Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/323830343a346463343a3a2f33322d3438203d3e20323638323138.roa
File:                     323830343a346463343a3a2f33322d3438203d3e20323638323138.roa (raw, json)
Hash identifier:          xMKDuP6nXCOvWDDoXNJrswTk2I3ipCgbRao3U+Psee8=
Subject key identifier:   5F:C7:C6:F4:E1:45:CA:25:89:5E:6B:07:60:66:DD:14:39:96:06:12
Certificate issuer:       /CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
Certificate serial:       173F9F0AA8AB6FD20E85479FB4BA18C1F1616243
Authority key identifier: 02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/323830343a346463343a3a2f33322d3438203d3e20323638323138.roa
Signing time:             Tue 21 Apr 2026 04:38:07 +0000
ROA not before:           Tue 21 Apr 2026 04:33:07 +0000
ROA not after:            Tue 20 Apr 2027 04:38:07 +0000
asID:                     268218
IP address blocks:        2804:4dc4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl
                          rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 18:36:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:3f:9f:0a:a8:ab:6f:d2:0e:85:47:9f:b4:ba:18:c1:f1:61:62:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
        Validity
            Not Before: Apr 21 04:33:07 2026 GMT
            Not After : Apr 20 04:38:07 2027 GMT
        Subject: CN=5FC7C6F4E145CA25895E6B076066DD1439960612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:15:50:3e:38:39:0c:28:b3:b8:b8:25:3f:aa:
                    bd:5f:6d:a0:9f:df:84:17:43:70:96:8d:f5:74:a1:
                    14:f6:b6:99:aa:a0:86:c9:42:f5:6e:6f:83:49:d9:
                    cd:9d:65:3d:c9:16:cd:f4:ea:6e:95:f6:9e:96:95:
                    a1:bc:81:c1:52:e9:9e:1f:6a:c2:6f:58:34:e5:29:
                    d0:53:c2:0d:e7:0c:d3:8c:2d:53:3c:b4:6f:9e:c8:
                    25:b6:91:11:59:9e:75:ae:ec:35:4c:a6:d5:f8:fd:
                    b9:d4:fb:cd:98:7a:ea:90:f8:0e:0a:56:97:15:45:
                    d5:ab:4e:db:26:3f:53:9a:a0:63:13:af:27:ed:9c:
                    47:a5:2f:0c:5b:e7:ad:11:b3:59:10:43:51:83:57:
                    f3:0e:1b:63:53:52:ae:93:96:0d:03:04:20:db:4c:
                    17:a7:d9:07:2a:02:7c:de:89:21:20:14:a7:60:de:
                    4d:4c:2f:ac:95:c5:33:11:96:0c:c0:79:50:3d:da:
                    6f:c6:80:fa:70:6f:53:6d:a6:60:00:80:15:7e:79:
                    26:36:91:8c:44:e6:25:b9:c0:39:d6:b2:f3:0a:70:
                    1a:54:dd:61:54:d9:75:a9:53:15:ec:07:d4:8f:2f:
                    de:7c:fe:88:dd:e0:c0:4d:45:b6:2c:90:41:2b:be:
                    3a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C7:C6:F4:E1:45:CA:25:89:5E:6B:07:60:66:DD:14:39:96:06:12
            X509v3 Authority Key Identifier:
                keyid:02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/323830343a346463343a3a2f33322d3438203d3e20323638323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4dc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:7d:13:7c:fa:ec:30:6e:e6:0a:2a:f1:ae:b3:31:05:fb:26:
         b9:3a:7d:be:01:e5:9a:a7:46:85:13:3a:0d:fc:5c:32:73:a4:
         92:d9:14:75:20:01:f6:b3:82:cc:99:d2:5d:9e:b4:c7:73:9a:
         51:c8:07:8b:3e:18:aa:22:9c:8e:5d:44:32:03:2a:d4:9a:d3:
         6c:a6:1b:61:40:d5:45:c4:b1:a6:d2:8b:c7:c0:68:1c:4d:c1:
         b6:4b:66:7d:8c:22:ae:f1:89:28:d7:c6:d4:a6:35:fb:2a:2c:
         e2:ed:7e:e2:8e:04:6d:24:5f:80:85:81:f2:40:f4:27:7e:c4:
         2b:21:f8:42:b4:42:4e:f0:30:df:63:32:b0:b4:49:9a:a1:a9:
         7e:42:98:28:49:30:1a:03:99:9d:9b:cb:33:d8:43:12:d2:31:
         1e:4a:99:e8:ad:37:b3:8e:b0:8e:54:9b:e9:8b:57:6d:2f:ca:
         70:b4:96:e4:64:0f:04:d0:fb:06:88:f7:df:93:d7:3f:b2:74:
         a9:6f:da:7b:47:c9:95:9d:2a:13:78:1b:40:ac:71:0a:dc:4b:
         18:e2:67:1a:1f:a9:b4:e6:58:4d:db:3b:9c:6c:ec:3c:4a:b2:
         43:9a:fd:05:c1:af:24:57:59:91:0c:01:d1:df:eb:f4:36:13:
         73:82:5c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:16:55 2026 by rpki-client