Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/323830343a376531633a383030303a3a2f33332d3333203d3e20323731363033.roa
File:                     323830343a376531633a383030303a3a2f33332d3333203d3e20323731363033.roa (raw, json)
Hash identifier:          42NZ3YmX55OIqcfsOzjMcP3IHKi18oHxdPa0lU5k8Xk=
Subject key identifier:   72:25:28:A8:42:D8:B9:C4:2B:13:24:0A:E3:BD:6D:33:74:80:4E:E4
Certificate issuer:       /CN=9704E382DEE096259FE06F431ECDCFE7EC256C6A
Certificate serial:       7EBDC6D3883CF362FDD0EF82B951DCA804E8AC5B
Authority key identifier: 97:04:E3:82:DE:E0:96:25:9F:E0:6F:43:1E:CD:CF:E7:EC:25:6C:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9704E382DEE096259FE06F431ECDCFE7EC256C6A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/323830343a376531633a383030303a3a2f33332d3333203d3e20323731363033.roa
Signing time:             Fri 24 Apr 2026 23:31:51 +0000
ROA not before:           Fri 24 Apr 2026 23:26:51 +0000
ROA not after:            Fri 23 Apr 2027 23:31:51 +0000
asID:                     271603
IP address blocks:        2804:7e1c:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/9704E382DEE096259FE06F431ECDCFE7EC256C6A.crl
                          rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/9704E382DEE096259FE06F431ECDCFE7EC256C6A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9704E382DEE096259FE06F431ECDCFE7EC256C6A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 00:37:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:bd:c6:d3:88:3c:f3:62:fd:d0:ef:82:b9:51:dc:a8:04:e8:ac:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9704E382DEE096259FE06F431ECDCFE7EC256C6A
        Validity
            Not Before: Apr 24 23:26:51 2026 GMT
            Not After : Apr 23 23:31:51 2027 GMT
        Subject: CN=722528A842D8B9C42B13240AE3BD6D3374804EE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9f:28:0c:ad:45:72:16:87:86:ab:fd:92:89:
                    79:b8:cd:3f:d7:fd:c4:5f:a2:6b:99:c6:bb:cf:cc:
                    b6:c5:02:fd:db:ad:9d:43:d6:af:f3:73:8a:c3:d7:
                    6c:fb:61:6f:66:e8:43:d4:e4:0c:53:c0:a6:c3:03:
                    7a:48:de:41:33:4e:81:0c:f9:db:18:40:32:96:a7:
                    1d:fc:dc:e5:1b:65:56:dc:66:f3:1d:72:bb:31:ed:
                    d8:07:24:1f:44:e1:21:4c:3f:cd:42:9c:c2:3d:59:
                    4e:6f:30:7a:40:91:67:4c:e8:75:fb:d6:4a:65:53:
                    0a:7d:2c:e2:35:45:1b:14:e8:84:dd:59:cb:a8:7d:
                    c2:80:8d:09:37:f0:44:38:19:50:cc:65:70:fc:20:
                    54:0d:e1:b9:95:94:6c:a4:dd:df:a1:8c:1c:e1:11:
                    5c:5b:d0:03:c6:3c:03:76:d3:30:ca:c9:2b:16:ea:
                    cd:6d:dc:a0:18:d3:be:da:de:84:53:8f:38:51:fe:
                    41:89:5f:5b:fe:af:37:63:d0:70:a7:6c:da:08:18:
                    2e:d6:b0:c1:f6:86:b3:3a:08:57:d8:d8:35:d0:3f:
                    7d:26:2f:d0:2d:04:d9:14:5d:59:29:e0:e0:03:fe:
                    95:c9:61:ac:24:d6:e9:22:33:5d:4f:8c:ce:f4:01:
                    3b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:25:28:A8:42:D8:B9:C4:2B:13:24:0A:E3:BD:6D:33:74:80:4E:E4
            X509v3 Authority Key Identifier:
                keyid:97:04:E3:82:DE:E0:96:25:9F:E0:6F:43:1E:CD:CF:E7:EC:25:6C:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/9704E382DEE096259FE06F431ECDCFE7EC256C6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9704E382DEE096259FE06F431ECDCFE7EC256C6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/323830343a376531633a383030303a3a2f33332d3333203d3e20323731363033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e1c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         62:9c:c7:b5:6d:62:72:a2:39:00:d5:df:81:27:0f:87:09:3b:
         b3:ce:1e:39:c7:85:2e:d8:63:fd:8d:bc:5b:0d:0d:89:f5:e1:
         75:99:46:46:6d:0b:b9:fd:ef:f1:80:42:a3:02:3c:79:c6:2f:
         b6:64:e5:c6:24:bd:17:8d:b3:4e:91:50:62:76:85:3b:38:54:
         f9:71:73:92:b9:62:41:f1:85:2e:f8:48:02:b2:89:92:4f:b0:
         aa:94:ae:dd:64:03:d1:02:ad:1f:a3:b7:07:ae:79:3a:be:77:
         b7:99:7f:6c:7b:0f:a6:23:16:f6:99:b2:ed:58:e5:80:88:12:
         11:45:af:9a:b9:2d:aa:54:d9:a7:ff:a1:49:71:4e:f3:97:c1:
         41:c8:cd:e6:ed:d7:e2:3f:e3:0a:1e:c0:4b:03:51:fe:ef:45:
         92:57:6a:84:fc:d5:93:0b:e4:6d:18:82:0b:ff:7f:33:07:f8:
         e2:05:a8:31:88:bf:7e:85:d9:36:5b:14:6f:fc:4e:16:08:33:
         b7:92:31:77:a2:d3:90:b8:3b:35:5b:90:95:52:8b:24:d9:a5:
         57:ca:a3:bd:e7:79:74:d1:c0:f8:76:16:0c:44:a1:31:e3:81:
         ce:2a:cb:a0:be:c0:d3:3f:5d:ea:42:75:4d:1b:5a:3c:9f:a0:
         55:a2:fe:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:14:11 2026 by rpki-client