13BCC5964A7152D991720DF98A8B7739E8
Certificate serial:       205945874A7896EB7D6420D3CD3234C7DB232227
Authority key identifier: 34:90:EF:13:BC:C5:96:4A:71:52:D9:91:72:0D:F9:8A:8B:77:39:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3490EF13BCC5964A7152D991720DF98A8B7739E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/323830343a383637383a3a2f33322d313238203d3e20323732363435.roa
Signing time:             Wed 06 May 2026 14:11:35 +0000
ROA not before:           Wed 06 May 2026 14:06:35 +0000
ROA not after:            Wed 05 May 2027 14:11:35 +0000
asID:                     272645
IP address blocks:        2804:8678::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3490EF13BCC5964A7152D991720DF98A8B7739E8.crl
                          rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3490EF13BCC5964A7152D991720DF98A8B7739E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3490EF13BCC5964A7152D991720DF98A8B7739E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 13:44:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:59:45:87:4a:78:96:eb:7d:64:20:d3:cd:32:34:c7:db:23:22:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3490EF13BCC5964A7152D991720DF98A8B7739E8
        Validity
            Not Before: May  6 14:06:35 2026 GMT
            Not After : May  5 14:11:35 2027 GMT
        Subject: CN=5F66A01574E9C2820B10D8AE05BF8D2CC33FBEC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d0:80:69:aa:0e:58:17:33:ab:c5:4d:16:3b:
                    8e:53:5b:50:a5:f7:7c:5f:c5:c1:73:d5:51:18:a0:
                    85:64:ce:26:79:17:b0:fe:da:0f:cb:7e:db:f0:b0:
                    1c:cb:2b:a4:d3:ad:ac:cd:63:9c:73:d7:36:ef:04:
                    5f:86:37:31:18:26:cb:72:7c:87:ab:aa:6b:78:24:
                    05:7b:4a:11:13:e2:5e:ba:3f:f0:45:15:29:8f:77:
                    9b:b8:79:17:3a:ca:16:98:d5:d1:fd:a5:1b:91:28:
                    bf:d9:7d:97:ee:46:71:70:52:82:c9:1d:6a:8b:c8:
                    d6:5c:f1:8a:73:b8:d1:0d:c3:a6:81:6f:99:e7:47:
                    38:1e:2d:5d:3e:e7:29:f5:3d:2e:39:28:00:bb:c2:
                    9d:ad:0c:90:9c:8e:72:63:d1:89:43:4b:07:ad:51:
                    58:66:07:7a:19:06:38:3c:9b:55:6a:76:06:28:ad:
                    e0:9d:e2:ce:d3:55:a3:85:12:2e:07:0e:9f:18:eb:
                    ca:21:4e:d7:48:07:e6:47:0f:ef:77:7b:1b:58:08:
                    d2:68:8b:7b:7c:56:0e:f9:5d:b7:55:05:7b:f5:2f:
                    53:db:3b:e6:13:ae:1a:a7:8e:70:47:ca:6f:c2:84:
                    30:72:86:23:1f:7e:a1:b8:de:1b:77:1f:ee:ac:6f:
                    39:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:66:A0:15:74:E9:C2:82:0B:10:D8:AE:05:BF:8D:2C:C3:3F:BE:C8
            X509v3 Authority Key Identifier:
                keyid:34:90:EF:13:BC:C5:96:4A:71:52:D9:91:72:0D:F9:8A:8B:77:39:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3490EF13BCC5964A7152D991720DF98A8B7739E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3490EF13BCC5964A7152D991720DF98A8B7739E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/323830343a383637383a3a2f33322d313238203d3e20323732363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8678::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:84:ae:4a:fc:c5:62:10:73:ab:13:db:d4:b4:1a:dd:b2:08:
         02:21:9f:2f:13:93:0a:ce:b0:71:4e:a7:93:89:6b:82:9a:00:
         43:52:e5:02:cf:62:05:e8:bf:94:00:db:9d:e6:39:de:04:34:
         b5:37:2b:97:5f:81:dc:2b:8a:ba:b7:c4:dc:e4:9c:d3:8c:56:
         c0:99:e7:1f:d0:fa:6e:83:1e:26:1a:7c:38:ea:20:69:30:c2:
         15:2a:52:bc:53:68:67:2c:13:61:d8:16:6e:5e:94:dd:e5:b0:
         c0:ea:91:30:30:c7:a3:0c:5c:60:df:1f:10:8f:37:fc:93:a4:
         54:1d:9c:13:93:33:b0:c7:50:c2:43:22:ec:a7:9d:1c:cb:3b:
         05:a8:a2:4b:4e:95:d4:f7:a2:ec:2c:41:57:a6:b0:fb:6a:04:
         07:03:2c:9c:68:ef:03:1a:4d:ee:eb:96:39:23:c8:3c:5e:8d:
         99:10:94:c5:26:96:b7:72:ee:6b:08:bf:51:97:7f:5d:3f:06:
         03:e3:69:5f:1c:52:c9:e8:8d:96:b2:2e:ce:23:5e:4f:a9:ce:
         83:8a:3c:df:b5:c9:1e:9c:bb:f4:bd:f9:e1:dd:e4:a2:1e:30:
         13:47:6e:bd:f8:29:fe:44:3a:e3:da:aa:53:b9:88:92:9a:4c:
         c6:3b:92:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:30:31 2026 by rpki-client