Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666630303a3a2f34302d3430203d3e20323734363732.roa
File:                     323830343a393165303a666630303a3a2f34302d3430203d3e20323734363732.roa (raw, json)
Hash identifier:          qeUijztYYgDrCKadlG46921XRvHCnH9Kau3H80zqe08=
Subject key identifier:   58:B7:43:8C:D8:DD:19:AC:64:E2:CF:29:79:3A:67:7B:11:3B:3F:1C
Certificate issuer:       /CN=C0763F448FA9C6BEB9230A4C24B9113ABF62E476
Certificate serial:       325D8B7B950E1F1D8AD636A7303698A9B4928A66
Authority key identifier: C0:76:3F:44:8F:A9:C6:BE:B9:23:0A:4C:24:B9:11:3A:BF:62:E4:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0763F448FA9C6BEB9230A4C24B9113ABF62E476.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666630303a3a2f34302d3430203d3e20323734363732.roa
Signing time:             Thu 23 Apr 2026 17:27:08 +0000
ROA not before:           Thu 23 Apr 2026 17:22:08 +0000
ROA not after:            Thu 22 Apr 2027 17:27:08 +0000
asID:                     274672
IP address blocks:        2804:91e0:ff00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/C0763F448FA9C6BEB9230A4C24B9113ABF62E476.crl
                          rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/C0763F448FA9C6BEB9230A4C24B9113ABF62E476.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0763F448FA9C6BEB9230A4C24B9113ABF62E476.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 13:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:5d:8b:7b:95:0e:1f:1d:8a:d6:36:a7:30:36:98:a9:b4:92:8a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0763F448FA9C6BEB9230A4C24B9113ABF62E476
        Validity
            Not Before: Apr 23 17:22:08 2026 GMT
            Not After : Apr 22 17:27:08 2027 GMT
        Subject: CN=58B7438CD8DD19AC64E2CF29793A677B113B3F1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:92:23:74:7d:be:0d:f4:20:67:7d:d0:69:de:
                    3a:32:f5:63:02:ac:24:1b:c4:3e:48:02:ad:b4:98:
                    5c:26:32:56:ef:1c:d6:74:2d:2d:c9:c8:47:8b:0b:
                    8e:0d:4f:19:e8:f0:38:c8:36:21:13:33:87:21:d9:
                    81:f7:b0:30:02:ed:e0:90:03:9c:42:9d:ee:f9:75:
                    e9:eb:05:2d:95:dd:6e:39:b8:57:72:02:0a:d3:17:
                    af:a5:87:6f:53:40:61:60:f4:b0:99:60:87:04:40:
                    75:8c:45:ec:f2:66:93:77:83:e8:2d:69:ec:df:34:
                    37:36:7d:4a:17:e7:8d:e8:5f:d6:64:f1:44:a5:76:
                    40:52:bd:4c:20:d5:40:74:94:20:32:98:26:07:29:
                    fe:dd:5a:98:d5:f7:88:0f:5f:22:08:9c:e9:f2:48:
                    5d:84:54:b1:4a:32:4d:e5:75:4d:7a:cf:4c:01:c3:
                    06:ba:94:85:bf:f9:31:2b:bf:20:3a:57:b6:d5:df:
                    ab:35:a6:97:5e:d5:f5:ea:a7:ed:18:44:0e:e4:fd:
                    bf:67:53:c2:02:dc:4c:27:fc:75:a3:0d:1e:cc:93:
                    a7:75:54:e3:5d:3d:83:99:34:ea:f0:69:ac:53:8b:
                    5c:f6:03:e5:a9:5a:76:a7:2d:4d:ef:38:6c:db:78:
                    56:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B7:43:8C:D8:DD:19:AC:64:E2:CF:29:79:3A:67:7B:11:3B:3F:1C
            X509v3 Authority Key Identifier:
                keyid:C0:76:3F:44:8F:A9:C6:BE:B9:23:0A:4C:24:B9:11:3A:BF:62:E4:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/C0763F448FA9C6BEB9230A4C24B9113ABF62E476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0763F448FA9C6BEB9230A4C24B9113ABF62E476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666630303a3a2f34302d3430203d3e20323734363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91e0:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         38:7f:f4:dc:a9:83:ed:0a:e5:b2:4e:05:91:30:68:e7:fa:51:
         12:54:77:64:d5:c4:8f:50:aa:19:ee:86:f4:1c:12:f6:6c:d0:
         27:95:ff:e8:d4:b3:f7:e4:60:89:df:90:0d:e8:23:9b:f0:4e:
         17:af:08:f0:94:d5:86:68:8b:eb:48:cd:68:dc:72:52:c4:9a:
         8a:82:ac:5f:2f:67:13:60:66:df:e7:97:3b:7e:20:94:0b:1e:
         5f:d2:e8:c3:7f:d4:fe:dc:74:a2:09:5d:01:57:74:33:0f:ce:
         88:b9:20:9b:33:b0:e5:7c:f6:24:fa:c9:14:69:ce:56:53:90:
         8c:d0:3f:3a:e7:eb:37:07:93:be:39:2b:dd:55:df:2a:20:f6:
         1f:a4:9e:19:ea:d3:7d:36:dc:b1:47:b8:2a:c5:4d:d2:8f:7c:
         79:88:35:ea:d4:1a:f8:9e:a0:e0:b4:fc:fd:ec:84:fd:5a:95:
         8f:37:43:11:00:cc:6e:9c:a1:6c:61:e5:50:e8:4e:f6:be:ab:
         9f:39:0a:a1:ed:68:b5:84:cf:5b:c6:74:19:ca:21:fa:67:22:
         94:36:7b:fe:8d:37:0e:77:b1:b5:35:d7:ce:e3:f5:6e:03:af:
         5e:09:24:73:9a:bd:0c:41:b1:61:dd:81:e6:c7:e1:82:10:42:
         f1:21:84:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:39:35 2026 by rpki-client