Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a633030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a633030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          a8lZjonuvEP4SIdCEEdLen9aOPSEnUyWGG9DKq03b34=
Subject key identifier:   97:43:EA:14:EE:D9:66:DB:15:65:9F:0A:EB:8C:71:40:68:0F:7D:08
Certificate issuer:       /CN=5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2
Certificate serial:       7F72D12C0C524A4725E4A1C13167B9C9134D572C
Authority key identifier: 5F:0A:FA:8A:F3:FB:CB:95:22:11:4C:46:E2:AB:F0:26:20:0D:47:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a633030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Wed 01 Apr 2026 17:40:30 +0000
ROA not before:           Wed 01 Apr 2026 17:35:30 +0000
ROA not after:            Wed 31 Mar 2027 17:40:30 +0000
asID:                     268296
IP address blocks:        2804:4efc:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 20:51:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:72:d1:2c:0c:52:4a:47:25:e4:a1:c1:31:67:b9:c9:13:4d:57:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2
        Validity
            Not Before: Apr  1 17:35:30 2026 GMT
            Not After : Mar 31 17:40:30 2027 GMT
        Subject: CN=9743EA14EED966DB15659F0AEB8C7140680F7D08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:de:d6:83:e4:91:16:1c:2c:0d:33:5d:70:7d:
                    50:6b:27:b7:9c:99:fa:e0:6a:9e:fe:f9:e2:7d:94:
                    b9:35:1e:11:04:4a:3f:a2:ff:d8:ff:38:5a:89:59:
                    3e:8e:37:cf:42:3a:9c:18:b3:2d:78:55:a8:17:6d:
                    69:99:c4:1e:3e:ae:ba:aa:31:18:94:83:2d:b4:f1:
                    ec:b1:5d:78:3e:59:c5:e3:bc:9f:bd:5b:90:ad:4e:
                    3f:7d:01:74:83:7f:90:cb:14:1e:0b:66:06:43:97:
                    d7:16:73:9b:1c:8a:d9:87:e3:85:82:d1:ea:4a:13:
                    64:ef:22:f7:71:8a:58:36:68:51:c5:92:dd:d1:3d:
                    55:50:df:9f:41:05:85:a0:76:29:da:6b:dd:8c:b9:
                    07:bb:de:bc:ce:b1:b4:1e:2f:d4:52:a2:a8:b0:7e:
                    6c:93:9f:a5:47:48:3b:af:e5:a3:f7:e2:88:f3:29:
                    74:23:ec:9c:59:fd:dc:32:9f:d2:52:a6:cd:4e:f3:
                    ee:f7:10:8c:ff:54:98:35:56:ff:5a:88:56:16:28:
                    9b:53:83:63:cb:36:b7:e2:47:0e:05:c1:b9:16:25:
                    9b:8f:cf:d9:d8:c3:ea:d7:ce:b6:62:66:08:e4:ac:
                    66:e7:62:3a:16:7c:22:7b:1a:bd:0f:37:24:09:bb:
                    a4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:43:EA:14:EE:D9:66:DB:15:65:9F:0A:EB:8C:71:40:68:0F:7D:08
            X509v3 Authority Key Identifier:
                keyid:5F:0A:FA:8A:F3:FB:CB:95:22:11:4C:46:E2:AB:F0:26:20:0D:47:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a633030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         88:2a:9d:b0:78:4f:30:5b:51:62:71:01:71:0e:ac:dc:50:1a:
         d6:29:b0:9f:ef:bd:73:89:7b:a3:e0:a5:71:2b:ea:27:7b:01:
         48:ac:76:7f:45:5a:6f:e4:bc:4e:63:f2:7d:ec:20:29:23:23:
         20:59:14:01:bc:70:53:03:3f:0f:b7:6a:1b:3b:7b:48:54:0c:
         38:20:06:98:a1:79:e3:86:bf:12:18:15:9a:77:b4:94:36:3f:
         f6:87:22:23:35:5e:12:05:10:7e:03:2f:ce:e7:51:c3:b3:88:
         f0:1b:3e:2c:ed:58:db:fa:6c:70:ef:77:3f:9e:6f:7d:09:ed:
         63:fb:ee:39:57:b6:78:ef:36:c0:06:fa:0d:26:07:41:43:20:
         20:85:d3:dd:07:c7:ed:43:1c:de:36:bc:55:48:d5:0e:45:62:
         63:55:1d:82:2f:bb:7f:b1:0a:3f:88:fc:10:7c:2a:67:2c:7a:
         77:aa:84:d6:d4:17:94:aa:e8:ab:89:e6:d5:df:47:4b:8a:e7:
         76:d1:eb:5e:e1:6e:ae:c8:ca:a4:fb:95:75:a5:80:cb:06:36:
         d8:b3:22:af:c7:0f:70:2e:99:92:81:2f:e9:46:c9:65:ce:19:
         99:88:1a:fa:b3:71:f3:23:07:da:b7:fe:c1:bb:1f:4d:5d:76:
         9c:e5:5d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 07:42:44 2026 by rpki-client