Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/323830343a383765383a343030303a3a2f33342d3334203d3e20323732373339.roa
File:                     323830343a383765383a343030303a3a2f33342d3334203d3e20323732373339.roa (raw, json)
Hash identifier:          CWokHqgrsha+Sb+f0wHIPTEAt616bL68ZWUash5X+h8=
Subject key identifier:   AB:8F:9A:98:9F:16:D3:E2:40:F5:96:42:EC:5C:EF:5E:45:95:C9:5D
Certificate issuer:       /CN=1E35A984122DB2D3B405A353D1AF357DBE908F56
Certificate serial:       12972261B3C6E3565084EF57EF782C52032F7438
Authority key identifier: 1E:35:A9:84:12:2D:B2:D3:B4:05:A3:53:D1:AF:35:7D:BE:90:8F:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E35A984122DB2D3B405A353D1AF357DBE908F56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/323830343a383765383a343030303a3a2f33342d3334203d3e20323732373339.roa
Signing time:             Thu 23 Apr 2026 15:53:28 +0000
ROA not before:           Thu 23 Apr 2026 15:48:28 +0000
ROA not after:            Thu 22 Apr 2027 15:53:28 +0000
asID:                     272739
IP address blocks:        2804:87e8:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/1E35A984122DB2D3B405A353D1AF357DBE908F56.crl
                          rsync://rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/1E35A984122DB2D3B405A353D1AF357DBE908F56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E35A984122DB2D3B405A353D1AF357DBE908F56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:49:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:97:22:61:b3:c6:e3:56:50:84:ef:57:ef:78:2c:52:03:2f:74:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E35A984122DB2D3B405A353D1AF357DBE908F56
        Validity
            Not Before: Apr 23 15:48:28 2026 GMT
            Not After : Apr 22 15:53:28 2027 GMT
        Subject: CN=AB8F9A989F16D3E240F59642EC5CEF5E4595C95D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7d:ad:2f:4a:2e:c5:67:1f:60:2c:ab:bf:4b:
                    eb:a6:c0:68:da:56:67:53:a6:66:93:6c:4b:0e:e9:
                    70:0e:51:6e:b4:a9:de:f1:46:7b:11:6b:33:c9:db:
                    1c:a1:0b:b4:27:f9:4b:8a:bd:a1:b4:11:39:8d:6a:
                    6c:f5:cd:b2:67:cd:24:7c:f4:8a:b3:52:02:1d:58:
                    5f:b2:b4:cb:eb:fd:56:c3:73:28:9d:03:34:cb:10:
                    bf:01:33:25:a8:a0:5e:77:1f:11:47:c5:a1:f5:75:
                    95:3b:a2:b3:5e:69:ac:dc:52:2f:8a:95:2c:7e:6c:
                    db:9d:87:bf:ec:a9:67:79:27:b2:95:67:84:86:b6:
                    91:fd:3b:ee:04:99:3c:78:35:7a:f8:65:13:48:5b:
                    c3:80:c1:61:b4:4c:98:0d:5d:2e:8d:8c:55:77:63:
                    69:42:fb:25:5f:42:97:e2:e1:2b:91:f3:c3:7f:d3:
                    4c:36:46:73:ba:a1:b5:89:6f:0c:3b:ea:79:f6:4a:
                    b2:94:b5:1f:02:fa:f1:27:db:0a:a0:13:d0:99:c9:
                    1d:1f:ef:25:f9:b5:ac:96:df:f9:50:1d:c6:e8:54:
                    50:a3:4c:a3:93:47:78:ca:b5:7c:3e:e2:fa:9c:29:
                    d6:5d:df:bc:1b:99:63:05:c5:1d:a1:2c:75:11:11:
                    a6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:8F:9A:98:9F:16:D3:E2:40:F5:96:42:EC:5C:EF:5E:45:95:C9:5D
            X509v3 Authority Key Identifier:
                keyid:1E:35:A9:84:12:2D:B2:D3:B4:05:A3:53:D1:AF:35:7D:BE:90:8F:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/1E35A984122DB2D3B405A353D1AF357DBE908F56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E35A984122DB2D3B405A353D1AF357DBE908F56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/323830343a383765383a343030303a3a2f33342d3334203d3e20323732373339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87e8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5a:c0:ed:a5:bb:d5:ce:84:e3:b9:bf:6d:c4:72:d4:df:62:0b:
         13:98:0d:19:3f:58:b6:c4:da:c2:ca:dc:c8:4c:aa:cf:d6:cb:
         9e:a1:7d:bb:65:f7:5f:1e:5e:84:70:69:88:ea:b5:0d:ab:9c:
         30:f9:b0:d3:a9:97:f3:cf:97:7b:2d:57:b8:74:b5:8e:97:21:
         c8:fb:90:6f:13:47:06:0b:fb:6f:7d:b8:a5:37:8e:a6:49:d3:
         9d:00:b5:f7:ca:30:ff:d9:21:3e:ad:4d:d4:8f:ed:fa:de:ae:
         2d:06:5e:ad:67:64:76:e0:a8:03:bc:89:db:54:dd:d6:ef:5b:
         ca:25:1b:b9:3c:e9:58:b5:e1:03:eb:ca:7e:9a:03:3b:c0:66:
         e7:dd:b3:32:db:be:73:63:60:ff:81:46:a0:79:62:62:ca:b0:
         a8:b1:17:3e:56:6f:9b:45:11:60:bc:78:bf:9a:cf:37:2d:93:
         f2:82:eb:7d:3e:cd:c3:56:23:c4:fd:66:e5:36:21:83:91:3f:
         b5:d5:fe:8f:6a:f4:bb:ac:39:a0:d9:86:f3:e7:8f:81:0f:68:
         e9:01:ee:98:c9:1c:c9:98:23:89:27:1e:7b:1d:12:cd:c4:ef:
         d9:f5:ec:c1:c7:16:f4:83:52:70:14:38:44:54:36:b9:fb:4c:
         a3:60:03:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:20:38 2026 by rpki-client