Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/323830343a323939343a3a2f33322d313238203d3e20323634303233.roa
File:                     323830343a323939343a3a2f33322d313238203d3e20323634303233.roa (raw, json)
Hash identifier:          2yJqP/r63XT0Nxa/GLgQReBDqeEDv4rqmHyBFBmdkDQ=
Subject key identifier:   E6:82:E0:10:2B:9D:4F:87:3D:C6:E5:81:C8:05:D3:E1:99:45:16:ED
Certificate issuer:       /CN=F96D4D681DF802694744BB40A033DE7074AB52DB
Certificate serial:       2FDFA8FBF6F0E06EF53F2C84E03544B5565F17FE
Authority key identifier: F9:6D:4D:68:1D:F8:02:69:47:44:BB:40:A0:33:DE:70:74:AB:52:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F96D4D681DF802694744BB40A033DE7074AB52DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/323830343a323939343a3a2f33322d313238203d3e20323634303233.roa
Signing time:             Fri 01 May 2026 00:47:26 +0000
ROA not before:           Fri 01 May 2026 00:42:26 +0000
ROA not after:            Fri 30 Apr 2027 00:47:26 +0000
asID:                     264023
IP address blocks:        2804:2994::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/F96D4D681DF802694744BB40A033DE7074AB52DB.crl
                          rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/F96D4D681DF802694744BB40A033DE7074AB52DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F96D4D681DF802694744BB40A033DE7074AB52DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:52:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:df:a8:fb:f6:f0:e0:6e:f5:3f:2c:84:e0:35:44:b5:56:5f:17:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F96D4D681DF802694744BB40A033DE7074AB52DB
        Validity
            Not Before: May  1 00:42:26 2026 GMT
            Not After : Apr 30 00:47:26 2027 GMT
        Subject: CN=E682E0102B9D4F873DC6E581C805D3E1994516ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:67:1c:d4:e6:94:fa:55:b3:fe:2a:12:b7:e0:
                    ea:03:60:0a:98:d1:54:a5:67:c7:74:85:0d:c8:2f:
                    cf:38:7c:b8:bb:46:2d:a6:69:48:d3:0a:64:fb:d6:
                    6e:af:d5:1b:60:99:19:9d:43:59:f8:58:db:f3:f0:
                    2d:75:03:55:06:75:80:b3:cf:91:ba:03:9b:a4:2c:
                    09:e8:89:09:73:9a:f0:69:97:4c:5c:c9:b1:cc:f4:
                    4f:88:b8:1b:a8:4f:a7:21:1f:76:c2:30:34:6c:fc:
                    cf:d1:6b:77:c5:55:cc:a7:b2:04:e0:19:3a:bc:75:
                    a4:1f:58:37:70:d4:c4:98:3c:0a:ed:fe:dd:46:a6:
                    cd:96:c6:37:73:68:28:2c:e6:4e:4b:df:f1:7b:25:
                    f9:b8:52:ec:fd:60:72:a5:19:38:81:9e:c7:63:5e:
                    4a:b4:d4:88:33:fe:ed:f6:1b:73:aa:8b:15:1e:25:
                    d0:81:16:b7:aa:32:75:02:08:af:65:89:f6:c9:2e:
                    12:93:66:29:5f:f8:e0:3d:a6:ef:7a:0c:70:2f:85:
                    4e:5b:6f:2a:f9:54:15:da:39:52:ea:08:59:b9:37:
                    e8:98:49:5b:a3:58:1b:96:3f:9a:cf:8d:bb:9c:06:
                    2f:b5:02:f2:31:d4:96:9c:5a:17:a9:27:25:79:41:
                    f3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:82:E0:10:2B:9D:4F:87:3D:C6:E5:81:C8:05:D3:E1:99:45:16:ED
            X509v3 Authority Key Identifier:
                keyid:F9:6D:4D:68:1D:F8:02:69:47:44:BB:40:A0:33:DE:70:74:AB:52:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/F96D4D681DF802694744BB40A033DE7074AB52DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F96D4D681DF802694744BB40A033DE7074AB52DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/323830343a323939343a3a2f33322d313238203d3e20323634303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2994::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:18:87:8e:7a:cb:1c:5a:10:ef:ed:e3:3f:fd:a5:1b:46:c0:
         c2:38:00:98:55:20:3d:42:e4:f7:12:48:7b:ab:3a:63:fe:96:
         3f:c6:05:54:1c:69:44:c8:14:0a:76:15:bd:48:29:b0:1b:40:
         4d:d8:eb:1d:7d:f5:18:7d:55:7a:0c:80:52:dd:5c:42:e3:d6:
         2b:04:88:51:c1:b7:25:d7:af:e2:3e:28:52:d4:e4:1f:6c:62:
         2d:19:f1:65:36:8c:d8:6f:f2:b3:c1:8e:1c:be:d2:d8:02:e1:
         21:02:50:e7:3f:fe:0e:8b:e8:d7:96:d0:a8:4d:5c:e1:7b:7b:
         19:49:76:3b:b6:fd:ad:c2:ec:07:85:77:f4:37:65:23:83:61:
         7d:65:1e:73:78:2e:99:71:06:d0:a7:08:6c:88:5f:4b:ff:b0:
         17:e6:5f:47:44:bf:8f:ff:89:e5:58:ef:63:6a:11:0e:2d:44:
         ff:81:29:a6:26:67:8a:24:b5:83:93:89:35:69:d3:ff:7e:fd:
         09:ad:b1:ca:08:14:68:29:8a:53:48:fd:9d:a2:a3:63:a9:f6:
         6f:7e:2a:a2:73:23:48:73:2d:d4:fe:43:eb:d6:17:a3:7c:ce:
         40:58:49:71:88:aa:70:a6:e7:d7:39:f1:72:be:d0:b6:c9:98:
         b6:af:d2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:49:05 2026 by rpki-client