Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/323830343a6531303a3a2f33342d3334203d3e203532353430.roa
File:                     323830343a6531303a3a2f33342d3334203d3e203532353430.roa (raw, json)
Hash identifier:          3k8T/tjLWv1HXU376cziPjCi1vC9d8PnyKfMlaZbHm4=
Subject key identifier:   EE:8A:11:89:CB:6F:FF:C4:F5:06:FB:9D:2C:14:51:F7:B3:19:D4:5F
Certificate issuer:       /CN=B1A2287CEAA131778218645B379857543955CA06
Certificate serial:       6D8B63D3131F32277BE32E2CCC062E2A79DD8902
Authority key identifier: B1:A2:28:7C:EA:A1:31:77:82:18:64:5B:37:98:57:54:39:55:CA:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/323830343a6531303a3a2f33342d3334203d3e203532353430.roa
Signing time:             Wed 01 Apr 2026 12:59:55 +0000
ROA not before:           Wed 01 Apr 2026 12:54:55 +0000
ROA not after:            Wed 31 Mar 2027 12:59:55 +0000
asID:                     52540
IP address blocks:        2804:e10::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.crl
                          rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 07:55:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:8b:63:d3:13:1f:32:27:7b:e3:2e:2c:cc:06:2e:2a:79:dd:89:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A2287CEAA131778218645B379857543955CA06
        Validity
            Not Before: Apr  1 12:54:55 2026 GMT
            Not After : Mar 31 12:59:55 2027 GMT
        Subject: CN=EE8A1189CB6FFFC4F506FB9D2C1451F7B319D45F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0f:8f:04:0a:b5:76:fa:6d:f5:a2:3f:98:3c:
                    8d:26:cb:6a:bc:ff:cf:d9:ae:9b:69:22:f7:dd:4d:
                    97:3c:77:0a:f9:00:8d:da:63:de:d7:e6:cf:08:ad:
                    ba:5d:3f:67:96:7b:44:d1:f6:40:6e:6a:54:42:ec:
                    e4:8d:65:d2:d4:2c:96:f9:52:70:c7:bb:7d:c5:0c:
                    0d:c6:fb:da:60:08:3a:43:7a:59:69:47:2a:7f:39:
                    a6:08:f9:07:f6:c8:52:38:0b:a1:40:59:fd:dc:2f:
                    7e:20:ee:4e:99:49:09:f0:2b:81:7d:ee:13:ba:34:
                    2c:d6:e5:4d:72:dd:eb:35:b9:b5:e8:09:4c:2b:32:
                    77:7b:60:a2:48:f5:7e:56:6f:a7:30:38:71:e6:12:
                    c8:7e:82:73:b2:a5:72:c7:17:5b:ea:da:ce:19:09:
                    6e:18:b6:f4:08:7c:db:a7:33:f2:99:22:69:c4:8b:
                    4e:bf:35:af:47:af:76:ed:2e:6e:3c:b5:2e:36:95:
                    24:d1:97:a6:55:4c:34:28:ee:b0:92:85:39:9f:9a:
                    90:ef:91:7e:f9:f5:90:2e:5d:db:91:88:9a:37:df:
                    12:e5:2e:fc:94:b4:09:05:dd:e6:b3:e4:fc:8f:5a:
                    f5:d4:39:5b:c8:63:f4:f1:83:72:72:29:ae:9b:59:
                    b9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8A:11:89:CB:6F:FF:C4:F5:06:FB:9D:2C:14:51:F7:B3:19:D4:5F
            X509v3 Authority Key Identifier:
                keyid:B1:A2:28:7C:EA:A1:31:77:82:18:64:5B:37:98:57:54:39:55:CA:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/323830343a6531303a3a2f33342d3334203d3e203532353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e10::/34

    Signature Algorithm: sha256WithRSAEncryption
         4e:8b:f5:86:ed:62:4e:f0:b3:f8:da:14:75:4b:f1:d8:e0:a6:
         26:96:4d:a0:93:e1:aa:d5:99:f3:e0:e3:08:10:98:b7:d3:92:
         b1:d5:01:7d:2d:ab:73:be:00:3a:ec:65:2f:01:42:aa:90:ab:
         20:fc:5b:ee:2c:f5:97:f2:22:40:70:0e:16:88:90:bf:15:7d:
         50:78:8a:6b:dc:6a:ca:d8:9c:76:13:64:d5:f6:58:68:39:6a:
         b6:58:16:84:df:5d:9c:fa:0d:1d:60:7a:62:40:34:78:ea:ae:
         65:81:e8:68:af:87:45:13:0d:de:32:6d:2b:01:d9:29:e1:b8:
         af:63:ca:4f:e1:c1:33:46:fb:86:16:cf:17:f6:78:27:4f:a9:
         5b:69:fd:ff:54:ba:8b:f5:86:67:b8:c8:7d:d8:0c:64:c8:1e:
         be:e3:5e:3a:92:75:22:85:25:d2:55:a4:32:06:ac:da:50:62:
         23:a6:c4:02:db:05:1a:8e:dc:65:f4:30:b2:a7:dd:2b:57:13:
         02:c4:87:df:87:b4:b8:16:2d:d0:9c:ec:d1:b6:df:2c:82:26:
         8b:97:cd:33:f0:be:a9:1c:f7:71:cc:5f:bc:ed:a8:89:04:19:
         c6:44:08:23:02:9b:13:83:f9:6b:fd:7c:3e:54:9b:29:60:55:
         c7:6e:0c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 19:24:49 2026 by rpki-client