Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/323830343a373762633a3a2f33322d313238203d3e20323731313936.roa
File:                     323830343a373762633a3a2f33322d313238203d3e20323731313936.roa (raw, json)
Hash identifier:          +TjYpdAsXU+fnV67ojc5JHJAQKNZnNONC8l1uYJW+M8=
Subject key identifier:   B9:EF:03:CE:F7:BE:4B:0A:BB:D4:2E:0E:7A:FA:8E:86:1A:4F:79:E8
Certificate issuer:       /CN=8CCBAD4CCA170E31C6A6E22B172F884B224E3C49
Certificate serial:       732246F1657E85E44F3A0947008D4BDA58EB9FD8
Authority key identifier: 8C:CB:AD:4C:CA:17:0E:31:C6:A6:E2:2B:17:2F:88:4B:22:4E:3C:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/323830343a373762633a3a2f33322d313238203d3e20323731313936.roa
Signing time:             Thu 30 Apr 2026 23:01:35 +0000
ROA not before:           Thu 30 Apr 2026 22:56:35 +0000
ROA not after:            Thu 29 Apr 2027 23:01:35 +0000
asID:                     271196
IP address blocks:        2804:77bc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.crl
                          rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:22:46:f1:65:7e:85:e4:4f:3a:09:47:00:8d:4b:da:58:eb:9f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CCBAD4CCA170E31C6A6E22B172F884B224E3C49
        Validity
            Not Before: Apr 30 22:56:35 2026 GMT
            Not After : Apr 29 23:01:35 2027 GMT
        Subject: CN=B9EF03CEF7BE4B0ABBD42E0E7AFA8E861A4F79E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b5:a4:be:49:41:8e:37:a3:b3:a4:57:99:58:
                    eb:e7:22:f9:ea:e7:07:0e:38:79:36:41:73:84:53:
                    ab:31:0b:8e:31:67:fb:c7:ad:7a:dc:f4:4b:6c:17:
                    2e:c3:d3:d8:51:bf:57:7d:43:9e:f5:e4:dc:a2:47:
                    aa:86:0f:03:41:b4:80:e4:ed:b6:a8:b0:38:cf:ca:
                    28:c7:f0:85:4f:f6:5f:93:2e:8c:e8:60:10:f5:46:
                    9a:0f:f6:5f:89:ef:cb:86:cc:a3:b4:ed:49:62:25:
                    c0:81:71:29:11:ff:aa:ba:af:0f:7f:e1:63:5c:03:
                    c2:a1:d7:13:76:1d:25:cb:5d:a4:db:6e:7f:57:14:
                    cd:7f:d7:97:45:6e:fa:ce:f6:d7:1b:d5:23:e6:d9:
                    06:5d:3b:38:01:63:aa:a2:cf:6f:fc:16:3f:d2:ad:
                    d7:d4:22:d2:2f:3d:a6:b8:05:4d:d0:30:6f:58:58:
                    8f:b5:88:f1:a8:74:b8:f1:e1:95:43:ba:62:f8:eb:
                    24:79:09:ae:97:d5:21:ef:ea:6f:18:7f:57:89:c3:
                    18:8f:10:a5:1b:7a:cd:50:40:5e:c9:7d:b9:a3:6a:
                    8c:03:9a:8a:9c:ec:ae:32:23:e8:e8:23:d2:af:d6:
                    ad:48:38:cc:bd:85:01:ef:c5:39:0e:7e:d8:f5:68:
                    07:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:EF:03:CE:F7:BE:4B:0A:BB:D4:2E:0E:7A:FA:8E:86:1A:4F:79:E8
            X509v3 Authority Key Identifier:
                keyid:8C:CB:AD:4C:CA:17:0E:31:C6:A6:E2:2B:17:2F:88:4B:22:4E:3C:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/323830343a373762633a3a2f33322d313238203d3e20323731313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:77bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:e5:56:03:9a:ac:4a:33:60:cd:c6:c5:e2:e1:3f:b0:c2:39:
         a7:78:f8:0d:9e:d7:5d:3c:ef:50:39:ea:eb:a5:af:1e:28:f7:
         5a:59:d0:48:a7:c4:69:cd:af:8a:45:e9:0e:c0:19:cc:f3:74:
         2f:7a:4b:b5:1f:2e:27:f4:0e:9f:61:66:e6:74:cc:d1:a0:9a:
         70:c3:03:82:be:2b:71:3f:6e:ad:24:55:da:55:38:ea:19:35:
         f3:cd:74:40:b1:00:0d:41:a6:5a:e1:37:44:74:56:ff:a4:29:
         1c:68:a4:89:f9:5b:14:0e:09:6c:6d:c9:0e:f4:ac:b9:92:a2:
         63:ff:be:1e:e3:7a:c7:e8:8d:6d:d7:bc:f1:83:9b:1d:c5:b1:
         13:e2:36:6c:d7:61:40:17:71:12:8c:84:25:52:01:b0:50:e3:
         cd:d3:d3:84:8e:de:b6:16:59:f9:1c:4f:e6:f6:4b:64:b5:cf:
         9e:c6:39:19:bd:ce:47:6c:ce:b3:ff:11:fb:fc:58:eb:8b:b8:
         05:72:93:36:ef:df:17:67:c6:7c:c0:83:b8:73:05:23:8b:ab:
         80:be:64:e8:36:48:fe:09:99:02:9e:c2:52:0b:42:8a:e0:77:
         e5:1f:e6:7e:4c:70:9b:38:cf:a5:0e:81:ef:31:7e:97:84:d6:
         b4:a3:26:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:38:01 2026 by rpki-client