Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a343030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a343030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          cGacq7Y0x/g3/kYhvscNCkrBaT18RS5DaKUluwtYr/I=
Subject key identifier:   11:75:E2:41:BD:D0:39:AC:9B:B4:BE:07:35:6C:C4:5C:C7:B7:AA:E8
Certificate issuer:       /CN=5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2
Certificate serial:       6D6743FF111E1CDF222D4629EA834E457880D99F
Authority key identifier: 5F:0A:FA:8A:F3:FB:CB:95:22:11:4C:46:E2:AB:F0:26:20:0D:47:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a343030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Wed 01 Apr 2026 17:40:29 +0000
ROA not before:           Wed 01 Apr 2026 17:35:29 +0000
ROA not after:            Wed 31 Mar 2027 17:40:29 +0000
asID:                     268296
IP address blocks:        2804:4efc:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 20:51:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:67:43:ff:11:1e:1c:df:22:2d:46:29:ea:83:4e:45:78:80:d9:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2
        Validity
            Not Before: Apr  1 17:35:29 2026 GMT
            Not After : Mar 31 17:40:29 2027 GMT
        Subject: CN=1175E241BDD039AC9BB4BE07356CC45CC7B7AAE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:20:fa:28:10:0a:8a:3c:d2:6d:48:53:02:8e:
                    9d:5b:e6:84:10:c5:1c:60:8a:7e:af:6b:b6:f5:9d:
                    30:56:d3:a3:df:49:8c:c0:26:24:3a:2e:b7:ff:f5:
                    3f:85:92:14:c4:2f:5d:55:20:78:ba:13:eb:b0:55:
                    9e:b2:96:ba:58:92:22:ec:b9:41:87:0d:ee:2f:eb:
                    3a:9f:9d:40:25:30:bd:8e:91:1b:b7:15:dd:b5:2f:
                    fe:79:61:9a:0d:6d:06:c5:63:d7:04:c7:28:3e:0f:
                    84:4c:ad:99:a8:fc:f7:a5:a3:ae:79:40:2e:fc:eb:
                    59:79:e3:1d:9a:24:c1:79:75:18:3a:d1:6f:dc:62:
                    7e:58:19:e6:fa:cd:c0:d0:62:11:dc:a1:6b:cb:3e:
                    34:97:01:49:f1:13:38:1d:60:ae:aa:c8:4d:97:d2:
                    5b:e3:af:d4:5a:59:c6:d5:f6:ba:2f:d1:f4:ae:80:
                    10:f7:e8:6c:36:54:a3:fc:a9:3b:52:0e:64:d9:52:
                    f1:14:24:cd:b7:fa:c0:5b:5e:25:a6:aa:b2:4c:fa:
                    5b:3c:87:93:da:e0:83:f5:db:31:63:69:04:ae:85:
                    8a:55:cb:93:df:fb:0c:9f:6a:f4:05:24:02:f6:20:
                    ca:2d:d7:21:f2:1a:4f:8f:37:4e:7f:77:0f:4f:6c:
                    f1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:75:E2:41:BD:D0:39:AC:9B:B4:BE:07:35:6C:C4:5C:C7:B7:AA:E8
            X509v3 Authority Key Identifier:
                keyid:5F:0A:FA:8A:F3:FB:CB:95:22:11:4C:46:E2:AB:F0:26:20:0D:47:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a343030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b3:8a:56:b4:cc:0d:3b:81:ef:74:6e:9e:78:4f:35:ec:9c:2e:
         eb:d3:48:19:4a:12:2e:d3:e1:3b:e1:28:95:3f:44:5b:a2:fa:
         e6:74:c4:cf:8d:c5:9d:1e:39:4e:f5:ac:86:3e:b5:6e:a6:2c:
         05:38:3e:69:81:30:9b:81:32:43:71:a3:2d:db:9a:73:ab:6d:
         c0:9a:7c:a5:67:13:9a:cc:65:d2:68:49:10:46:38:81:8f:23:
         f0:6b:da:b1:2e:b6:b6:fc:32:b7:d9:cc:cb:50:bc:2e:d3:7a:
         e7:0c:03:81:03:8a:f1:b5:7d:90:91:4e:cd:de:30:3e:e6:82:
         cd:1d:ac:dc:00:ac:9a:02:4c:e7:61:41:e3:5d:bb:2b:5e:2a:
         80:f7:37:d0:45:fc:51:a7:8a:b3:a6:83:cd:45:79:72:b2:49:
         a0:d4:bf:51:52:5c:e5:b5:ea:60:b2:7f:ce:21:3d:b5:ad:72:
         72:41:2a:1c:0b:0d:1e:b2:60:c9:1d:14:10:06:2f:f7:91:65:
         e1:10:da:88:12:51:75:0c:7e:10:67:d4:34:ed:4a:8d:79:b3:
         0a:0e:cf:ab:e9:db:ab:37:8c:4b:9a:b0:5f:43:0d:78:7e:9f:
         cc:61:bd:3c:f2:e6:7e:e2:4f:99:3d:a0:54:e5:3b:f0:f7:8e:
         06:84:a1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 07:42:41 2026 by rpki-client