Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/323830343a356466303a3a2f33322d3332203d3e20323639303032.roa
File:                     323830343a356466303a3a2f33322d3332203d3e20323639303032.roa (raw, json)
Hash identifier:          WX28ppQ52FpmQXcHwPNfIFB9PxublIa7IkDcu+AtLms=
Subject key identifier:   05:F0:5B:83:F5:7B:77:9B:DB:E0:0C:8B:0A:86:65:5A:79:74:2B:92
Certificate issuer:       /CN=89421C5EE6A6B6E133F5868D831254A94BCD35D7
Certificate serial:       515007120B84AC911CA128138AC5E8F6062D0BD4
Authority key identifier: 89:42:1C:5E:E6:A6:B6:E1:33:F5:86:8D:83:12:54:A9:4B:CD:35:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89421C5EE6A6B6E133F5868D831254A94BCD35D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/323830343a356466303a3a2f33322d3332203d3e20323639303032.roa
Signing time:             Mon 06 Apr 2026 13:38:52 +0000
ROA not before:           Mon 06 Apr 2026 13:33:52 +0000
ROA not after:            Mon 05 Apr 2027 13:38:52 +0000
asID:                     269002
IP address blocks:        2804:5df0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/89421C5EE6A6B6E133F5868D831254A94BCD35D7.crl
                          rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/89421C5EE6A6B6E133F5868D831254A94BCD35D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89421C5EE6A6B6E133F5868D831254A94BCD35D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 04:10:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:50:07:12:0b:84:ac:91:1c:a1:28:13:8a:c5:e8:f6:06:2d:0b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89421C5EE6A6B6E133F5868D831254A94BCD35D7
        Validity
            Not Before: Apr  6 13:33:52 2026 GMT
            Not After : Apr  5 13:38:52 2027 GMT
        Subject: CN=05F05B83F57B779BDBE00C8B0A86655A79742B92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a1:8d:41:bf:94:c3:23:3c:5d:f5:2d:61:2e:
                    77:29:cb:55:40:a4:66:df:3e:96:a5:7c:f8:94:e9:
                    ab:57:26:91:7c:1a:47:4d:e4:1c:87:f3:58:68:ea:
                    b6:26:93:17:af:95:5f:02:7b:50:cc:a1:b1:48:cd:
                    34:a7:bc:4c:4c:93:36:6a:5e:15:25:26:5c:db:45:
                    14:bb:f6:67:87:5c:86:34:a0:d4:62:ac:24:95:72:
                    6c:64:ad:64:71:79:3c:ad:7f:1c:61:21:45:26:75:
                    71:84:8f:2b:f0:3d:e6:3f:34:29:ba:17:44:f5:8c:
                    4e:13:ae:31:cb:d4:3d:64:a6:0a:89:82:23:cb:61:
                    42:78:ae:9e:dd:3f:87:7a:93:d1:51:9d:f1:ff:bc:
                    07:c5:dd:b5:b3:86:22:35:0d:60:c1:80:07:e0:8c:
                    03:3a:f0:aa:05:76:85:3f:d3:ff:82:ba:93:19:5f:
                    c2:6f:8f:50:8d:3d:c7:6c:32:f7:d7:55:98:66:fa:
                    41:08:f8:2a:79:56:33:46:88:cb:84:8c:a8:5d:49:
                    98:28:34:f3:7e:f0:d7:3e:7e:1d:1c:08:a3:e1:64:
                    c7:a9:b2:dd:3c:fe:27:a0:c7:d1:71:73:a4:46:2b:
                    0f:35:a2:2f:ad:59:fb:1c:06:f6:3d:35:76:60:3c:
                    98:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F0:5B:83:F5:7B:77:9B:DB:E0:0C:8B:0A:86:65:5A:79:74:2B:92
            X509v3 Authority Key Identifier:
                keyid:89:42:1C:5E:E6:A6:B6:E1:33:F5:86:8D:83:12:54:A9:4B:CD:35:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/89421C5EE6A6B6E133F5868D831254A94BCD35D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89421C5EE6A6B6E133F5868D831254A94BCD35D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/323830343a356466303a3a2f33322d3332203d3e20323639303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5df0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:77:99:10:dc:22:05:a2:ec:8d:f6:1e:0a:4c:46:f6:8a:50:
         43:31:10:86:b1:60:95:ee:99:60:2d:93:dd:12:13:87:47:37:
         1d:74:1e:da:98:41:22:a9:ee:32:7f:0c:1f:36:72:62:8a:80:
         3d:f3:9a:4e:bb:7b:f5:2e:ee:ff:4e:6a:4e:c3:df:96:0b:70:
         43:d7:3f:be:96:5c:5c:d4:1d:45:a7:66:6b:a8:33:be:06:3d:
         64:80:b3:d9:67:bb:67:f6:0e:ec:5b:a9:ba:fa:30:1a:0c:4b:
         b1:c9:f3:12:7e:90:07:c5:e4:3d:04:0c:ad:64:94:63:12:4c:
         09:a6:71:a6:aa:f1:6c:d2:70:8b:97:2f:fd:44:22:7b:e3:2c:
         5b:5f:f8:44:3e:d4:53:cc:f9:bb:70:08:94:09:48:ea:50:ab:
         47:32:2d:e6:8a:86:9b:6a:9b:de:10:d4:a7:d8:fc:1a:ea:25:
         35:e4:a1:d2:16:21:9a:3b:e4:55:0b:74:94:1b:9a:7c:a5:6b:
         de:3a:ff:14:cc:1c:19:cb:cb:ee:8f:a6:9d:61:e6:eb:3c:b8:
         5b:b8:bc:ef:ff:af:80:44:54:06:2a:15:d2:0b:ad:40:0d:4c:
         39:bb:e1:7b:38:54:ee:65:a8:44:68:11:42:c0:51:7e:de:06:
         d8:a5:07:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 07:43:24 2026 by rpki-client