Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hu31ZEFgvteyFZAdykGbpgCMzLK2Z541EZyotBTzEsWH/0/323830343a363739343a643030303a3a2f33362d3336203d3e20323639363337.roa
File:                     323830343a363739343a643030303a3a2f33362d3336203d3e20323639363337.roa (raw, json)
Hash identifier:          clFvPZb7DsxVxAYyIKOO7H3JoHJevf5y3Sj/whIZOy0=
Subject key identifier:   96:0F:C6:61:85:1F:F5:5F:1E:37:37:0A:7E:59:78:E3:55:47:C6:4F
Certificate issuer:       /CN=DF17A2020CB3F8AD2FAA9F0DB4E01CB3770C0F94
Certificate serial:       1B5DFF6762F93F34C990659111FC517538FD4DA6
Authority key identifier: DF:17:A2:02:0C:B3:F8:AD:2F:AA:9F:0D:B4:E0:1C:B3:77:0C:0F:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF17A2020CB3F8AD2FAA9F0DB4E01CB3770C0F94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hu31ZEFgvteyFZAdykGbpgCMzLK2Z541EZyotBTzEsWH/0/323830343a363739343a643030303a3a2f33362d3336203d3e20323639363337.roa
Signing time:             Sun 10 May 2026 23:48:16 +0000
ROA not before:           Sun 10 May 2026 23:43:16 +0000
ROA not after:            Sun 09 May 2027 23:48:16 +0000
asID:                     269637
IP address blocks:        2804:6794:d000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hu31ZEFgvteyFZAdykGbpgCMzLK2Z541EZyotBTzEsWH/0/DF17A2020CB3F8AD2FAA9F0DB4E01CB3770C0F94.crl
                          rsync://rpki-repo.registro.br/repo/Hu31ZEFgvteyFZAdykGbpgCMzLK2Z541EZyotBTzEsWH/0/DF17A2020CB3F8AD2FAA9F0DB4E01CB3770C0F94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF17A2020CB3F8AD2FAA9F0DB4E01CB3770C0F94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 06:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:5d:ff:67:62:f9:3f:34:c9:90:65:91:11:fc:51:75:38:fd:4d:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF17A2020CB3F8AD2FAA9F0DB4E01CB3770C0F94
        Validity
            Not Before: May 10 23:43:16 2026 GMT
            Not After : May  9 23:48:16 2027 GMT
        Subject: CN=960FC661851FF55F1E37370A7E5978E35547C64F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:92:70:5f:f9:43:11:50:04:8a:84:ab:28:1c:
                    4b:6f:b6:91:07:99:c2:17:38:f7:cf:4d:e8:f4:91:
                    ee:70:45:1f:fc:30:3b:11:e1:7f:82:b5:ad:05:fb:
                    46:12:cf:e1:f1:46:c2:ef:46:64:96:c3:2c:38:bd:
                    d9:ff:a6:30:12:c4:c6:35:f6:18:73:ff:c5:de:dc:
                    6a:93:c1:56:50:2f:44:16:d1:3a:18:b0:56:c2:99:
                    e6:d9:d4:b9:d0:7b:0f:79:4f:ea:c0:2e:c7:2e:e1:
                    93:b0:93:30:7c:35:bf:9a:43:f8:6f:4c:1b:16:e9:
                    30:e5:0a:5a:ce:86:80:b5:88:16:db:ff:63:e6:78:
                    5e:17:90:d0:b6:df:2f:1c:d6:8d:5f:16:bb:04:00:
                    b8:1d:72:27:28:e1:77:76:f4:b5:3d:bd:c2:52:7d:
                    6f:76:2d:bc:57:78:de:d4:fd:18:46:34:db:d7:df:
                    08:93:a5:c8:ca:09:e9:9a:81:55:cd:4f:19:52:7e:
                    47:80:40:73:c2:26:74:ba:88:73:f4:d7:1c:8f:73:
                    2d:49:93:44:19:3f:6f:97:54:d2:e4:00:8b:56:bc:
                    4e:8b:53:5f:56:9c:fa:57:68:19:f7:57:5a:b0:48:
                    dc:e7:05:17:d9:d8:50:94:22:13:df:05:ee:df:90:
                    50:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:0F:C6:61:85:1F:F5:5F:1E:37:37:0A:7E:59:78:E3:55:47:C6:4F
            X509v3 Authority Key Identifier:
                keyid:DF:17:A2:02:0C:B3:F8:AD:2F:AA:9F:0D:B4:E0:1C:B3:77:0C:0F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hu31ZEFgvteyFZAdykGbpgCMzLK2Z541EZyotBTzEsWH/0/DF17A2020CB3F8AD2FAA9F0DB4E01CB3770C0F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF17A2020CB3F8AD2FAA9F0DB4E01CB3770C0F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hu31ZEFgvteyFZAdykGbpgCMzLK2Z541EZyotBTzEsWH/0/323830343a363739343a643030303a3a2f33362d3336203d3e20323639363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6794:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         77:ae:c3:de:3d:00:af:49:e0:7b:8d:ac:ed:91:f1:69:ee:e9:
         3b:a4:48:b1:2b:dd:f9:42:56:93:fc:8c:5f:48:39:0a:fc:6f:
         07:97:ce:eb:c5:e6:5e:74:f0:8c:ae:7a:d0:5a:8c:76:d0:f9:
         12:2c:51:0a:c2:16:b0:e0:28:7d:4c:7a:9b:8a:f7:7d:52:66:
         51:47:b3:60:f3:34:5e:0e:80:b6:f3:f0:48:ff:69:96:90:09:
         22:6e:9d:93:ee:85:8f:d9:d3:b2:31:64:8e:35:e9:2b:d8:0b:
         8d:11:81:d2:4a:b2:1f:7a:49:55:54:d1:fa:83:5b:19:39:f7:
         2c:27:39:fa:68:bd:b8:57:b5:59:e7:5d:08:69:de:be:78:70:
         37:8c:59:95:10:31:92:70:7f:02:35:c9:3e:e1:13:b9:4c:11:
         4f:04:60:11:ee:62:9a:a9:62:a1:a1:d1:1b:8b:19:fe:6e:f3:
         6a:2c:1b:08:83:c9:55:c9:99:6d:96:6f:e8:fd:28:47:f6:aa:
         12:23:e4:e0:32:31:62:b8:80:7c:29:8a:45:9d:97:f4:81:91:
         0a:d0:2e:a1:5b:c9:eb:4c:82:32:45:90:23:3d:e4:de:96:38:
         e9:83:22:b7:c1:d3:48:a9:5f:c1:19:c5:64:c4:30:4a:4f:43:
         cc:a8:e7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:05:36 2026 by rpki-client