Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/323830313a38303a3333303a3a2f34382d3438203d3e203533303436.roa
File:                     323830313a38303a3333303a3a2f34382d3438203d3e203533303436.roa (raw, json)
Hash identifier:          cfGg63KN2dlsMM15fbm525/uijhy+sLZFuCmh3jV8+M=
Subject key identifier:   2A:59:3D:60:B7:F6:A6:13:24:D7:2F:9D:2A:43:3C:8F:BE:EA:B6:09
Certificate issuer:       /CN=CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3
Certificate serial:       727AB15AFC307E42FDC06F64446C94BCBBB4142F
Authority key identifier: CE:68:7B:DF:D3:E8:EB:AC:E7:EE:1E:A8:4F:7F:C1:BB:27:8B:3C:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/323830313a38303a3333303a3a2f34382d3438203d3e203533303436.roa
Signing time:             Tue 07 Apr 2026 15:27:32 +0000
ROA not before:           Tue 07 Apr 2026 15:22:32 +0000
ROA not after:            Tue 06 Apr 2027 15:27:32 +0000
asID:                     53046
IP address blocks:        2801:80:330::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl
                          rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 13:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:7a:b1:5a:fc:30:7e:42:fd:c0:6f:64:44:6c:94:bc:bb:b4:14:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3
        Validity
            Not Before: Apr  7 15:22:32 2026 GMT
            Not After : Apr  6 15:27:32 2027 GMT
        Subject: CN=2A593D60B7F6A61324D72F9D2A433C8FBEEAB609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:19:7f:b3:df:53:a4:58:a5:5f:ee:da:74:a2:
                    61:39:1b:ea:04:86:b8:c6:3b:c4:69:9a:2a:16:3f:
                    11:a3:99:2a:f0:3d:2c:13:96:a6:25:ca:26:e4:8f:
                    09:5f:ce:9f:ab:46:b5:c2:f7:1b:f3:a4:67:f9:41:
                    61:b2:05:0c:0f:74:56:71:34:90:95:43:76:b4:b3:
                    03:40:43:d5:f3:74:25:d3:90:fd:dc:ce:d8:f9:bf:
                    be:a5:42:ef:06:bb:67:18:23:a0:59:78:1d:93:4b:
                    54:89:76:a0:0c:98:9b:9f:b2:f2:02:ae:6d:c5:55:
                    dd:1e:7a:76:43:52:44:67:6b:53:7f:13:86:00:42:
                    a6:28:c5:72:66:ab:d1:bc:53:c6:ed:36:27:82:66:
                    22:dd:3c:b0:c6:bc:6a:c2:d8:64:9a:7f:b7:ea:f1:
                    09:a8:8d:2a:9c:d0:2e:b0:5d:2d:44:16:98:45:e8:
                    45:49:14:24:4a:52:aa:72:c2:74:aa:d7:65:21:66:
                    9a:13:80:8e:30:c5:ce:91:3c:54:f4:1b:02:b2:7a:
                    39:28:5f:69:ba:5d:dc:19:b5:19:60:dd:41:78:31:
                    d6:7b:0c:91:e7:fb:94:df:d5:f9:43:27:14:de:78:
                    b3:78:9f:71:68:89:ce:ba:f6:76:f0:c0:f8:24:13:
                    e7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:59:3D:60:B7:F6:A6:13:24:D7:2F:9D:2A:43:3C:8F:BE:EA:B6:09
            X509v3 Authority Key Identifier:
                keyid:CE:68:7B:DF:D3:E8:EB:AC:E7:EE:1E:A8:4F:7F:C1:BB:27:8B:3C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/323830313a38303a3333303a3a2f34382d3438203d3e203533303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:330::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:51:82:91:1f:1a:e1:82:f9:e7:fc:13:b0:bb:e3:3f:60:4d:
         c3:35:84:7b:84:23:4a:8c:ab:fb:a7:5c:cb:4d:1f:99:af:bd:
         2c:b3:f3:23:ef:34:a8:d4:48:45:a7:72:33:26:fd:86:39:7b:
         2b:99:b1:c1:b1:cc:7a:48:2c:c7:17:bf:37:78:1f:ad:17:35:
         5c:cc:a9:c1:5d:50:c7:65:c1:77:90:9b:57:5c:ce:0b:8e:89:
         29:62:f8:32:b5:cb:ba:96:63:3b:6a:86:9b:bb:d2:c7:7a:2f:
         93:88:8b:35:b5:97:45:70:cc:da:02:2f:da:a8:90:21:38:61:
         53:4a:2f:04:b5:08:bd:ca:d5:00:00:77:8c:5d:14:f4:24:e1:
         67:95:7d:e9:49:2d:fe:1e:3f:bb:3b:07:1a:df:9b:c1:b8:59:
         66:33:cb:d8:9d:c6:79:f2:80:bb:4d:26:10:06:43:76:ce:75:
         4f:33:73:cf:8d:4b:5d:a3:f0:bb:ba:68:57:98:20:e2:bf:ea:
         b1:e2:b5:61:1b:ad:1c:a4:f9:19:3f:8c:04:86:40:07:d7:49:
         48:26:8a:ba:6a:77:51:83:d5:b7:07:c8:cf:fd:69:5d:38:b9:
         6b:a0:e1:fa:1a:fa:b4:a9:e0:c8:1d:61:94:97:1f:12:5f:f1:
         75:0b:cd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 18:16:23 2026 by rpki-client