Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a313030303a3a2f34302d3430203d3e20323635313735.roa
File:                     323830343a326263383a313030303a3a2f34302d3430203d3e20323635313735.roa (raw, json)
Hash identifier:          oVaqdnRTg+6AUGVf8SZ0Um5yGUfagklIAShym+zdIjg=
Subject key identifier:   93:4B:A4:7C:C2:A4:9B:F8:85:88:D6:7F:2E:DE:57:F8:62:29:F7:1B
Certificate issuer:       /CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
Certificate serial:       143BA432492B5B63E12D92E05652AADBD0AC2815
Authority key identifier: 23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a313030303a3a2f34302d3430203d3e20323635313735.roa
Signing time:             Tue 12 May 2026 13:21:14 +0000
ROA not before:           Tue 12 May 2026 13:16:14 +0000
ROA not after:            Tue 11 May 2027 13:21:14 +0000
asID:                     265175
IP address blocks:        2804:2bc8:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl
                          rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:3b:a4:32:49:2b:5b:63:e1:2d:92:e0:56:52:aa:db:d0:ac:28:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
        Validity
            Not Before: May 12 13:16:14 2026 GMT
            Not After : May 11 13:21:14 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:aa:95:d7:25:23:06:da:c9:2d:61:50:32:20:
                    36:54:79:d4:36:9d:b9:0f:71:61:77:44:d6:d3:25:
                    75:bf:1d:1a:7d:5a:8d:d5:fe:9f:7a:b4:bf:f4:20:
                    a3:d7:f2:5d:9a:36:fb:75:5b:d6:ed:08:63:0e:da:
                    31:a5:e2:92:52:7c:c9:28:7d:ab:d9:df:08:58:c0:
                    71:56:bd:52:31:5e:24:74:47:0a:c4:be:c5:82:62:
                    0f:e0:18:23:3e:bb:a9:34:57:97:fb:c4:6e:d3:ee:
                    34:f0:6b:cf:20:24:20:e1:0d:5d:0b:36:58:7f:45:
                    5c:b5:d6:cd:1a:ad:32:b7:1a:61:5c:5c:cd:be:d7:
                    85:25:c1:4b:f6:b6:b8:32:ea:1e:da:2f:53:42:bb:
                    9c:fc:81:d9:b4:1b:7c:d2:73:ad:65:e0:a3:c5:a8:
                    68:2d:3f:1c:fc:ac:67:2a:e1:07:1b:a2:bd:2e:1c:
                    13:02:3f:2d:b2:27:96:29:5b:87:dc:95:4c:04:ff:
                    58:48:ef:e1:16:3b:96:7e:41:57:0b:81:8f:e1:16:
                    7c:a9:95:db:47:12:87:57:2b:f3:63:77:d5:37:9a:
                    eb:66:a6:83:b7:0e:5e:f5:a6:20:ac:c4:00:7f:df:
                    0e:0e:ce:82:13:80:d6:60:fe:52:e6:0b:9f:f2:ea:
                    4c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4B:A4:7C:C2:A4:9B:F8:85:88:D6:7F:2E:DE:57:F8:62:29:F7:1B
            X509v3 Authority Key Identifier:
                keyid:23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a313030303a3a2f34302d3430203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:1c:13:cd:1f:88:d2:e9:dc:7c:01:02:41:09:65:f5:69:af:
         7f:83:e8:6d:17:74:75:82:ea:e7:5b:89:f4:62:96:5c:ff:37:
         5f:8b:db:c0:c9:4a:ef:ea:ef:22:ce:75:c9:5b:2f:d4:38:54:
         af:e7:41:af:b0:6d:9d:3a:24:39:64:3f:70:05:c8:64:be:85:
         a6:da:fa:5e:83:5c:15:e4:9f:74:46:18:1e:52:a7:cd:ec:83:
         e2:57:aa:c1:02:da:d7:31:1c:26:59:c3:4f:f2:d7:1c:1b:18:
         f1:8f:c9:a4:63:cb:e4:61:13:e2:ad:01:b9:af:9a:3e:8d:86:
         4e:39:54:db:46:af:aa:fe:ef:97:61:f9:28:7a:27:c3:4a:81:
         f7:2d:6c:ad:7f:11:3b:9f:4f:c4:e8:ab:3c:8a:68:89:6e:f9:
         85:a1:7f:76:64:fd:43:6b:c7:0d:98:71:83:8e:1c:b6:f9:d7:
         08:d8:9f:ab:1f:0b:ce:7b:87:b2:c5:2c:60:92:1e:e2:42:8c:
         aa:e6:f5:7c:78:11:e9:9a:93:be:5e:0f:6e:7f:e1:d3:64:18:
         82:e7:da:29:49:31:30:ca:1c:09:2c:b8:91:27:75:03:d0:f6:
         71:1c:df:29:7e:93:4d:1a:c7:27:4c:e6:6b:27:6f:95:63:c0:
         91:09:b4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:37:06 2026 by rpki-client