Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/323830343a326635633a3a2f33322d3438203d3e20323634383836.roa
File:                     323830343a326635633a3a2f33322d3438203d3e20323634383836.roa (raw, json)
Hash identifier:          ezEBIBQi7ig1my0ZDB2nYtWc1DbtiNNyb3ckM480QP0=
Subject key identifier:   47:BF:6E:C3:00:44:D8:69:BA:44:3F:B8:AA:2D:7F:B1:00:33:19:AA
Certificate issuer:       /CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
Certificate serial:       65BA9E80E7246CF9FDCDD2AA17F0BC052B326C40
Authority key identifier: 09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/323830343a326635633a3a2f33322d3438203d3e20323634383836.roa
Signing time:             Tue 28 Apr 2026 08:25:36 +0000
ROA not before:           Tue 28 Apr 2026 08:20:36 +0000
ROA not after:            Tue 27 Apr 2027 08:25:36 +0000
asID:                     264886
IP address blocks:        2804:2f5c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 03:14:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ba:9e:80:e7:24:6c:f9:fd:cd:d2:aa:17:f0:bc:05:2b:32:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
        Validity
            Not Before: Apr 28 08:20:36 2026 GMT
            Not After : Apr 27 08:25:36 2027 GMT
        Subject: CN=47BF6EC30044D869BA443FB8AA2D7FB1003319AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5c:39:eb:2f:ce:2a:42:a2:57:2d:2c:66:bc:
                    1b:56:e3:22:a3:b9:c5:98:91:f8:ff:6d:a3:67:e6:
                    69:e8:2d:17:5b:a5:f0:39:1a:2f:b3:40:e2:b6:bb:
                    88:59:e2:84:45:66:49:89:26:15:89:d3:1d:79:0b:
                    0d:15:cc:1c:b3:44:41:61:bb:b0:79:05:6d:75:64:
                    4e:8a:3e:92:2d:80:17:19:89:bd:ba:9e:02:c3:e7:
                    6e:bb:c3:6e:17:92:3d:8d:20:40:0f:88:9e:5d:35:
                    b4:0c:25:7f:77:7c:2a:84:f7:91:d3:ea:c7:49:b1:
                    ce:95:14:da:80:24:4e:eb:3f:19:ea:af:c7:e0:5b:
                    35:37:67:56:32:5a:bb:8d:78:b9:30:82:a6:c1:c5:
                    fc:73:46:e9:9c:ce:d3:ae:06:90:00:51:2a:9b:9a:
                    c2:70:a8:b7:31:cb:52:74:bf:b2:e7:66:33:ce:dc:
                    73:0d:69:cd:0a:7d:ec:c9:48:8c:e7:90:7a:62:97:
                    5a:b9:6e:c1:9d:e7:28:1d:a8:76:51:5f:d0:b0:4c:
                    17:6b:43:a8:34:4a:46:d9:6d:4e:f8:14:7e:34:14:
                    f9:9b:4c:76:de:cc:1d:b2:57:32:8d:0c:6b:ae:ad:
                    7f:cc:17:e3:ab:d5:f5:ce:c1:83:d0:ef:62:a2:70:
                    89:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:BF:6E:C3:00:44:D8:69:BA:44:3F:B8:AA:2D:7F:B1:00:33:19:AA
            X509v3 Authority Key Identifier:
                keyid:09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/323830343a326635633a3a2f33322d3438203d3e20323634383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:6a:3a:76:d9:a7:78:53:cc:fc:16:26:ef:79:30:8d:eb:f0:
         a9:28:16:ae:2b:f7:2a:36:05:3d:79:36:c9:e2:97:79:93:10:
         2a:fb:2b:ae:50:50:b7:50:06:20:18:68:cd:43:0c:f5:7a:e9:
         d0:be:ae:60:0d:7d:10:8b:7e:09:b0:ee:c8:eb:ee:3d:9f:4f:
         48:31:11:10:6d:b9:0b:8f:cb:e9:0a:50:23:02:ff:db:72:e7:
         e8:2c:d4:f2:c3:4f:53:03:f8:47:51:19:43:6b:c3:4f:f8:71:
         92:a4:be:ff:69:19:6f:97:e8:5d:eb:42:25:be:73:70:e0:14:
         d4:3a:9a:91:82:f9:9e:d6:06:71:6d:05:ee:e0:8d:03:e2:89:
         33:ce:dc:39:d0:1e:3a:67:9e:ce:ed:b3:02:65:01:0d:c3:66:
         3b:a2:40:22:df:d0:88:76:c7:11:95:bd:f2:34:c4:eb:19:1b:
         30:c9:77:dc:59:00:01:1c:e9:1e:60:b2:77:c8:d8:90:d6:b8:
         5f:e8:f9:0a:0d:4f:d2:cc:24:fe:f5:a2:72:08:4f:27:5f:5d:
         16:9f:3e:8d:00:1b:bc:3f:94:fc:d5:8e:92:a3:eb:47:1d:cd:
         84:1a:89:75:cb:bf:49:9a:96:a6:0c:8e:db:77:42:39:ea:de:
         92:10:e7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:17:24 2026 by rpki-client