Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/323830343a3133383a3a2f33322d3337203d3e203131343332.roa
File:                     323830343a3133383a3a2f33322d3337203d3e203131343332.roa (raw, json)
Hash identifier:          qI3QzNSBTuRmcLYaZ7uxJ8EbBE529u4C7OIxtDmDaUE=
Subject key identifier:   9D:DB:C9:DA:0D:6C:F1:98:3E:7D:22:AB:E7:2A:10:BC:91:00:08:3F
Certificate issuer:       /CN=624F0468FC714CC37AD7B531FC42ED69C25ADF2C
Certificate serial:       18BC53C1BFDFA7AED860D4C1795B0A1ADD8FA7FD
Authority key identifier: 62:4F:04:68:FC:71:4C:C3:7A:D7:B5:31:FC:42:ED:69:C2:5A:DF:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624F0468FC714CC37AD7B531FC42ED69C25ADF2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/323830343a3133383a3a2f33322d3337203d3e203131343332.roa
Signing time:             Mon 06 Apr 2026 15:58:31 +0000
ROA not before:           Mon 06 Apr 2026 15:53:31 +0000
ROA not after:            Mon 05 Apr 2027 15:58:31 +0000
asID:                     11432
IP address blocks:        2804:138::/32 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/624F0468FC714CC37AD7B531FC42ED69C25ADF2C.crl
                          rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/624F0468FC714CC37AD7B531FC42ED69C25ADF2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624F0468FC714CC37AD7B531FC42ED69C25ADF2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 06:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:bc:53:c1:bf:df:a7:ae:d8:60:d4:c1:79:5b:0a:1a:dd:8f:a7:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624F0468FC714CC37AD7B531FC42ED69C25ADF2C
        Validity
            Not Before: Apr  6 15:53:31 2026 GMT
            Not After : Apr  5 15:58:31 2027 GMT
        Subject: CN=9DDBC9DA0D6CF1983E7D22ABE72A10BC9100083F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6a:e2:0a:68:a7:37:11:29:07:86:c7:d6:8d:
                    b7:65:2f:00:2f:7e:4d:13:73:8c:72:7e:5d:58:dc:
                    0c:ea:67:02:14:89:98:5c:c8:c3:70:6a:45:6a:d8:
                    0b:ee:fc:3b:13:14:57:a2:38:8b:78:ce:7a:2b:fa:
                    3c:2d:32:43:4e:d4:81:11:b1:8c:df:4c:ba:62:9f:
                    31:9a:b8:2a:94:58:8c:52:36:3e:cf:16:28:d1:77:
                    14:1b:10:96:52:f7:8f:95:f5:d1:22:7a:66:51:70:
                    6c:a6:39:ed:41:cc:78:99:18:0b:81:d5:37:4b:bc:
                    bd:da:69:03:34:5d:42:ae:78:2c:2e:82:b0:be:a0:
                    7b:29:71:49:cb:07:8a:69:24:f3:c6:17:f3:3d:4a:
                    f1:73:38:26:c4:a5:e8:b2:9b:0e:6b:e0:ed:69:42:
                    7d:42:d4:a7:4f:61:e5:a4:56:b4:9c:4d:c9:be:4e:
                    87:35:1d:4e:56:03:6a:92:45:42:9c:94:2f:fb:14:
                    a9:37:04:cd:b8:03:b1:c8:56:50:50:2b:5c:82:9d:
                    dc:c1:27:f2:00:50:d1:2e:1d:09:bf:e1:59:27:f5:
                    aa:7b:3c:f6:cb:bf:23:6c:a5:75:ba:e6:61:3e:c0:
                    a6:5c:35:39:01:26:63:b8:20:99:ed:cd:7e:e2:51:
                    fb:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:DB:C9:DA:0D:6C:F1:98:3E:7D:22:AB:E7:2A:10:BC:91:00:08:3F
            X509v3 Authority Key Identifier:
                keyid:62:4F:04:68:FC:71:4C:C3:7A:D7:B5:31:FC:42:ED:69:C2:5A:DF:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/624F0468FC714CC37AD7B531FC42ED69C25ADF2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624F0468FC714CC37AD7B531FC42ED69C25ADF2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/323830343a3133383a3a2f33322d3337203d3e203131343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:138::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:49:f5:c2:31:e2:3e:2a:20:13:5c:6e:2c:28:5d:07:bf:f8:
         0f:a1:74:62:b5:98:7e:a5:b7:04:cd:fd:8c:5a:31:ca:59:f6:
         5e:45:e1:b8:2a:36:84:17:35:4d:ff:c3:43:23:43:3c:e3:5e:
         4c:49:25:79:99:71:c4:f8:6e:87:ba:c1:82:7a:3d:80:43:3f:
         19:05:91:48:6c:34:d0:5c:07:04:1e:4e:af:d7:93:1a:98:44:
         24:3a:12:09:c2:a6:6a:ed:c3:b4:b9:35:2a:87:0c:4a:e2:ff:
         b2:63:62:b6:3a:ff:d0:2d:9b:2f:aa:37:e4:c1:20:0d:49:63:
         16:14:3c:34:ec:a0:29:cd:6d:88:23:b0:b9:8e:e0:e8:00:21:
         d0:d0:58:6f:99:eb:f2:4f:32:40:ff:86:d7:c0:a7:24:04:61:
         83:c1:82:59:22:5f:fa:1d:16:a4:c3:8d:4b:2d:e5:7e:b8:00:
         5a:ca:be:d8:da:6c:5c:a8:05:87:56:e8:3e:f8:c2:3b:ad:2c:
         92:20:16:a0:83:96:c4:74:71:c9:f7:9f:62:26:f3:93:bc:94:
         ee:80:bb:63:ac:7e:07:f2:40:21:a0:c8:73:04:1f:f3:a8:2d:
         4f:23:b2:40:9a:c0:de:af:f1:44:94:c9:6b:98:d5:c0:eb:97:
         ef:cb:e0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 09:28:21 2026 by rpki-client