Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/MBgxeo9nhaNvCLNZJdDjkgQf6BWNXEALXKn3jRfZN5d/0/323830343a393533383a3a2f33322d3438203d3e20323734353036.roa
File:                     323830343a393533383a3a2f33322d3438203d3e20323734353036.roa (raw, json)
Hash identifier:          kUrj3QzCaj2E8H/096wo7M02Ojako7klYPX0URc02jc=
Subject key identifier:   E9:04:DC:FB:DC:15:6E:2C:E7:42:CD:2E:DF:A5:39:89:EF:3C:E5:6D
Certificate issuer:       /CN=DC6B8695D204FB9485C78C0BDA880D2CC5689BC7
Certificate serial:       0937C91132FEF228BD5387D259759866964CE073
Authority key identifier: DC:6B:86:95:D2:04:FB:94:85:C7:8C:0B:DA:88:0D:2C:C5:68:9B:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC6B8695D204FB9485C78C0BDA880D2CC5689BC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/MBgxeo9nhaNvCLNZJdDjkgQf6BWNXEALXKn3jRfZN5d/0/323830343a393533383a3a2f33322d3438203d3e20323734353036.roa
Signing time:             Thu 30 Apr 2026 20:12:10 +0000
ROA not before:           Thu 30 Apr 2026 20:07:10 +0000
ROA not after:            Thu 29 Apr 2027 20:12:10 +0000
asID:                     274506
IP address blocks:        2804:9538::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/MBgxeo9nhaNvCLNZJdDjkgQf6BWNXEALXKn3jRfZN5d/0/DC6B8695D204FB9485C78C0BDA880D2CC5689BC7.crl
                          rsync://rpki-repo.registro.br/repo/MBgxeo9nhaNvCLNZJdDjkgQf6BWNXEALXKn3jRfZN5d/0/DC6B8695D204FB9485C78C0BDA880D2CC5689BC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC6B8695D204FB9485C78C0BDA880D2CC5689BC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 May 2026 04:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:37:c9:11:32:fe:f2:28:bd:53:87:d2:59:75:98:66:96:4c:e0:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC6B8695D204FB9485C78C0BDA880D2CC5689BC7
        Validity
            Not Before: Apr 30 20:07:10 2026 GMT
            Not After : Apr 29 20:12:10 2027 GMT
        Subject: CN=E904DCFBDC156E2CE742CD2EDFA53989EF3CE56D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:05:f8:4b:80:f2:a1:c5:0b:11:f6:e5:4e:c9:
                    49:90:12:be:de:51:4a:88:c9:d9:0e:d0:ba:7e:b5:
                    37:14:c4:c5:f4:d5:77:87:ce:ff:00:b7:e9:93:c5:
                    d0:97:09:39:28:d2:d5:38:3c:7d:d2:90:62:75:68:
                    39:8a:d0:99:c8:ea:1c:4c:e3:65:39:33:09:2e:6d:
                    17:ce:f6:a0:ab:fb:8d:c3:0f:2f:29:7d:08:18:80:
                    a7:b2:93:f6:fb:94:db:d5:66:09:35:8d:e8:b6:95:
                    57:57:0d:43:17:74:c7:f5:dc:aa:9c:6b:c2:2c:4e:
                    ba:a0:ca:43:81:86:ff:1b:df:a2:40:58:5c:8b:65:
                    8a:e7:7b:8f:5a:39:c1:5e:4f:1a:ce:5d:69:ea:d2:
                    31:4f:4d:49:b8:f1:9b:5c:00:c2:34:06:f3:d3:61:
                    5d:b4:bc:fc:53:a1:6d:91:78:57:be:b1:c2:43:11:
                    88:0c:93:d3:f0:37:7f:5d:57:42:2e:35:0c:1a:ae:
                    88:93:9a:fa:11:03:d8:93:ba:98:94:b5:0a:7a:24:
                    80:94:13:41:18:56:4b:e1:7a:be:21:d8:c7:39:24:
                    1d:13:ea:f5:b4:99:23:ca:46:23:c7:c4:57:80:dc:
                    b9:35:5c:8a:b8:9b:4c:7e:9f:3e:ce:f4:1c:9c:05:
                    35:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:04:DC:FB:DC:15:6E:2C:E7:42:CD:2E:DF:A5:39:89:EF:3C:E5:6D
            X509v3 Authority Key Identifier:
                keyid:DC:6B:86:95:D2:04:FB:94:85:C7:8C:0B:DA:88:0D:2C:C5:68:9B:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/MBgxeo9nhaNvCLNZJdDjkgQf6BWNXEALXKn3jRfZN5d/0/DC6B8695D204FB9485C78C0BDA880D2CC5689BC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC6B8695D204FB9485C78C0BDA880D2CC5689BC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/MBgxeo9nhaNvCLNZJdDjkgQf6BWNXEALXKn3jRfZN5d/0/323830343a393533383a3a2f33322d3438203d3e20323734353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9538::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:05:5b:e4:84:75:a9:08:b0:8a:ce:89:a4:d8:c9:91:93:18:
         56:dd:ee:61:a3:43:0c:22:f7:28:79:7a:d7:f1:69:21:47:6c:
         bc:8a:22:2e:4d:f8:d1:ca:c4:51:4f:03:04:df:50:22:22:a1:
         fb:a3:b3:f4:b2:8e:f0:6d:a3:61:5f:68:c6:93:0b:2d:69:00:
         28:50:fb:9a:e4:72:2b:43:b3:70:86:44:12:7d:50:34:a6:4e:
         5b:30:a4:b6:57:c8:53:35:b7:e4:16:2f:4b:cd:d4:71:8d:38:
         f8:34:af:11:4e:5a:d7:a6:71:33:a5:1b:63:16:44:36:7b:5d:
         ed:c8:43:44:d4:24:1d:c7:ff:d9:01:3a:21:83:73:67:4b:c8:
         0b:bc:da:7e:40:23:eb:40:52:88:8f:81:11:69:65:17:63:8a:
         35:82:9b:4d:92:b9:58:9a:1f:43:92:3e:ca:06:79:86:dd:74:
         45:b4:41:bc:c9:66:28:9b:d9:23:31:f7:07:0b:06:b4:9d:fb:
         4c:97:82:97:47:41:19:69:15:8e:5f:8b:52:9a:7b:17:50:06:
         11:44:c9:56:51:8d:9b:9b:cb:78:cb:b8:c7:69:15:9c:98:98:
         68:24:63:41:69:f8:7d:ef:f8:1c:b9:52:aa:65:ca:a7:4f:04:
         d8:75:82:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:31:53 2026 by rpki-client