Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/0/323830343a363438383a3a2f33322d3438203d3e20323639343333.roa
File:                     323830343a363438383a3a2f33322d3438203d3e20323639343333.roa (raw, json)
Hash identifier:          QoLJbPAPw798au3XDuvdbsVJKjkwqpUsBi8niwPQzvY=
Subject key identifier:   5F:76:B1:F5:5C:93:E5:35:CD:13:C3:23:70:0A:4D:84:4F:92:BF:A5
Certificate issuer:       /CN=493BE7BE7699647709944A4D576FE412A9693A8C
Certificate serial:       2899533165F758440414B802757597190A8007C5
Authority key identifier: 49:3B:E7:BE:76:99:64:77:09:94:4A:4D:57:6F:E4:12:A9:69:3A:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/493BE7BE7699647709944A4D576FE412A9693A8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/0/323830343a363438383a3a2f33322d3438203d3e20323639343333.roa
Signing time:             Fri 03 Apr 2026 19:23:16 +0000
ROA not before:           Fri 03 Apr 2026 19:18:16 +0000
ROA not after:            Fri 02 Apr 2027 19:23:16 +0000
asID:                     269433
IP address blocks:        2804:6488::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/0/493BE7BE7699647709944A4D576FE412A9693A8C.crl
                          rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/0/493BE7BE7699647709944A4D576FE412A9693A8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/493BE7BE7699647709944A4D576FE412A9693A8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 09:24:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:99:53:31:65:f7:58:44:04:14:b8:02:75:75:97:19:0a:80:07:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=493BE7BE7699647709944A4D576FE412A9693A8C
        Validity
            Not Before: Apr  3 19:18:16 2026 GMT
            Not After : Apr  2 19:23:16 2027 GMT
        Subject: CN=5F76B1F55C93E535CD13C323700A4D844F92BFA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:38:3d:89:f6:2f:e1:84:eb:e8:47:7e:7d:5c:
                    01:e0:cf:0f:95:8a:29:ae:80:23:09:6d:19:dd:e3:
                    e4:d0:a6:11:18:c5:ee:25:f0:c8:b9:2a:17:e6:6a:
                    b0:91:d2:7b:bf:7f:36:77:23:46:be:ef:10:db:76:
                    a1:50:1d:4f:3b:6e:6d:b8:3b:4b:ac:9b:8b:8c:8a:
                    43:24:99:89:81:55:50:54:28:0d:1b:be:f8:5e:80:
                    b4:ec:f3:f1:17:dd:05:19:67:82:40:1d:d0:9d:81:
                    c0:4c:ea:61:f6:fb:2a:4a:90:40:2a:35:46:35:00:
                    88:44:ec:00:48:b7:ef:2d:fe:f0:54:c4:cb:fa:04:
                    d6:77:a2:19:4c:cf:0a:bf:a9:89:23:75:75:11:4e:
                    98:b0:d2:8c:69:78:0a:a2:5b:61:52:1f:6e:58:a3:
                    c4:c4:21:ab:32:01:e7:04:a8:f2:b9:66:e6:ec:3f:
                    ac:81:37:c0:3a:67:67:24:a8:f6:ca:06:5e:c9:e0:
                    eb:a6:94:09:48:a6:f6:ed:d1:91:07:ad:71:1e:99:
                    94:1c:47:3a:2b:83:a4:3b:fb:c8:ee:2a:a9:a7:38:
                    49:3b:97:9e:51:08:b8:19:d8:dc:65:87:34:46:dd:
                    6e:65:d3:bc:47:db:fb:b7:03:4f:5b:7b:b7:14:b3:
                    97:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:76:B1:F5:5C:93:E5:35:CD:13:C3:23:70:0A:4D:84:4F:92:BF:A5
            X509v3 Authority Key Identifier:
                keyid:49:3B:E7:BE:76:99:64:77:09:94:4A:4D:57:6F:E4:12:A9:69:3A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/0/493BE7BE7699647709944A4D576FE412A9693A8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/493BE7BE7699647709944A4D576FE412A9693A8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/0/323830343a363438383a3a2f33322d3438203d3e20323639343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6488::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:ea:c5:be:b4:6c:fc:c8:c7:07:70:9e:51:45:48:c4:ad:7a:
         c1:ac:e0:95:c9:88:f6:56:cc:00:e2:8e:71:59:5e:9d:b1:63:
         2d:40:65:c3:9c:c8:e4:00:11:26:3b:6b:0d:be:9f:22:c0:2c:
         82:33:40:dd:a5:b3:24:a1:d9:d9:1a:d7:d2:22:eb:d3:68:e7:
         cb:6b:f1:4b:8e:42:40:65:94:e4:9d:b3:77:39:74:eb:44:62:
         35:6d:38:96:db:0f:6b:03:bc:01:f0:c5:f8:a1:71:66:98:e1:
         b0:b2:d0:74:6e:9f:c7:e5:e1:21:13:44:b2:b8:be:1a:b6:56:
         5b:c5:71:bf:f8:eb:6a:81:2f:d5:93:68:84:2c:97:40:0b:3e:
         d4:9a:e5:28:69:65:bd:21:45:13:49:37:b3:c2:98:25:d0:c5:
         b0:f9:16:85:dd:5b:de:45:02:78:f7:d0:ed:d7:e9:1d:43:12:
         3d:de:be:bf:20:61:52:e5:cd:42:73:ab:9c:d2:f0:99:38:04:
         09:d0:87:7e:58:fd:72:cb:97:df:45:1d:b8:76:1f:17:6c:2a:
         cf:29:7c:94:ed:71:0d:6b:a8:e0:95:95:65:24:9b:48:4b:2b:
         e9:db:eb:65:8b:8e:73:3a:be:f7:15:f7:57:29:a4:5c:27:bf:
         03:17:39:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:41:26 2026 by rpki-client