Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/323830343a6637343a3a2f33322d3438203d3e20323633353836.roa
File:                     323830343a6637343a3a2f33322d3438203d3e20323633353836.roa (raw, json)
Hash identifier:          FugEAuCnUBe8mRZq2qQFdSmm6SzFGWe0SN0dFrmPrQI=
Subject key identifier:   41:C7:67:A6:92:04:0B:27:69:4B:D8:21:E6:D7:34:31:FA:8E:95:27
Certificate issuer:       /CN=9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A
Certificate serial:       03E5F13CECF539B72F6D999F583CCC49D9C1076C
Authority key identifier: 9C:96:A5:BD:45:B0:FB:8E:B4:DC:60:35:24:F9:AF:E8:41:D3:0D:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/323830343a6637343a3a2f33322d3438203d3e20323633353836.roa
Signing time:             Tue 05 May 2026 19:02:01 +0000
ROA not before:           Tue 05 May 2026 18:57:01 +0000
ROA not after:            Tue 04 May 2027 19:02:01 +0000
asID:                     263586
IP address blocks:        2804:f74::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.crl
                          rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:04:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e5:f1:3c:ec:f5:39:b7:2f:6d:99:9f:58:3c:cc:49:d9:c1:07:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A
        Validity
            Not Before: May  5 18:57:01 2026 GMT
            Not After : May  4 19:02:01 2027 GMT
        Subject: CN=41C767A692040B27694BD821E6D73431FA8E9527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fb:3d:ee:89:cf:71:44:06:22:4f:bd:bb:13:
                    72:7e:18:f7:7a:92:5d:da:8a:cb:23:38:ab:a1:e0:
                    93:d4:f6:af:bc:88:88:ca:00:f7:2f:e1:71:4e:3a:
                    b9:87:ab:d9:3d:36:4e:59:b6:27:8f:ba:81:64:ad:
                    67:4a:aa:15:3a:af:9d:72:0b:70:44:c5:9a:de:2d:
                    f7:09:3b:30:88:07:65:e9:9a:a3:64:05:5c:b8:17:
                    dc:ed:f3:8e:cd:37:f8:8a:63:af:b8:1b:b2:31:a5:
                    c3:8c:b5:b8:e9:8d:f4:62:b7:97:a6:fd:2c:38:90:
                    64:20:bb:a5:04:f6:11:9a:93:72:f1:77:89:26:e5:
                    fd:75:ae:eb:8d:e3:c3:c1:55:cb:8b:20:c5:6b:8c:
                    58:4a:e4:cb:01:f3:15:6c:f0:fa:eb:41:24:9b:e1:
                    8a:28:26:f9:4c:4e:52:f3:0d:23:15:0a:ec:44:55:
                    4c:1d:3e:b7:e5:67:70:64:ee:ee:ce:75:b8:98:0c:
                    0e:ab:c2:f5:0f:12:e2:5f:c0:fa:24:4a:fd:22:40:
                    b6:9a:d0:44:26:5e:0e:24:86:dd:e3:82:2e:0d:d5:
                    85:f3:4c:23:b4:58:4e:b5:3f:c0:e7:e3:3c:94:5c:
                    5d:6f:33:d4:38:16:8e:e7:ed:c6:e7:a6:9b:e6:fd:
                    6d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C7:67:A6:92:04:0B:27:69:4B:D8:21:E6:D7:34:31:FA:8E:95:27
            X509v3 Authority Key Identifier:
                keyid:9C:96:A5:BD:45:B0:FB:8E:B4:DC:60:35:24:F9:AF:E8:41:D3:0D:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/323830343a6637343a3a2f33322d3438203d3e20323633353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f74::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:fa:3b:f8:f8:02:a3:97:18:ea:f9:61:1c:0a:4c:1a:dd:e2:
         f0:fb:be:b4:4b:e2:49:a1:7b:7e:c2:1a:43:80:41:a6:96:f5:
         05:ce:cd:1e:62:5f:d5:fc:63:c3:b2:26:c7:77:48:23:94:fb:
         33:2a:fb:0b:c8:5a:f9:80:fe:ba:31:15:5b:14:2d:f1:5f:34:
         a8:c9:ef:8a:74:2c:d7:70:f1:a7:27:d9:46:25:e2:59:f2:76:
         a4:8b:70:cc:0d:e8:af:28:ac:ed:3b:7c:5e:24:76:c9:cb:35:
         4a:e5:46:27:0d:b5:59:8b:a6:34:71:49:73:ee:21:5f:ba:f9:
         d9:83:aa:74:d7:8a:14:2d:2c:c7:e8:d7:64:b9:8f:6f:c3:a5:
         d1:12:21:56:85:29:10:b9:0a:0a:bc:63:0f:97:c0:1a:e4:c3:
         f8:9b:9a:4e:57:a0:b8:10:d1:de:d8:b7:c8:f3:b1:4d:39:61:
         cb:5f:c8:cf:fa:cd:25:b2:ac:83:68:30:26:a3:46:d8:f1:1e:
         85:41:6a:fb:0e:87:e4:8e:cd:b3:3a:74:ab:11:fc:7f:39:ec:
         31:be:9c:1f:48:85:d1:91:9d:8d:e0:d3:60:47:6d:40:ff:6a:
         9b:a5:22:3e:37:a1:d3:59:2d:eb:70:82:c7:f9:f4:cf:60:f4:
         a3:d5:c7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:12:51 2026 by rpki-client