Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/323830343a346263633a383030303a3a2f33332d3333203d3e20323637333330.roa
File:                     323830343a346263633a383030303a3a2f33332d3333203d3e20323637333330.roa (raw, json)
Hash identifier:          Lh2eqyDImZx8IHU0/A1vgtCY4V+/+2qAdKnG5EoB+0I=
Subject key identifier:   13:D6:E4:1A:94:AD:69:D8:F3:D2:D5:F3:45:B0:BD:BA:A4:54:EC:F9
Certificate issuer:       /CN=0A467B137635F43F91188ECBB9D30961A5B090C1
Certificate serial:       7794315DB72187E5DAF8C5EEF27B183692ACD0F2
Authority key identifier: 0A:46:7B:13:76:35:F4:3F:91:18:8E:CB:B9:D3:09:61:A5:B0:90:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A467B137635F43F91188ECBB9D30961A5B090C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/323830343a346263633a383030303a3a2f33332d3333203d3e20323637333330.roa
Signing time:             Thu 02 Apr 2026 13:04:04 +0000
ROA not before:           Thu 02 Apr 2026 12:59:04 +0000
ROA not after:            Thu 01 Apr 2027 13:04:04 +0000
asID:                     267330
IP address blocks:        2804:4bcc:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/0A467B137635F43F91188ECBB9D30961A5B090C1.crl
                          rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/0A467B137635F43F91188ECBB9D30961A5B090C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A467B137635F43F91188ECBB9D30961A5B090C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 01:40:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:94:31:5d:b7:21:87:e5:da:f8:c5:ee:f2:7b:18:36:92:ac:d0:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A467B137635F43F91188ECBB9D30961A5B090C1
        Validity
            Not Before: Apr  2 12:59:04 2026 GMT
            Not After : Apr  1 13:04:04 2027 GMT
        Subject: CN=13D6E41A94AD69D8F3D2D5F345B0BDBAA454ECF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ef:59:b5:c1:9c:ec:b9:02:f5:1b:8e:20:d3:
                    43:86:d3:dc:6f:b6:ef:cb:ba:91:fd:97:7c:de:65:
                    d0:fb:f4:98:a0:55:d6:a9:d0:ef:4c:9e:0d:10:20:
                    58:4f:9e:9a:37:e2:9e:df:4d:6f:c3:60:02:ba:5b:
                    6e:9a:c3:89:9a:f8:77:5e:05:1e:1c:71:e4:45:8b:
                    f2:04:3f:40:07:4d:74:84:56:2b:6f:33:fc:9c:5a:
                    fc:49:3f:21:ce:3b:91:48:54:91:76:19:7f:5f:d8:
                    ea:9a:53:24:25:15:8c:04:59:90:bc:a1:bb:d0:af:
                    ab:5e:4d:b5:ce:6b:5b:14:1b:6d:cf:8c:2a:e7:73:
                    3b:23:c6:8f:49:cf:20:d1:0e:31:b8:cf:80:ae:56:
                    98:f1:64:e7:41:df:19:37:d9:32:a2:a0:8c:c3:1b:
                    d9:b1:3f:25:f2:14:e4:df:b9:88:04:0b:e3:28:cc:
                    6e:11:bd:41:fc:d9:ee:a1:9a:51:7e:c9:c3:4c:9d:
                    84:64:55:92:db:fb:29:4a:7e:10:ed:90:20:6d:a1:
                    8a:8d:a3:56:9d:d0:f3:e3:e2:69:87:0e:1f:64:13:
                    42:af:41:2b:f5:c4:e7:d6:9e:c3:c2:8f:48:f9:c5:
                    c1:bb:51:3c:5e:76:4d:25:30:b1:6c:c5:8a:fd:f2:
                    57:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D6:E4:1A:94:AD:69:D8:F3:D2:D5:F3:45:B0:BD:BA:A4:54:EC:F9
            X509v3 Authority Key Identifier:
                keyid:0A:46:7B:13:76:35:F4:3F:91:18:8E:CB:B9:D3:09:61:A5:B0:90:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/0A467B137635F43F91188ECBB9D30961A5B090C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A467B137635F43F91188ECBB9D30961A5B090C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/323830343a346263633a383030303a3a2f33332d3333203d3e20323637333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bcc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         07:0c:e7:35:7b:f2:5d:be:04:ac:ae:76:22:51:11:5e:81:f5:
         94:2d:81:79:39:63:b9:ff:a6:e7:82:79:47:7a:7f:af:e8:a2:
         22:e3:b5:cb:61:33:f4:ce:47:2f:ef:7f:3a:30:39:ac:fa:56:
         d6:f0:8d:35:16:e6:ee:f5:46:bc:9c:9b:ca:27:dd:56:15:ce:
         70:96:5e:dc:8d:81:68:5e:f2:95:55:ff:79:10:42:65:7d:28:
         d6:75:32:2f:0c:3e:5f:64:24:c1:d3:e7:b2:97:7a:b0:18:6e:
         db:a7:81:9c:d7:5b:42:ba:b2:64:72:b5:b3:87:ac:be:09:01:
         e6:36:8e:af:52:b3:11:26:84:2f:70:30:21:34:2b:19:0c:6d:
         89:f7:e9:ca:7a:9f:b6:b5:63:aa:7c:4d:25:bd:89:f9:ab:77:
         d9:76:d0:ab:70:29:ae:e1:68:0f:94:da:5e:db:45:12:1c:39:
         d1:20:28:a9:ab:c1:78:fb:ad:ef:e4:92:de:32:e3:09:6d:99:
         fb:28:88:94:c9:ca:8f:b3:4c:8c:59:8d:42:31:1a:89:48:8c:
         09:73:4c:2d:03:43:10:c1:c2:1f:7f:dd:09:9b:4b:a7:68:3e:
         e3:5a:52:a5:cd:91:c2:3d:48:db:0d:90:b9:72:d1:b1:76:67:
         47:04:4e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 06:39:26 2026 by rpki-client