Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/323830343a356466303a3a2f33332d3333203d3e20323639303032.roa
File:                     323830343a356466303a3a2f33332d3333203d3e20323639303032.roa (raw, json)
Hash identifier:          KXV8vPGleBKp2IPDD/6bFYDXKiYIl3Z9kAbL8MOLJvk=
Subject key identifier:   E5:7E:56:B6:FE:31:BD:F9:54:B0:F5:C3:13:4D:17:95:9D:E1:3C:63
Certificate issuer:       /CN=89421C5EE6A6B6E133F5868D831254A94BCD35D7
Certificate serial:       20A1E5A0AA098901260EB7DF3CB5E5ECB87193FD
Authority key identifier: 89:42:1C:5E:E6:A6:B6:E1:33:F5:86:8D:83:12:54:A9:4B:CD:35:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89421C5EE6A6B6E133F5868D831254A94BCD35D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/323830343a356466303a3a2f33332d3333203d3e20323639303032.roa
Signing time:             Mon 06 Apr 2026 13:38:51 +0000
ROA not before:           Mon 06 Apr 2026 13:33:51 +0000
ROA not after:            Mon 05 Apr 2027 13:38:51 +0000
asID:                     269002
IP address blocks:        2804:5df0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/89421C5EE6A6B6E133F5868D831254A94BCD35D7.crl
                          rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/89421C5EE6A6B6E133F5868D831254A94BCD35D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89421C5EE6A6B6E133F5868D831254A94BCD35D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 04:10:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a1:e5:a0:aa:09:89:01:26:0e:b7:df:3c:b5:e5:ec:b8:71:93:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89421C5EE6A6B6E133F5868D831254A94BCD35D7
        Validity
            Not Before: Apr  6 13:33:51 2026 GMT
            Not After : Apr  5 13:38:51 2027 GMT
        Subject: CN=E57E56B6FE31BDF954B0F5C3134D17959DE13C63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fd:b6:6b:37:fb:ed:26:51:60:76:98:6c:32:
                    c2:15:7b:f1:b9:66:5e:14:24:d3:f2:7a:20:42:6d:
                    e8:86:4a:07:dd:f3:0b:45:94:dc:e2:28:02:51:8d:
                    b9:a3:06:d0:70:87:10:f4:f5:ea:e6:67:7e:65:ff:
                    61:45:81:45:aa:bd:4c:2f:3c:5c:39:a3:ca:31:b4:
                    0f:c2:17:f0:b7:82:0f:f7:9d:84:11:f5:09:06:ab:
                    b7:eb:6c:d3:8c:df:1c:41:d6:4d:10:32:53:e2:01:
                    65:2f:fc:ca:7d:ed:7c:57:01:e7:f0:70:a6:e5:a1:
                    c2:51:cd:27:e8:0e:ae:05:d5:55:68:a0:3c:28:ca:
                    b1:6e:48:fe:65:98:86:4c:dd:a6:dd:93:ac:f2:08:
                    63:05:ec:d0:de:c5:58:5a:08:d1:5a:d9:bf:ff:42:
                    d1:96:3a:5e:8f:4d:06:1a:b1:64:1b:55:12:b9:35:
                    5f:61:15:a3:f6:0a:fd:84:e1:e9:4b:f2:01:18:e4:
                    7d:01:14:18:ee:00:79:e3:8a:0b:55:ab:78:f2:04:
                    d6:99:a8:d0:1b:f5:1c:a1:f8:5c:05:5f:d2:38:b6:
                    a4:f0:d2:68:89:5c:f1:65:45:88:10:ce:b7:64:c7:
                    b6:3e:91:f8:37:2b:1f:8d:8c:1c:af:09:01:68:f7:
                    fe:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:7E:56:B6:FE:31:BD:F9:54:B0:F5:C3:13:4D:17:95:9D:E1:3C:63
            X509v3 Authority Key Identifier:
                keyid:89:42:1C:5E:E6:A6:B6:E1:33:F5:86:8D:83:12:54:A9:4B:CD:35:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/89421C5EE6A6B6E133F5868D831254A94BCD35D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89421C5EE6A6B6E133F5868D831254A94BCD35D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/323830343a356466303a3a2f33332d3333203d3e20323639303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5df0::/33

    Signature Algorithm: sha256WithRSAEncryption
         9f:c2:50:8b:1d:3e:85:fe:c7:0c:96:b7:85:b7:e3:e8:13:92:
         60:90:a0:a4:b6:60:7a:a9:74:4b:c4:2b:3f:80:f6:87:5a:e9:
         b6:8c:c5:b6:9d:7c:de:ed:b5:42:e4:ce:85:1c:37:50:cd:aa:
         56:c5:f3:db:9a:89:8e:0b:47:86:0c:d9:68:62:78:f0:48:a8:
         0a:6c:c8:3a:4a:23:72:de:84:80:bd:70:da:19:d7:ee:d6:af:
         89:27:3b:ee:39:5b:f1:4b:85:51:c5:49:93:37:26:ef:fd:83:
         8d:b6:84:df:66:1b:8b:1c:18:91:c0:df:45:36:5a:80:21:66:
         c1:91:34:9b:b0:41:c9:b5:51:19:da:50:a0:e7:18:ad:89:e8:
         bb:b0:aa:27:fa:55:d3:c6:fe:49:97:8e:42:e3:10:83:b0:d5:
         aa:c0:a5:b8:5d:cd:cf:83:da:fe:82:97:ef:38:c1:71:7e:80:
         c0:5c:49:d5:f1:47:71:ff:c4:22:5e:9d:23:c7:8d:e7:55:e6:
         1f:2e:09:64:56:50:cd:65:cc:eb:d4:83:f7:2e:e2:0c:b2:1c:
         68:c1:b1:f7:52:26:e2:33:44:60:54:80:47:8c:33:43:37:da:
         3e:77:e5:ca:83:b3:3e:cc:63:79:60:4d:41:e4:8b:86:c1:27:
         7a:9e:b4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 12:23:17 2026 by rpki-client