Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/323830343a323563303a3a2f33322d3332203d3e20323634333030.roa
File:                     323830343a323563303a3a2f33322d3332203d3e20323634333030.roa (raw, json)
Hash identifier:          ABjfxGDG0UnKXvCQAidWG8cdcfCd7O2PBrMJK+oVTdI=
Subject key identifier:   93:0F:71:D0:2C:F7:50:8A:32:57:8E:E6:7B:10:C9:5A:10:D6:F1:A4
Certificate issuer:       /CN=62365DDB5E7180DECDF6EDE9FAD3D510FF0984A5
Certificate serial:       56C3B756681E20A472C41636420F458AF86A66B4
Authority key identifier: 62:36:5D:DB:5E:71:80:DE:CD:F6:ED:E9:FA:D3:D5:10:FF:09:84:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62365DDB5E7180DECDF6EDE9FAD3D510FF0984A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/323830343a323563303a3a2f33322d3332203d3e20323634333030.roa
Signing time:             Sat 04 Apr 2026 15:08:58 +0000
ROA not before:           Sat 04 Apr 2026 15:03:58 +0000
ROA not after:            Sat 03 Apr 2027 15:08:58 +0000
asID:                     264300
IP address blocks:        2804:25c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/62365DDB5E7180DECDF6EDE9FAD3D510FF0984A5.crl
                          rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/62365DDB5E7180DECDF6EDE9FAD3D510FF0984A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62365DDB5E7180DECDF6EDE9FAD3D510FF0984A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 18:56:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:c3:b7:56:68:1e:20:a4:72:c4:16:36:42:0f:45:8a:f8:6a:66:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62365DDB5E7180DECDF6EDE9FAD3D510FF0984A5
        Validity
            Not Before: Apr  4 15:03:58 2026 GMT
            Not After : Apr  3 15:08:58 2027 GMT
        Subject: CN=930F71D02CF7508A32578EE67B10C95A10D6F1A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5c:aa:92:3d:a7:eb:4d:56:8e:b9:f5:a1:74:
                    cf:20:a5:2b:9f:e5:dc:e9:a8:cb:f1:7e:6e:74:f9:
                    c0:07:8c:98:b9:18:42:a4:f1:e2:5b:41:20:a1:12:
                    37:8a:29:d3:cc:4f:2d:59:2b:8f:94:ac:7a:a5:e7:
                    d5:e3:88:33:5e:23:48:2e:d9:2f:11:5b:36:a4:53:
                    94:d8:09:5c:ab:b1:25:b6:7e:b9:24:21:09:9d:2f:
                    56:67:4f:95:aa:21:fa:3c:d6:18:6a:c4:ba:61:28:
                    54:06:96:2d:eb:ed:30:0d:8b:49:ae:32:cb:e0:de:
                    dd:34:10:cc:55:cc:05:06:05:6b:59:1c:49:cb:78:
                    f9:a4:82:fb:b3:62:b6:29:0a:76:bf:93:f5:d2:6c:
                    ba:4c:af:cf:ac:db:2d:cb:96:1e:20:01:7e:73:2e:
                    fe:14:03:03:8a:02:45:7f:7b:e8:47:0e:52:da:2e:
                    11:71:bb:cb:8f:9a:e5:40:93:40:c7:c1:48:db:cc:
                    f3:e0:38:a2:21:bf:53:2e:02:39:7a:37:1f:8c:49:
                    d1:9f:ac:01:4d:1a:2c:85:4d:a9:23:fa:b4:76:24:
                    ec:50:c8:4d:00:a9:92:8e:1a:4e:bc:45:52:a7:94:
                    27:49:30:e2:ef:3d:a7:d3:2d:6c:b0:38:04:25:e3:
                    1e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0F:71:D0:2C:F7:50:8A:32:57:8E:E6:7B:10:C9:5A:10:D6:F1:A4
            X509v3 Authority Key Identifier:
                keyid:62:36:5D:DB:5E:71:80:DE:CD:F6:ED:E9:FA:D3:D5:10:FF:09:84:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/62365DDB5E7180DECDF6EDE9FAD3D510FF0984A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62365DDB5E7180DECDF6EDE9FAD3D510FF0984A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/323830343a323563303a3a2f33322d3332203d3e20323634333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:ab:cf:48:bb:28:dc:a6:ac:b4:4a:4e:4b:18:dd:f0:01:aa:
         a7:bd:ba:ab:a5:eb:13:43:8d:43:cd:b8:5e:d8:1a:ea:6a:c2:
         ed:21:e1:ea:6e:8b:a2:a1:9a:cb:a4:7c:0d:ea:3d:35:b8:4d:
         ab:61:e5:b9:17:ee:f9:05:85:55:7a:fd:da:bc:cc:32:1f:b5:
         fc:f4:9e:d7:a9:b5:22:6d:67:37:d6:5e:89:4e:25:04:7f:37:
         15:79:35:55:33:2d:1b:48:a9:21:82:a1:bc:3b:ec:d8:2f:b3:
         ad:c6:07:31:ae:30:62:5b:5c:09:7a:1d:9d:d7:b3:eb:6d:1c:
         03:81:b6:17:9d:72:36:5a:b4:44:22:7f:db:f6:1c:09:ff:6d:
         3e:6c:1e:18:ee:53:34:4e:11:49:7b:e3:35:4e:64:70:89:81:
         d2:2d:ac:32:b0:67:84:62:b1:e4:f6:7d:6a:bc:5d:86:fc:c5:
         8d:14:ce:d3:74:e1:d2:2e:13:89:12:97:3b:dd:82:55:35:3f:
         15:8d:6c:c5:cf:b3:c3:b0:98:2c:c1:d2:77:70:77:82:d4:3f:
         ab:3f:c8:c3:da:40:7d:c3:84:4d:9f:43:70:a6:44:a3:3f:d2:
         96:65:3e:32:d4:b4:a5:c9:7b:46:22:54:65:e1:1c:fb:b4:c2:
         65:21:2b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 07:52:32 2026 by rpki-client