Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/323830343a316537383a3a2f33322d3438203d3e203238363538.roa
File:                     323830343a316537383a3a2f33322d3438203d3e203238363538.roa (raw, json)
Hash identifier:          VB1wETZGGd5tRLuDbbk0qNjWwSXzjqGswjfBbljWUKg=
Subject key identifier:   C3:23:95:AC:D8:23:66:D0:D4:B9:3B:7A:7C:C3:99:44:91:FB:14:E5
Certificate issuer:       /CN=79F14A3C86D9D72492B68D319F7567646C1907E3
Certificate serial:       502A0719C6A880EE346D222FA174E68F07AA0525
Authority key identifier: 79:F1:4A:3C:86:D9:D7:24:92:B6:8D:31:9F:75:67:64:6C:19:07:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79F14A3C86D9D72492B68D319F7567646C1907E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/323830343a316537383a3a2f33322d3438203d3e203238363538.roa
Signing time:             Tue 14 Apr 2026 13:26:48 +0000
ROA not before:           Tue 14 Apr 2026 13:21:48 +0000
ROA not after:            Tue 13 Apr 2027 13:26:48 +0000
asID:                     28658
IP address blocks:        2804:1e78::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/79F14A3C86D9D72492B68D319F7567646C1907E3.crl
                          rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/79F14A3C86D9D72492B68D319F7567646C1907E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79F14A3C86D9D72492B68D319F7567646C1907E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 06:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:2a:07:19:c6:a8:80:ee:34:6d:22:2f:a1:74:e6:8f:07:aa:05:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79F14A3C86D9D72492B68D319F7567646C1907E3
        Validity
            Not Before: Apr 14 13:21:48 2026 GMT
            Not After : Apr 13 13:26:48 2027 GMT
        Subject: CN=C32395ACD82366D0D4B93B7A7CC3994491FB14E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9a:bf:a9:24:34:f1:ee:2e:91:3e:0e:00:5d:
                    38:c9:f4:11:25:69:20:28:2c:f0:48:39:e2:36:2c:
                    a5:6a:7d:98:30:d7:33:28:82:8a:b2:dd:a3:b8:58:
                    fb:d0:b5:a0:1c:3c:ca:c5:df:1c:57:e6:de:b0:cc:
                    eb:b0:15:07:1c:5b:81:ee:a2:29:2d:83:9b:36:44:
                    55:27:53:18:67:b5:a6:56:ef:83:74:a9:31:72:51:
                    ae:9f:9a:97:13:43:9a:cb:b4:65:fe:9c:4d:b5:68:
                    44:78:88:24:b2:53:ba:74:a5:31:29:18:b2:2a:36:
                    28:8a:96:e3:b0:d4:93:f6:1a:14:18:4d:22:94:d4:
                    f8:aa:e9:fa:57:5f:5c:15:dc:00:29:d3:bd:5f:ec:
                    d5:65:14:a5:07:e3:6e:c0:19:e0:b0:44:e3:41:95:
                    51:5e:3f:26:9b:ac:aa:93:33:37:de:37:31:07:69:
                    ba:82:74:81:2d:eb:ff:5d:3a:11:be:89:1f:f9:6f:
                    00:8c:27:7f:c5:36:4f:5e:c6:77:ab:2b:2b:9c:75:
                    8d:84:4c:9e:73:33:83:b5:48:d3:06:9a:e6:4c:72:
                    2e:bc:8f:3d:ef:03:eb:c7:9c:5e:b0:5a:8d:a8:32:
                    bd:af:35:57:fe:51:68:f1:db:58:3d:ab:39:cd:92:
                    1f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:23:95:AC:D8:23:66:D0:D4:B9:3B:7A:7C:C3:99:44:91:FB:14:E5
            X509v3 Authority Key Identifier:
                keyid:79:F1:4A:3C:86:D9:D7:24:92:B6:8D:31:9F:75:67:64:6C:19:07:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/79F14A3C86D9D72492B68D319F7567646C1907E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79F14A3C86D9D72492B68D319F7567646C1907E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/323830343a316537383a3a2f33322d3438203d3e203238363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e78::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:ac:1d:82:0a:8c:74:c2:30:f1:cf:0e:aa:58:e0:3b:fd:e5:
         38:4a:c5:8b:b0:05:32:87:6e:be:e9:69:6f:9d:43:7e:65:3f:
         85:7e:36:5a:1b:93:43:23:2b:b6:c0:5a:ec:d3:4a:5e:a5:70:
         d4:ce:13:0a:a5:e3:49:22:a3:df:3a:95:60:b0:c6:76:59:e6:
         d4:69:a3:fe:9a:e6:1f:ab:dd:48:8f:cb:52:00:e5:b0:89:ff:
         34:a7:2f:45:c6:7d:7b:04:27:57:2d:81:f0:b6:00:e3:dc:fc:
         d9:7c:d9:b5:05:55:f5:51:8b:6a:b3:40:fd:04:89:fd:8f:ef:
         04:96:c0:94:47:5e:ca:85:b3:95:42:fb:a8:3a:9d:5e:7e:a4:
         a2:d2:88:7a:d4:6f:e1:40:9d:93:c2:9d:ef:89:13:24:a5:99:
         d7:d3:da:3a:60:34:7b:1c:ee:34:a8:e6:fc:fd:04:66:73:c1:
         ad:52:f9:26:46:07:26:59:fa:7d:72:03:f8:af:04:1a:66:13:
         d8:c7:e7:f8:50:2f:6d:95:45:56:c2:56:e8:92:2a:f9:7f:5f:
         57:8c:f5:e9:dc:a7:87:77:b5:c1:7f:90:fa:ec:32:cf:4d:2c:
         ef:74:b9:e0:a0:89:0f:49:09:e3:92:7d:86:9c:54:80:7e:27:
         43:91:41:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:14:32 2026 by rpki-client