Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDfaHrniRSZZDJsY5eaJ6psEKgNxdfrGCKAyWorQj1Ef/0/323830343a393665343a3a2f33322d3334203d3e20323734333636.roa
File:                     323830343a393665343a3a2f33322d3334203d3e20323734333636.roa (raw, json)
Hash identifier:          j4gWDSlCvZhUdAL1NKVKyNsDP+va5mKxQZVoJWjaL+I=
Subject key identifier:   AC:30:9B:E7:67:93:17:CD:6B:0C:B3:19:34:32:BE:CE:CD:25:BE:90
Certificate issuer:       /CN=BF2629329EC916C6B69DEB3940FC6E559D3718FD
Certificate serial:       02B7E0B1960288C431CF74B5EEA262FAE6334458
Authority key identifier: BF:26:29:32:9E:C9:16:C6:B6:9D:EB:39:40:FC:6E:55:9D:37:18:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF2629329EC916C6B69DEB3940FC6E559D3718FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDfaHrniRSZZDJsY5eaJ6psEKgNxdfrGCKAyWorQj1Ef/0/323830343a393665343a3a2f33322d3334203d3e20323734333636.roa
Signing time:             Mon 11 May 2026 12:14:52 +0000
ROA not before:           Mon 11 May 2026 12:09:52 +0000
ROA not after:            Mon 10 May 2027 12:14:52 +0000
asID:                     274366
IP address blocks:        2804:96e4::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDfaHrniRSZZDJsY5eaJ6psEKgNxdfrGCKAyWorQj1Ef/0/BF2629329EC916C6B69DEB3940FC6E559D3718FD.crl
                          rsync://rpki-repo.registro.br/repo/JDfaHrniRSZZDJsY5eaJ6psEKgNxdfrGCKAyWorQj1Ef/0/BF2629329EC916C6B69DEB3940FC6E559D3718FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF2629329EC916C6B69DEB3940FC6E559D3718FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 13:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:b7:e0:b1:96:02:88:c4:31:cf:74:b5:ee:a2:62:fa:e6:33:44:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF2629329EC916C6B69DEB3940FC6E559D3718FD
        Validity
            Not Before: May 11 12:09:52 2026 GMT
            Not After : May 10 12:14:52 2027 GMT
        Subject: CN=AC309BE7679317CD6B0CB3193432BECECD25BE90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ea:fb:4d:91:74:b7:b0:4e:06:2b:7d:56:9a:
                    28:5d:3c:da:6e:27:47:f2:1a:05:d2:d0:95:b1:c9:
                    98:bb:8a:4e:59:e7:48:cd:75:d5:b6:12:47:49:55:
                    5a:96:53:8d:d3:9b:00:64:5f:92:67:55:a4:6f:41:
                    86:99:83:4e:e5:d0:41:4f:4e:8b:68:0d:e1:90:ae:
                    26:3e:1d:9c:57:43:5d:1e:84:eb:c0:6d:67:7c:1e:
                    fc:a5:b9:4d:d6:e9:1e:80:b5:3f:00:08:c4:42:2e:
                    d5:e7:ca:78:5c:ec:ec:cd:f6:09:9d:a6:c6:d0:7d:
                    56:41:87:8d:3b:36:28:8e:5b:b9:bd:03:e1:47:d0:
                    13:c8:6f:62:ba:f4:f7:a1:04:a0:40:e9:9e:d3:45:
                    0c:06:46:0f:13:35:bc:f0:76:45:70:12:ed:93:86:
                    d0:de:a8:2e:3d:7c:ae:75:cd:f3:41:79:a4:13:1a:
                    d7:5c:69:2e:48:56:2e:27:1d:d6:80:13:fa:35:b8:
                    92:12:65:70:21:64:0a:19:d1:89:08:00:e1:91:03:
                    f9:64:56:50:1f:37:21:5b:92:9e:53:e8:20:b1:d6:
                    56:e3:73:77:a4:39:c7:c6:8d:75:a9:9f:ff:fe:f3:
                    e8:d9:e2:40:da:d9:d5:54:43:1c:75:4a:c7:16:82:
                    c8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:30:9B:E7:67:93:17:CD:6B:0C:B3:19:34:32:BE:CE:CD:25:BE:90
            X509v3 Authority Key Identifier:
                keyid:BF:26:29:32:9E:C9:16:C6:B6:9D:EB:39:40:FC:6E:55:9D:37:18:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDfaHrniRSZZDJsY5eaJ6psEKgNxdfrGCKAyWorQj1Ef/0/BF2629329EC916C6B69DEB3940FC6E559D3718FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF2629329EC916C6B69DEB3940FC6E559D3718FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDfaHrniRSZZDJsY5eaJ6psEKgNxdfrGCKAyWorQj1Ef/0/323830343a393665343a3a2f33322d3334203d3e20323734333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:96e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:e2:27:c7:a0:df:69:0b:5b:2e:17:3f:1c:9e:ff:06:e8:85:
         a1:65:41:bd:15:9f:cb:d1:ba:f2:c5:13:a9:b4:c9:7d:b6:1c:
         a2:45:9f:77:26:be:bf:15:aa:dd:6e:62:c9:2f:54:9d:ac:4d:
         65:5e:75:c8:15:a8:7d:a0:1a:ab:59:92:a4:92:f8:da:ae:f4:
         05:c8:44:f3:20:29:0c:e5:ef:8f:11:94:68:7c:af:37:10:60:
         50:82:65:15:63:5a:f9:b7:ab:d2:e6:f0:9a:0e:16:cd:76:fe:
         80:89:4b:2e:f2:92:94:80:06:db:8c:c3:f2:e1:ee:10:2e:01:
         63:2e:b1:e6:52:65:42:00:5f:ff:c6:80:94:da:7b:64:11:e7:
         a8:f9:d7:bf:d4:95:e7:f7:37:0c:29:2a:90:20:db:e2:8d:d0:
         83:26:f0:28:1e:5c:a5:d6:c6:94:0b:02:13:84:bb:f1:81:6b:
         62:ad:ab:79:a2:f6:1d:90:b2:15:0b:8f:24:2d:d7:d8:d8:8e:
         64:85:e2:c1:1c:2d:23:3d:d1:0a:04:b0:b8:2e:52:3c:e3:c1:
         c3:4d:bc:45:bf:44:28:24:e8:50:66:cb:65:51:c2:3c:14:32:
         38:35:1a:85:3a:a8:d5:7f:aa:80:cb:00:73:fc:18:fc:0e:fa:
         fd:c6:d9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:49:09 2026 by rpki-client