Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/323830343a356466303a383030303a3a2f33342d3334203d3e20323639303032.roa
File:                     323830343a356466303a383030303a3a2f33342d3334203d3e20323639303032.roa (raw, json)
Hash identifier:          TUfye7NnYXOFW4psfj0Wi5PE7Y/oULa/zvGn2IE5i6Q=
Subject key identifier:   2B:6E:4D:9A:1C:83:35:69:C1:75:C6:A4:DB:F2:C7:64:96:CD:0D:A1
Certificate issuer:       /CN=89421C5EE6A6B6E133F5868D831254A94BCD35D7
Certificate serial:       4FEED424D0E3558EE14E77E810015FFC04D1D5A4
Authority key identifier: 89:42:1C:5E:E6:A6:B6:E1:33:F5:86:8D:83:12:54:A9:4B:CD:35:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89421C5EE6A6B6E133F5868D831254A94BCD35D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/323830343a356466303a383030303a3a2f33342d3334203d3e20323639303032.roa
Signing time:             Mon 06 Apr 2026 13:38:54 +0000
ROA not before:           Mon 06 Apr 2026 13:33:54 +0000
ROA not after:            Mon 05 Apr 2027 13:38:54 +0000
asID:                     269002
IP address blocks:        2804:5df0:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/89421C5EE6A6B6E133F5868D831254A94BCD35D7.crl
                          rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/89421C5EE6A6B6E133F5868D831254A94BCD35D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89421C5EE6A6B6E133F5868D831254A94BCD35D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 04:10:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ee:d4:24:d0:e3:55:8e:e1:4e:77:e8:10:01:5f:fc:04:d1:d5:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89421C5EE6A6B6E133F5868D831254A94BCD35D7
        Validity
            Not Before: Apr  6 13:33:54 2026 GMT
            Not After : Apr  5 13:38:54 2027 GMT
        Subject: CN=2B6E4D9A1C833569C175C6A4DBF2C76496CD0DA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a1:0f:45:c9:44:df:a5:e7:ec:d0:cd:09:db:
                    08:6e:14:a2:b0:be:c4:ee:2c:01:21:15:00:c8:d7:
                    d1:fe:b4:63:ed:bc:30:f0:e1:fa:64:c1:8f:75:e4:
                    78:6e:79:d2:86:87:4a:9d:8c:14:f1:36:2b:70:00:
                    d0:c9:e2:3e:d4:5b:a0:37:cc:c1:72:9a:2b:58:57:
                    4f:e4:72:9a:9c:be:27:d8:35:c0:8c:2e:d5:0c:21:
                    ff:b0:65:c2:75:2a:89:0c:86:8d:63:43:79:61:82:
                    be:a0:c2:b2:62:13:6c:8c:40:53:f0:cb:8e:19:38:
                    92:86:91:07:e1:b0:57:de:38:be:7d:d7:ef:64:33:
                    6a:0a:db:61:e7:77:8a:d7:19:4b:7f:41:04:d0:47:
                    8a:22:cd:5c:e8:6a:21:07:47:ae:8c:27:74:f4:55:
                    47:4b:ec:1a:0a:c4:cb:b9:46:ba:a8:10:ac:b4:ce:
                    f7:e7:07:1d:0b:2b:c9:1e:a3:21:e2:c1:9c:5c:97:
                    ac:e3:80:80:47:6e:6d:bd:ba:ce:ff:83:c8:d9:b2:
                    1b:c6:34:00:51:29:e6:6d:4d:16:aa:32:03:b3:76:
                    66:bc:1c:51:98:aa:91:fb:7e:24:a8:ed:4a:36:b6:
                    f8:fa:1e:4e:be:0e:a2:70:e5:46:e6:0c:18:51:8a:
                    4a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6E:4D:9A:1C:83:35:69:C1:75:C6:A4:DB:F2:C7:64:96:CD:0D:A1
            X509v3 Authority Key Identifier:
                keyid:89:42:1C:5E:E6:A6:B6:E1:33:F5:86:8D:83:12:54:A9:4B:CD:35:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/89421C5EE6A6B6E133F5868D831254A94BCD35D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89421C5EE6A6B6E133F5868D831254A94BCD35D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/323830343a356466303a383030303a3a2f33342d3334203d3e20323639303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5df0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         75:92:1f:49:cd:ea:b3:41:d8:0b:f7:86:1d:81:6d:38:5b:74:
         2c:1d:df:e1:98:67:88:83:ff:de:ca:f4:10:9d:ae:e6:26:3b:
         3f:8f:3a:77:16:de:fa:a7:02:a9:41:c7:5b:1c:a2:9f:19:62:
         d8:1d:12:f9:af:3c:a0:26:9d:2d:0e:2f:e4:0f:c0:6b:fb:3d:
         0d:1e:b3:c1:62:29:0a:23:3d:1d:29:80:bf:64:9b:39:20:a8:
         87:c2:2e:e6:13:1a:d1:83:c9:e8:17:f1:32:01:32:9e:a8:c9:
         b2:b3:96:1b:ec:13:5c:7f:39:64:82:5c:ed:76:89:2e:25:c3:
         3a:32:9b:ce:31:8d:98:be:00:b5:4c:ed:33:c2:37:2e:d0:b1:
         5e:8c:28:af:47:53:ff:9a:73:e8:61:94:6c:84:bd:3b:3e:d3:
         62:bf:01:d8:b4:ea:a9:a8:c1:a7:b8:ed:c4:ee:cb:e0:3f:91:
         4d:1c:34:fd:14:05:9a:db:57:87:1a:47:a3:2c:9a:71:ae:11:
         1c:52:3f:ec:93:da:ea:b0:e0:0e:a5:db:39:e9:44:60:0a:5e:
         df:3b:88:4a:0a:70:20:8a:31:ee:19:56:b1:13:20:f8:df:68:
         86:cf:fb:b4:6c:02:f7:d3:b8:dd:1c:c7:af:2b:32:af:c6:f6:
         9b:40:69:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 10:59:12 2026 by rpki-client