Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a3a2f34302d3434203d3e20323734363732.roa
File:                     323830343a393165303a3a2f34302d3434203d3e20323734363732.roa (raw, json)
Hash identifier:          HPYayQLbv6cR+nYgt/FNnj+0j1VJw/gHfXsJ7p+yelo=
Subject key identifier:   1F:C9:F6:3D:84:0C:B9:43:27:63:CF:95:7A:64:5A:34:EB:31:09:C1
Certificate issuer:       /CN=C0763F448FA9C6BEB9230A4C24B9113ABF62E476
Certificate serial:       690156FF13D091F399175C6625F170099B634F96
Authority key identifier: C0:76:3F:44:8F:A9:C6:BE:B9:23:0A:4C:24:B9:11:3A:BF:62:E4:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0763F448FA9C6BEB9230A4C24B9113ABF62E476.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a3a2f34302d3434203d3e20323734363732.roa
Signing time:             Thu 23 Apr 2026 17:27:14 +0000
ROA not before:           Thu 23 Apr 2026 17:22:14 +0000
ROA not after:            Thu 22 Apr 2027 17:27:14 +0000
asID:                     274672
IP address blocks:        2804:91e0::/40 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/C0763F448FA9C6BEB9230A4C24B9113ABF62E476.crl
                          rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/C0763F448FA9C6BEB9230A4C24B9113ABF62E476.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0763F448FA9C6BEB9230A4C24B9113ABF62E476.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 13:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:01:56:ff:13:d0:91:f3:99:17:5c:66:25:f1:70:09:9b:63:4f:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0763F448FA9C6BEB9230A4C24B9113ABF62E476
        Validity
            Not Before: Apr 23 17:22:14 2026 GMT
            Not After : Apr 22 17:27:14 2027 GMT
        Subject: CN=1FC9F63D840CB9432763CF957A645A34EB3109C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:98:f8:c9:d1:bf:e2:f3:2a:02:ad:f6:59:0d:
                    ce:5e:6b:2f:87:57:bf:c0:44:57:20:e6:2e:77:0b:
                    e9:ab:f7:bb:72:8c:f7:14:23:71:77:c5:28:d8:19:
                    56:cf:0c:7c:56:8b:86:8b:e0:c1:1b:63:48:d4:36:
                    2a:43:57:50:4f:f6:81:51:d0:d9:04:f7:f0:b9:e4:
                    eb:e6:88:5e:c6:3f:02:ac:60:8d:13:6c:49:b5:72:
                    7c:79:87:23:4d:0b:d8:46:af:76:8c:ae:f5:1e:f1:
                    39:6d:d4:55:f2:5b:9a:33:e8:bc:4d:3c:ae:2b:f7:
                    38:2d:ce:a0:56:3c:75:cc:bd:b4:e9:46:b4:a4:0b:
                    f0:f2:b7:73:52:05:f9:ee:2b:d2:79:c3:07:27:e8:
                    cf:ed:36:bc:f1:18:1f:4f:b2:c4:34:00:46:1d:db:
                    73:56:5b:5a:5f:3a:11:7e:f7:fc:15:c8:1c:08:22:
                    a9:a7:64:94:7a:8f:74:73:88:21:d6:14:37:51:2c:
                    39:40:0a:ad:00:65:a8:4c:cc:58:b4:41:74:ec:2f:
                    ab:71:e3:ed:a4:71:13:f1:9f:f1:59:10:6c:58:0d:
                    03:b9:52:23:1f:c3:d9:eb:29:b6:e2:3b:bd:2e:a1:
                    ce:fd:4b:4d:4d:6a:a0:4b:69:f3:02:21:9c:19:86:
                    6c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C9:F6:3D:84:0C:B9:43:27:63:CF:95:7A:64:5A:34:EB:31:09:C1
            X509v3 Authority Key Identifier:
                keyid:C0:76:3F:44:8F:A9:C6:BE:B9:23:0A:4C:24:B9:11:3A:BF:62:E4:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/C0763F448FA9C6BEB9230A4C24B9113ABF62E476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0763F448FA9C6BEB9230A4C24B9113ABF62E476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a3a2f34302d3434203d3e20323734363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91e0::/40

    Signature Algorithm: sha256WithRSAEncryption
         4a:3e:ac:60:4d:c3:0c:2a:91:c4:82:ee:fe:2c:34:1a:9a:28:
         45:10:b9:de:59:2b:a8:4b:d1:1a:53:3b:6f:d5:83:fe:21:dd:
         14:77:8b:b6:b4:dc:86:46:4f:15:7d:4b:86:85:b9:e5:dd:86:
         93:00:28:21:38:b2:f5:54:db:0a:c6:0b:e7:a0:bc:5a:c1:4a:
         da:1c:a8:2c:42:29:6b:00:78:20:37:2c:b3:13:1e:b9:5c:f7:
         f9:47:de:32:e7:4e:01:d4:b9:1e:b4:b3:f9:b3:6f:09:9c:ff:
         ec:70:b4:fc:5f:a1:86:27:00:4d:1e:05:16:c2:1d:c5:fa:e2:
         72:d1:9f:71:5b:d0:f6:c3:a7:89:f1:19:fa:27:ce:aa:93:74:
         6d:50:c5:9b:fb:e8:eb:8b:ae:57:93:d3:14:12:04:ba:9c:16:
         d4:80:a9:9b:0b:67:68:3c:9e:7b:26:84:e6:11:8f:e0:f8:c8:
         c9:cc:44:56:6d:49:87:3f:fb:c6:0e:df:e0:db:04:10:f2:35:
         73:07:c7:fe:2b:21:bd:25:66:b3:ac:0f:4a:c1:f1:2c:05:72:
         e8:8b:2c:57:b1:d1:49:9b:e1:54:f2:cb:bf:02:2f:4e:9d:ab:
         b2:d9:fd:da:0a:39:10:b1:ba:f2:94:e1:da:42:77:6a:90:cd:
         1b:68:67:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:35:45 2026 by rpki-client