Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/323830343a313762383a3a2f33322d3438203d3e20323632343334.roa
File:                     323830343a313762383a3a2f33322d3438203d3e20323632343334.roa (raw, json)
Hash identifier:          F0lAK/H+F1+uVK+ER7sQSvgPpWB0g5ZYu/wAgXtDj9M=
Subject key identifier:   D4:F6:CB:F3:6C:00:28:50:EA:5E:3B:02:C3:8A:32:62:4E:A6:23:96
Certificate issuer:       /CN=A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15
Certificate serial:       0A21531D4F392AD7DEDFAABA95D548F57215DEB2
Authority key identifier: A4:C0:BA:3A:9F:F0:5A:01:E2:EA:16:AB:06:1A:D9:9A:D6:AA:0D:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/323830343a313762383a3a2f33322d3438203d3e20323632343334.roa
Signing time:             Tue 05 May 2026 21:27:06 +0000
ROA not before:           Tue 05 May 2026 21:22:06 +0000
ROA not after:            Tue 04 May 2027 21:27:06 +0000
asID:                     262434
IP address blocks:        2804:17b8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.crl
                          rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 11:53:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:21:53:1d:4f:39:2a:d7:de:df:aa:ba:95:d5:48:f5:72:15:de:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15
        Validity
            Not Before: May  5 21:22:06 2026 GMT
            Not After : May  4 21:27:06 2027 GMT
        Subject: CN=D4F6CBF36C002850EA5E3B02C38A32624EA62396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:52:7c:27:7a:68:d5:fe:d6:e0:08:a1:57:a4:
                    38:80:41:0d:e4:f5:ba:4f:3e:3e:b3:66:48:d8:22:
                    0a:79:db:6f:67:9d:27:80:dc:43:c8:3c:a6:ce:6f:
                    dc:8d:5a:9c:31:05:59:82:6e:cd:af:03:02:23:8e:
                    4f:ab:f3:6f:c4:82:8b:ec:08:2c:53:8d:cd:94:cd:
                    4b:c1:8e:87:f0:03:90:25:40:42:61:64:7e:8c:9e:
                    76:ab:88:38:cf:fb:4e:4f:9b:4a:b7:39:25:32:97:
                    6d:df:19:7e:b8:c3:3c:ea:29:b4:04:fc:02:d7:07:
                    ed:93:d8:59:e8:72:4d:10:44:75:77:47:c4:d0:fa:
                    94:fb:5e:83:af:8c:3a:ad:49:5b:9e:e2:20:63:17:
                    18:97:94:e6:32:2f:ef:44:b8:e0:d5:9b:2e:0e:60:
                    90:1c:04:0e:d2:39:a5:8f:dd:6d:df:8e:8d:01:ec:
                    d5:9b:17:d5:c1:ef:e2:2d:b7:0c:74:ca:ff:fa:1c:
                    c2:14:29:dc:c0:df:b7:94:49:d5:87:c7:a8:be:07:
                    66:04:b3:e1:29:f6:74:7d:fb:d7:76:02:2f:5f:a5:
                    b4:0e:d1:61:96:ff:1c:d0:99:7b:a4:94:94:fe:f6:
                    43:3e:e4:40:48:7b:ee:7c:be:ce:b2:9c:7d:a0:cd:
                    67:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F6:CB:F3:6C:00:28:50:EA:5E:3B:02:C3:8A:32:62:4E:A6:23:96
            X509v3 Authority Key Identifier:
                keyid:A4:C0:BA:3A:9F:F0:5A:01:E2:EA:16:AB:06:1A:D9:9A:D6:AA:0D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/323830343a313762383a3a2f33322d3438203d3e20323632343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:17b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:b0:3d:fe:14:80:9c:17:fa:3d:4d:0d:16:15:2c:21:05:45:
         78:91:02:97:8d:eb:76:34:42:a6:67:3c:27:f8:5f:75:69:4b:
         59:54:38:84:7e:64:6a:dc:5a:ea:61:50:36:9b:6e:17:29:f5:
         41:e4:02:09:49:02:ee:71:60:f3:32:e1:4d:05:af:a5:8a:e3:
         c1:01:1e:c9:f2:55:5a:00:ca:a1:06:70:9e:1b:34:82:01:05:
         b1:fb:b7:d7:34:0c:31:d9:be:03:93:31:ff:f6:bd:f3:99:ed:
         db:2a:d0:21:83:73:a9:d6:58:95:3c:2d:f2:88:15:f3:74:b2:
         7b:ad:c1:3c:32:fc:57:7b:77:43:05:bf:0b:c5:a4:30:55:5c:
         35:2b:7e:e8:56:92:71:91:30:b2:ea:6b:8d:ab:15:05:f6:6a:
         41:f3:d0:04:15:0b:2a:f3:80:16:35:27:63:11:93:8f:2f:85:
         a6:bb:e3:f2:1a:6b:31:d9:63:5e:e3:0e:9b:69:02:1e:c6:f1:
         3d:1a:09:1a:c9:31:8a:63:ee:74:93:7a:e4:32:25:a6:38:85:
         ae:cf:7f:81:9e:13:82:4d:ae:20:54:1e:50:e4:39:03:d3:72:
         34:fc:54:3e:3d:36:ef:a3:2d:66:77:e8:64:57:ad:42:c3:06:
         e3:ea:8d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:33:20 2026 by rpki-client