Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4EnzVr3K4fda7htrHXxa3zCuJZhj6s4akdN2kjNEgTg/0/323830343a393032343a3a2f33322d3332203d3e20323733353333.roa
File:                     323830343a393032343a3a2f33322d3332203d3e20323733353333.roa (raw, json)
Hash identifier:          t7Gdn/BbblwKkAIEGQGUzYvrxo4C5CoDqOEo9ppLmPk=
Subject key identifier:   63:32:7E:D9:61:99:70:14:A7:CE:9C:CC:55:D5:8A:02:10:01:2F:05
Certificate issuer:       /CN=01E324E0856935E5A923E1963BBE18F5274878DD
Certificate serial:       0366AC875C850DED6AAD68DB946F0C0055650B64
Authority key identifier: 01:E3:24:E0:85:69:35:E5:A9:23:E1:96:3B:BE:18:F5:27:48:78:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01E324E0856935E5A923E1963BBE18F5274878DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4EnzVr3K4fda7htrHXxa3zCuJZhj6s4akdN2kjNEgTg/0/323830343a393032343a3a2f33322d3332203d3e20323733353333.roa
Signing time:             Tue 28 Apr 2026 02:15:06 +0000
ROA not before:           Tue 28 Apr 2026 02:10:06 +0000
ROA not after:            Tue 27 Apr 2027 02:15:06 +0000
asID:                     273533
IP address blocks:        2804:9024::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4EnzVr3K4fda7htrHXxa3zCuJZhj6s4akdN2kjNEgTg/0/01E324E0856935E5A923E1963BBE18F5274878DD.crl
                          rsync://rpki-repo.registro.br/repo/B4EnzVr3K4fda7htrHXxa3zCuJZhj6s4akdN2kjNEgTg/0/01E324E0856935E5A923E1963BBE18F5274878DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01E324E0856935E5A923E1963BBE18F5274878DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 13:08:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:66:ac:87:5c:85:0d:ed:6a:ad:68:db:94:6f:0c:00:55:65:0b:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01E324E0856935E5A923E1963BBE18F5274878DD
        Validity
            Not Before: Apr 28 02:10:06 2026 GMT
            Not After : Apr 27 02:15:06 2027 GMT
        Subject: CN=63327ED961997014A7CE9CCC55D58A0210012F05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ba:e6:5c:84:d7:4e:96:bd:1b:b5:5c:c9:7d:
                    f5:98:36:63:c0:dd:32:55:aa:3f:f8:4c:a3:74:11:
                    7a:85:c2:91:a4:80:ca:98:74:a8:3d:01:b5:f3:9b:
                    35:b9:ae:6d:a2:a4:a6:13:9e:75:3f:55:32:27:b0:
                    8e:d3:10:7a:3f:44:8f:14:b3:99:5d:88:ed:b0:68:
                    23:92:1c:62:ee:dd:e6:22:8d:86:f8:da:f9:e9:9d:
                    3a:d7:90:88:21:c9:6b:2e:b6:78:a6:30:d5:c4:45:
                    63:f5:3d:45:aa:4f:fd:ae:04:32:c0:3c:b7:a5:fe:
                    ed:4d:7c:a4:b2:56:96:3b:12:b8:16:83:d9:ed:cd:
                    1c:53:20:ae:ba:aa:8c:66:23:ad:c1:96:22:76:6a:
                    d5:48:3a:eb:a2:8c:10:5e:d7:14:f8:91:37:e7:71:
                    fb:70:cd:c5:f7:7d:b1:d7:32:70:18:d9:20:1f:dd:
                    c1:2d:76:f7:dd:d3:f7:fb:59:9f:1d:7c:e8:7c:14:
                    18:29:e4:3f:7a:55:58:d7:5a:ca:b8:0a:ce:c3:46:
                    d8:53:fe:1e:03:f1:4d:68:02:06:ec:85:b9:1e:72:
                    28:be:39:36:39:7a:88:3b:30:a7:80:00:a3:41:d2:
                    8b:eb:99:29:fd:59:f6:4a:d6:17:0c:c3:46:60:99:
                    08:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:32:7E:D9:61:99:70:14:A7:CE:9C:CC:55:D5:8A:02:10:01:2F:05
            X509v3 Authority Key Identifier:
                keyid:01:E3:24:E0:85:69:35:E5:A9:23:E1:96:3B:BE:18:F5:27:48:78:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4EnzVr3K4fda7htrHXxa3zCuJZhj6s4akdN2kjNEgTg/0/01E324E0856935E5A923E1963BBE18F5274878DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01E324E0856935E5A923E1963BBE18F5274878DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4EnzVr3K4fda7htrHXxa3zCuJZhj6s4akdN2kjNEgTg/0/323830343a393032343a3a2f33322d3332203d3e20323733353333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9024::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:a3:4a:3e:6a:df:33:ad:5e:fa:89:30:1f:ac:25:00:2a:c6:
         21:f0:65:c5:ad:31:fc:a7:a9:8c:04:aa:3e:37:3e:56:15:2b:
         6a:53:7d:07:52:a6:6a:65:4b:bc:60:69:1f:a3:b0:a8:43:c6:
         47:fd:81:2a:cc:1e:9c:98:75:bf:00:d4:67:4b:ec:02:46:6d:
         0c:43:51:0b:5f:00:01:81:a3:c3:f5:08:d7:b3:45:ff:9a:f7:
         5f:15:d6:09:c2:b8:8b:f4:32:34:75:58:68:07:03:65:f5:e0:
         a4:67:a8:44:cc:ee:1c:91:8d:05:67:2d:46:c2:5d:2a:40:87:
         00:48:ca:5b:c0:de:d5:b6:b0:c4:6e:e1:2c:3f:56:8f:fe:c4:
         a8:b3:16:70:c8:9f:73:12:e3:da:cf:a2:e4:bc:85:a0:f2:ed:
         c7:33:e0:5b:70:ec:65:2f:4f:ce:6b:94:79:8c:9b:e0:f5:cc:
         17:f0:61:5f:03:4d:b3:f1:8d:d6:f9:86:d6:89:e1:37:2d:d1:
         0f:df:bc:c9:1d:e0:b4:c1:7b:46:e8:b8:d7:c4:e0:83:6a:cc:
         9f:1a:04:ed:e0:82:f4:8e:31:0a:11:58:59:a0:ec:ff:1e:1b:
         fe:93:72:32:99:e6:9d:e7:35:6d:49:8f:7e:f9:4a:2d:ae:f8:
         3f:f7:58:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:07:16 2026 by rpki-client