Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4EnzVr3K4fda7htrHXxa3zCuJZhj6s4akdN2kjNEgTg/0/323830343a393032343a3130303a3a2f34302d3430203d3e20323733353333.roa
File:                     323830343a393032343a3130303a3a2f34302d3430203d3e20323733353333.roa (raw, json)
Hash identifier:          XjXYldsKRWcIJy4ZZnF+WJLGAu3mbm+sTiSQ5g5i3cQ=
Subject key identifier:   56:75:A4:2C:98:AB:AD:92:25:63:D5:75:A3:03:68:63:EE:6F:85:F6
Certificate issuer:       /CN=01E324E0856935E5A923E1963BBE18F5274878DD
Certificate serial:       471EB894AAF44ECB48328CE7BC2653939B0E1AAD
Authority key identifier: 01:E3:24:E0:85:69:35:E5:A9:23:E1:96:3B:BE:18:F5:27:48:78:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01E324E0856935E5A923E1963BBE18F5274878DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4EnzVr3K4fda7htrHXxa3zCuJZhj6s4akdN2kjNEgTg/0/323830343a393032343a3130303a3a2f34302d3430203d3e20323733353333.roa
Signing time:             Tue 28 Apr 2026 13:15:07 +0000
ROA not before:           Tue 28 Apr 2026 13:10:07 +0000
ROA not after:            Tue 27 Apr 2027 13:15:07 +0000
asID:                     273533
IP address blocks:        2804:9024:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4EnzVr3K4fda7htrHXxa3zCuJZhj6s4akdN2kjNEgTg/0/01E324E0856935E5A923E1963BBE18F5274878DD.crl
                          rsync://rpki-repo.registro.br/repo/B4EnzVr3K4fda7htrHXxa3zCuJZhj6s4akdN2kjNEgTg/0/01E324E0856935E5A923E1963BBE18F5274878DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01E324E0856935E5A923E1963BBE18F5274878DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 13:08:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:1e:b8:94:aa:f4:4e:cb:48:32:8c:e7:bc:26:53:93:9b:0e:1a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01E324E0856935E5A923E1963BBE18F5274878DD
        Validity
            Not Before: Apr 28 13:10:07 2026 GMT
            Not After : Apr 27 13:15:07 2027 GMT
        Subject: CN=5675A42C98ABAD922563D575A3036863EE6F85F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:57:cb:e0:e8:64:a4:4e:86:79:6e:13:1a:c7:
                    22:85:5c:91:d3:58:b0:d7:21:93:f6:e5:84:fe:39:
                    12:91:31:68:af:a0:8a:f4:46:76:05:fb:00:46:5f:
                    d2:62:16:f9:4c:4a:c5:0d:da:92:83:d3:b9:84:41:
                    ed:71:d0:94:55:64:bb:5d:9e:87:39:78:86:01:2a:
                    01:6a:60:61:56:23:0b:88:15:59:c0:ba:e5:01:ba:
                    ee:58:55:0f:bd:46:5e:8d:67:5c:62:2d:a7:62:66:
                    71:17:3b:68:ac:1c:a5:98:2a:78:28:60:b5:99:17:
                    a5:7e:ae:7d:5d:ba:6d:69:26:22:42:0f:e8:a8:f4:
                    92:87:d7:10:4c:e1:34:7a:02:c3:6c:04:4f:87:a7:
                    64:d0:ac:b8:ff:7f:79:e4:dd:c2:aa:de:d4:18:39:
                    fb:9c:5e:cb:dc:44:09:b4:2d:fd:99:3c:fe:bb:83:
                    d8:8f:f5:3f:ae:8c:69:0b:b7:3e:9c:0f:a8:c5:c1:
                    6d:af:59:4d:fd:17:7e:1b:20:0c:67:47:61:d4:e5:
                    63:1c:43:28:3b:57:42:f7:d1:f8:61:82:24:76:e3:
                    57:10:5d:ea:ec:b2:68:5a:b7:97:73:6e:75:71:56:
                    44:c8:8f:e4:53:c4:d0:3c:35:c9:67:bc:22:94:d2:
                    a1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:75:A4:2C:98:AB:AD:92:25:63:D5:75:A3:03:68:63:EE:6F:85:F6
            X509v3 Authority Key Identifier:
                keyid:01:E3:24:E0:85:69:35:E5:A9:23:E1:96:3B:BE:18:F5:27:48:78:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4EnzVr3K4fda7htrHXxa3zCuJZhj6s4akdN2kjNEgTg/0/01E324E0856935E5A923E1963BBE18F5274878DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01E324E0856935E5A923E1963BBE18F5274878DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4EnzVr3K4fda7htrHXxa3zCuJZhj6s4akdN2kjNEgTg/0/323830343a393032343a3130303a3a2f34302d3430203d3e20323733353333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9024:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         2b:fe:2a:a1:55:19:6d:77:17:82:fd:70:a6:f7:05:e8:ad:e4:
         ed:41:46:9e:25:e9:84:e5:5b:05:43:8b:88:10:1a:cb:29:0f:
         97:7e:3a:f5:a3:f6:cf:2e:57:ff:1c:fa:39:8d:83:d6:01:12:
         58:5c:43:bd:09:31:ad:97:0e:b5:83:21:b7:86:55:d9:3e:61:
         97:66:a7:d7:25:7c:9a:35:aa:68:02:86:5a:96:35:6a:f3:0f:
         af:94:5e:6d:db:4b:e4:96:00:4d:fe:b6:ee:a1:74:1b:e2:a8:
         a1:1d:ca:36:8c:28:a1:f4:57:d7:94:ff:ae:54:d0:07:46:73:
         42:11:21:12:16:23:83:77:d2:3c:f0:ab:25:a2:04:b0:82:ca:
         4e:05:b1:c5:f1:99:98:27:4d:50:bd:26:bd:f3:29:72:c8:1c:
         9e:d4:3f:b4:74:37:ff:0f:a2:14:20:4e:67:3d:2d:10:e2:db:
         18:e0:26:8d:a5:2d:81:72:4b:02:73:3d:c6:1f:fd:2a:19:0a:
         f7:14:43:e0:d6:ea:00:d9:f9:8c:11:f1:92:74:de:89:83:f3:
         ec:13:ab:97:56:24:6d:dd:0b:64:05:fb:54:6e:b2:2e:81:fd:
         d6:45:c8:0e:b7:01:20:46:98:76:ef:bc:6a:ee:78:ef:60:5e:
         67:8c:80:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:29:49 2026 by rpki-client