Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a383030303a3a2f34302d3430203d3e20323634303232.roa
File:                     323830343a323939303a383030303a3a2f34302d3430203d3e20323634303232.roa (raw, json)
Hash identifier:          OjDBIln2IFQUsdk+zlOpB0MjioOGhQbF+qxlZlyCCoU=
Subject key identifier:   A9:75:96:A0:2D:A8:F0:61:2F:86:CA:40:7B:E9:DE:07:B6:22:85:3E
Certificate issuer:       /CN=F63047CFCA73277026C41BFD930CC304F5F342B7
Certificate serial:       7C4F1FC4B981B4532F4899EF6D0BCAE1134BC31C
Authority key identifier: F6:30:47:CF:CA:73:27:70:26:C4:1B:FD:93:0C:C3:04:F5:F3:42:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a383030303a3a2f34302d3430203d3e20323634303232.roa
Signing time:             Fri 27 Mar 2026 14:35:07 +0000
ROA not before:           Fri 27 Mar 2026 14:30:07 +0000
ROA not after:            Fri 26 Mar 2027 14:35:07 +0000
asID:                     264022
IP address blocks:        2804:2990:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.crl
                          rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 20:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:4f:1f:c4:b9:81:b4:53:2f:48:99:ef:6d:0b:ca:e1:13:4b:c3:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F63047CFCA73277026C41BFD930CC304F5F342B7
        Validity
            Not Before: Mar 27 14:30:07 2026 GMT
            Not After : Mar 26 14:35:07 2027 GMT
        Subject: CN=A97596A02DA8F0612F86CA407BE9DE07B622853E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:26:c5:07:66:b1:29:2b:d7:80:30:48:83:7f:
                    fd:97:e6:af:11:62:a2:d3:89:c6:54:db:ad:9d:00:
                    3d:f2:bb:56:81:0a:72:83:9e:8b:26:38:8b:9e:f3:
                    16:7d:2c:13:cb:d3:5d:2a:0c:a0:49:32:35:d2:30:
                    64:1f:70:21:02:0a:f3:dd:a6:54:79:a2:6d:fb:71:
                    17:6e:3c:a3:26:09:54:61:44:9d:d3:4e:70:81:49:
                    e5:a9:ff:47:8d:43:72:64:01:6d:76:a4:3f:5b:8f:
                    d3:bc:6c:c3:a1:af:a4:13:a8:68:e0:46:db:27:ba:
                    d2:3f:ba:16:e1:3f:d1:a8:7b:d9:e1:97:20:15:69:
                    8f:2b:2f:89:ba:87:4b:dc:72:3d:a4:bc:f6:88:47:
                    00:0a:4a:2e:40:3d:41:7e:af:30:fa:cb:f0:b9:91:
                    df:ec:3e:8b:f6:3a:1d:dd:d6:f3:82:c5:9b:8c:28:
                    e4:67:d4:c0:b0:b6:eb:bf:28:81:a0:ad:78:54:1e:
                    7f:91:3c:38:ca:ed:1f:02:8c:8b:7b:1d:f6:30:da:
                    72:4a:a9:b6:18:79:eb:16:52:a6:d8:f3:7b:49:96:
                    12:67:81:8e:33:cf:03:20:5b:d6:88:78:a2:61:69:
                    09:2c:6f:c2:5f:b0:a2:97:36:11:31:02:ba:cf:56:
                    51:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:75:96:A0:2D:A8:F0:61:2F:86:CA:40:7B:E9:DE:07:B6:22:85:3E
            X509v3 Authority Key Identifier:
                keyid:F6:30:47:CF:CA:73:27:70:26:C4:1B:FD:93:0C:C3:04:F5:F3:42:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a383030303a3a2f34302d3430203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2990:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         09:6e:98:00:07:76:91:e3:f4:23:77:96:0e:44:5e:32:85:8a:
         8a:5f:e4:8a:ae:80:76:b5:06:d6:05:a7:8a:7e:64:5a:9b:ec:
         cb:8f:a2:d0:19:42:02:98:01:4b:7f:bb:73:b3:5c:18:4a:f5:
         e2:04:f9:a5:04:65:6f:82:29:a6:56:39:9a:b5:c4:4e:6a:74:
         d0:1e:82:3a:27:b1:07:b6:c7:18:f7:02:91:33:fd:44:fe:a7:
         b3:13:38:aa:27:ae:fd:6e:ce:98:fa:1d:68:f9:ad:8f:c7:1c:
         08:9f:a1:70:1f:74:7a:66:3b:94:07:5e:f3:3b:5e:d6:53:87:
         f3:ee:2c:a0:7a:10:9d:02:02:aa:a5:23:69:02:72:cd:f6:d2:
         38:3b:71:19:5a:e5:b1:57:26:7e:86:69:41:33:43:20:b4:d7:
         b9:5c:3e:dc:2a:a1:08:77:fb:a7:96:37:90:91:c6:d7:02:01:
         ac:01:65:e9:44:2e:d1:06:a3:3b:2f:4a:b5:e5:4a:d8:f8:74:
         28:dc:7f:2e:13:cd:4c:96:9b:39:4a:1d:82:6f:6c:55:42:dc:
         24:08:10:9a:94:f7:20:89:ae:ba:9c:a2:2f:ef:7d:1e:71:6b:
         6b:92:0a:6b:1d:42:2d:59:0a:a4:47:eb:0b:68:84:9c:4f:61:
         94:be:57:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 10:47:00 2026 by rpki-client