Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/323830343a323536343a3a2f33322d3438203d3e20323634323738.roa
File:                     323830343a323536343a3a2f33322d3438203d3e20323634323738.roa (raw, json)
Hash identifier:          rUy0tt8eTVGUYOqZL1jEmjREuJnRrKFLe5yYV07je7I=
Subject key identifier:   A0:85:9E:30:C1:5B:AC:41:6F:29:65:B9:B2:CB:D0:F8:CB:5C:3E:4C
Certificate issuer:       /CN=F976CD824C8D193A1DDC32222B9CE1F619152F24
Certificate serial:       50BF4984FB7C1AD92EBEBE3E452A87D52DB0CC
Authority key identifier: F9:76:CD:82:4C:8D:19:3A:1D:DC:32:22:2B:9C:E1:F6:19:15:2F:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F976CD824C8D193A1DDC32222B9CE1F619152F24.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/323830343a323536343a3a2f33322d3438203d3e20323634323738.roa
Signing time:             Wed 01 Apr 2026 21:32:42 +0000
ROA not before:           Wed 01 Apr 2026 21:27:42 +0000
ROA not after:            Wed 31 Mar 2027 21:32:42 +0000
asID:                     264278
IP address blocks:        2804:2564::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/F976CD824C8D193A1DDC32222B9CE1F619152F24.crl
                          rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/F976CD824C8D193A1DDC32222B9CE1F619152F24.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F976CD824C8D193A1DDC32222B9CE1F619152F24.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 23:03:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:bf:49:84:fb:7c:1a:d9:2e:be:be:3e:45:2a:87:d5:2d:b0:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F976CD824C8D193A1DDC32222B9CE1F619152F24
        Validity
            Not Before: Apr  1 21:27:42 2026 GMT
            Not After : Mar 31 21:32:42 2027 GMT
        Subject: CN=A0859E30C15BAC416F2965B9B2CBD0F8CB5C3E4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4b:ca:87:2c:d8:27:3b:e8:a5:dc:1f:8b:c0:
                    cd:26:76:48:ec:f7:9d:dc:3a:ca:79:96:ed:ad:54:
                    ba:27:ee:45:09:cf:7f:f7:f2:f8:7a:0a:81:11:57:
                    e4:fb:49:5c:46:77:fc:2a:ea:de:7d:e4:50:4e:15:
                    92:cd:0f:1f:67:28:c8:4f:22:3a:77:88:73:73:89:
                    1c:f6:70:98:1c:a7:d9:86:cf:4c:8b:e7:69:f2:a7:
                    53:51:17:4f:50:06:a0:5d:24:06:f8:7a:b7:3c:24:
                    6c:dd:1a:c4:66:26:16:07:ed:c8:52:76:41:0e:62:
                    c6:7f:3c:6f:38:73:5e:c8:76:41:6d:5c:98:57:3e:
                    1b:bf:4b:53:88:4c:42:4d:4b:fa:a5:9a:dd:2b:18:
                    e1:cd:3b:95:88:0b:bc:bf:be:20:ef:89:44:ad:22:
                    ab:97:64:1c:1e:4f:b2:f2:98:40:fb:b4:af:be:1b:
                    f7:a8:b5:93:dd:15:51:b7:e1:ec:01:e9:f3:cf:fa:
                    78:ab:13:39:11:97:e4:68:ad:13:ac:71:e3:41:e8:
                    31:58:1d:cc:e5:51:97:96:62:aa:08:9d:54:e9:56:
                    6b:d5:18:27:b3:2b:a2:91:45:78:5e:71:e4:52:b0:
                    53:b3:7b:1b:d4:54:5c:99:c4:93:da:66:12:b0:15:
                    76:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:85:9E:30:C1:5B:AC:41:6F:29:65:B9:B2:CB:D0:F8:CB:5C:3E:4C
            X509v3 Authority Key Identifier:
                keyid:F9:76:CD:82:4C:8D:19:3A:1D:DC:32:22:2B:9C:E1:F6:19:15:2F:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/F976CD824C8D193A1DDC32222B9CE1F619152F24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F976CD824C8D193A1DDC32222B9CE1F619152F24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/323830343a323536343a3a2f33322d3438203d3e20323634323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2564::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:19:1a:aa:42:8e:56:9a:ad:6a:8c:6e:eb:03:d9:79:57:97:
         e7:a4:38:0e:72:9e:3e:e6:a5:80:0b:e9:03:11:c4:3e:8d:4e:
         a5:d2:eb:5a:eb:c5:01:dc:18:67:15:3a:35:b7:77:77:b2:42:
         5a:12:e6:d2:d4:34:ed:f2:47:14:61:b6:b2:2e:54:00:23:f6:
         92:68:98:19:ca:cb:d6:7e:b0:25:f6:d1:0f:92:20:af:9e:34:
         51:1b:82:e8:f6:fe:5e:a6:61:f9:31:e2:cb:be:6c:c7:ab:3f:
         c4:e6:18:12:c0:d6:2b:41:41:50:35:8c:33:83:b5:34:f0:5e:
         14:f8:d6:bd:ee:cf:bc:a7:40:11:7b:19:78:e4:14:8c:10:e8:
         65:45:c4:9f:f0:d2:6f:d1:57:c7:c6:c7:b4:b7:98:b2:c9:be:
         0d:9d:5d:66:c3:e7:39:bf:63:c4:fb:cd:79:89:f7:01:c7:44:
         5a:dd:b4:9f:2b:bd:08:68:9a:96:e9:85:4f:a8:75:92:91:3c:
         66:15:e2:2d:b3:4c:fb:6c:94:15:a0:ab:b4:5f:62:7a:d0:15:
         9d:32:fa:f4:7c:5f:57:82:08:f9:6b:bf:a0:19:70:e6:15:b0:
         29:54:52:f2:52:e2:d1:c9:77:32:c8:ec:b9:60:55:07:22:0d:
         60:c4:9b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 07:44:34 2026 by rpki-client