Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/323830343a356631343a3a2f33322d3438203d3e20323639303735.roa
File:                     323830343a356631343a3a2f33322d3438203d3e20323639303735.roa (raw, json)
Hash identifier:          wZK/13OJ2Ix3fkctre3OEOwTFhi6Iunb2AU5xNoEpXA=
Subject key identifier:   1C:17:E6:9E:EA:D1:DD:03:2F:F7:83:40:C0:E8:45:80:14:0C:32:5D
Certificate issuer:       /CN=46E0D678CE6FAC85144279EA7DE8AF4633267C1E
Certificate serial:       29250248FBFD7481067E8339C689C86E6D45873F
Authority key identifier: 46:E0:D6:78:CE:6F:AC:85:14:42:79:EA:7D:E8:AF:46:33:26:7C:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46E0D678CE6FAC85144279EA7DE8AF4633267C1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/323830343a356631343a3a2f33322d3438203d3e20323639303735.roa
Signing time:             Wed 01 Apr 2026 20:23:04 +0000
ROA not before:           Wed 01 Apr 2026 20:18:04 +0000
ROA not after:            Wed 31 Mar 2027 20:23:04 +0000
asID:                     269075
IP address blocks:        2804:5f14::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/46E0D678CE6FAC85144279EA7DE8AF4633267C1E.crl
                          rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/46E0D678CE6FAC85144279EA7DE8AF4633267C1E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46E0D678CE6FAC85144279EA7DE8AF4633267C1E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 13:11:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:25:02:48:fb:fd:74:81:06:7e:83:39:c6:89:c8:6e:6d:45:87:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46E0D678CE6FAC85144279EA7DE8AF4633267C1E
        Validity
            Not Before: Apr  1 20:18:04 2026 GMT
            Not After : Mar 31 20:23:04 2027 GMT
        Subject: CN=1C17E69EEAD1DD032FF78340C0E84580140C325D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:87:41:73:e5:71:87:a4:dd:c8:a3:c8:56:fd:
                    4d:55:71:45:78:90:e6:65:35:65:89:19:0f:56:d1:
                    58:15:4d:e3:a0:56:21:cb:15:3d:0b:98:24:ce:22:
                    95:29:fc:9d:c0:4f:70:1d:3b:3f:11:a0:9e:26:23:
                    55:ca:67:ab:53:ff:6c:0a:bc:bb:ee:cb:0d:d0:90:
                    af:a0:50:56:bc:5d:7e:91:e4:f9:1e:6d:d7:ca:00:
                    fd:1a:75:31:c3:90:7b:30:9a:98:72:4f:6a:d9:e0:
                    f1:93:9c:3c:e6:e2:07:23:88:39:75:52:d7:5c:89:
                    44:ef:f2:4a:3f:2a:e7:71:19:3c:a2:2b:9f:dd:d6:
                    30:fb:4d:5b:c6:06:e1:e1:6a:36:58:12:5b:ea:0e:
                    8f:ee:08:d6:a2:fb:57:7e:f0:4e:26:17:be:7d:a8:
                    8d:24:a6:a5:fc:2b:90:b8:15:f8:42:77:70:56:d8:
                    a9:5c:e4:3e:49:b6:45:e0:ad:ac:83:56:68:c5:38:
                    09:71:89:e5:7d:f3:08:1d:6c:8c:de:cd:3f:e2:73:
                    8c:42:38:25:a4:cb:73:4f:ac:77:02:4c:37:9e:2e:
                    f4:8c:71:04:10:ba:a8:c3:b8:94:71:c6:4e:79:2e:
                    fc:98:45:b3:d4:b9:ac:91:13:42:02:23:19:5b:e0:
                    66:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:17:E6:9E:EA:D1:DD:03:2F:F7:83:40:C0:E8:45:80:14:0C:32:5D
            X509v3 Authority Key Identifier:
                keyid:46:E0:D6:78:CE:6F:AC:85:14:42:79:EA:7D:E8:AF:46:33:26:7C:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/46E0D678CE6FAC85144279EA7DE8AF4633267C1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46E0D678CE6FAC85144279EA7DE8AF4633267C1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/323830343a356631343a3a2f33322d3438203d3e20323639303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f14::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:53:71:40:c5:30:e3:e5:5e:8c:db:4e:c2:e2:b5:7b:3f:13:
         3c:de:68:7f:3c:d9:64:16:53:5a:e0:73:3c:aa:d9:2a:ed:ad:
         22:2e:41:89:ec:46:9b:61:60:0b:ff:6c:a5:9b:e7:de:68:12:
         c5:9d:68:96:77:32:dc:3c:17:f4:e2:f7:77:c0:77:4f:56:b5:
         36:bb:5b:78:9a:d1:cb:b7:79:ea:b0:61:c0:10:4a:0f:b0:92:
         b7:41:94:27:95:1c:1e:2f:53:94:1d:67:f1:e1:65:83:fd:9e:
         a8:7c:52:15:f1:4a:db:2b:ae:8a:99:8f:e7:0e:2e:fe:2a:25:
         21:7e:e9:92:16:59:f8:57:72:69:7b:10:5a:53:07:14:4a:db:
         f9:bb:75:75:38:b2:06:b9:e9:aa:c8:9f:1b:35:9b:ac:db:5f:
         9f:f8:b2:17:a3:e4:42:7b:70:01:bc:bf:ac:a5:13:66:f7:61:
         83:e5:5f:8d:19:bd:89:24:a1:85:13:55:62:0c:17:60:f2:b0:
         0c:5d:c5:a5:d1:eb:c6:de:a3:e3:6e:e3:31:01:af:24:f2:d6:
         81:da:27:a1:57:8d:13:55:3b:e8:2a:6f:92:13:43:12:b5:2b:
         56:dd:43:d7:80:f3:53:c4:1e:c0:56:a4:a6:e1:9d:38:c4:4c:
         c6:ef:ef:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 16:00:54 2026 by rpki-client