Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a3a2f33392d3339203d3e203532393136.roa
File:                     323830343a326231303a3a2f33392d3339203d3e203532393136.roa (raw, json)
Hash identifier:          8b/hCraUx/MusoZST5SuEyQ1+MU1+TV1clEr5j5vdog=
Subject key identifier:   B3:CD:DC:8B:18:59:63:6F:0B:64:24:F2:D3:F2:C1:0E:4F:18:8E:F0
Certificate issuer:       /CN=1028F93DB730D91DC0091DF98C6F0229EDA69CEE
Certificate serial:       534F4CE2E00D540F39D9046E2CF929658278BE5A
Authority key identifier: 10:28:F9:3D:B7:30:D9:1D:C0:09:1D:F9:8C:6F:02:29:ED:A6:9C:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a3a2f33392d3339203d3e203532393136.roa
Signing time:             Thu 02 Apr 2026 20:54:34 +0000
ROA not before:           Thu 02 Apr 2026 20:49:34 +0000
ROA not after:            Thu 01 Apr 2027 20:54:34 +0000
asID:                     52916
IP address blocks:        2804:2b10::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.crl
                          rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 06:25:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:4f:4c:e2:e0:0d:54:0f:39:d9:04:6e:2c:f9:29:65:82:78:be:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1028F93DB730D91DC0091DF98C6F0229EDA69CEE
        Validity
            Not Before: Apr  2 20:49:34 2026 GMT
            Not After : Apr  1 20:54:34 2027 GMT
        Subject: CN=B3CDDC8B1859636F0B6424F2D3F2C10E4F188EF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:47:b6:55:2f:49:e8:37:39:2f:9e:0a:8e:06:
                    ca:c0:44:fb:41:e5:02:1d:4f:d3:7f:42:c4:df:fa:
                    c3:2f:fd:50:0e:27:71:58:d6:71:b5:29:24:9d:d6:
                    f6:ca:be:79:67:68:40:24:2f:d3:00:41:1a:39:34:
                    e0:0f:71:ff:64:99:23:bf:37:01:d0:fd:67:4c:47:
                    59:48:28:99:f4:63:db:db:da:89:13:0f:76:41:84:
                    7c:6c:36:28:83:b0:ee:0b:d5:39:af:20:5a:a3:8e:
                    cf:ea:a3:0f:f2:50:9b:03:c8:89:3b:a9:54:8a:2b:
                    4a:af:64:a8:46:e7:f3:3d:47:9b:bb:81:a2:c9:85:
                    8b:74:28:05:47:00:c5:36:93:8d:f4:a6:65:3b:c7:
                    f8:b2:a4:28:35:50:ef:8f:59:b4:ec:65:55:cc:ce:
                    a2:a0:4f:4b:94:11:07:92:f5:3a:2b:fc:be:4f:37:
                    b8:39:1c:76:f5:fa:da:b2:6b:b6:62:3b:4d:75:ab:
                    5f:db:33:3e:a4:1e:11:20:5f:0f:2b:64:be:7a:24:
                    42:43:3e:de:d7:fe:a2:f0:be:f2:fc:da:ef:3a:8f:
                    cd:ed:d2:56:f0:20:83:a3:70:7f:7e:1f:a6:f3:35:
                    e8:1a:11:1b:03:7a:f3:6a:ad:a4:d2:a8:e2:16:30:
                    04:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:CD:DC:8B:18:59:63:6F:0B:64:24:F2:D3:F2:C1:0E:4F:18:8E:F0
            X509v3 Authority Key Identifier:
                keyid:10:28:F9:3D:B7:30:D9:1D:C0:09:1D:F9:8C:6F:02:29:ED:A6:9C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a3a2f33392d3339203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b10::/39

    Signature Algorithm: sha256WithRSAEncryption
         48:d4:52:96:87:71:11:f4:ea:1f:8d:ce:1c:6d:e7:6b:ee:5a:
         66:6b:55:c4:25:ae:73:6b:55:12:2b:20:3f:8a:44:64:3c:fb:
         1c:02:e1:1b:83:a6:34:49:ef:1d:ae:34:af:79:b9:1b:14:c9:
         e0:af:2e:90:a7:93:97:b0:dd:80:67:43:1c:f6:29:b6:44:51:
         f8:e2:74:c5:0c:36:d2:6e:ce:d3:69:2d:64:14:cd:9b:44:b2:
         6f:fb:0e:48:b5:85:6f:6e:19:b1:e3:28:69:4f:2e:ac:78:3a:
         3a:d6:98:17:fe:a0:da:fd:e5:bf:ec:00:38:95:a9:45:c9:34:
         f4:cc:8a:c4:5a:88:87:b8:e9:19:96:c6:18:29:c8:2d:5d:97:
         06:d5:7b:e9:2b:73:cc:c2:ad:12:60:22:3c:19:2c:3a:be:9f:
         65:11:da:7e:e4:54:ee:15:02:78:88:8c:bb:45:2c:cf:b6:cc:
         2c:40:f4:32:e5:62:4d:9a:22:20:a2:64:bf:63:cd:3b:0d:47:
         ca:2c:ca:7a:17:e1:7b:f9:17:e3:2a:3f:23:9e:30:77:9a:93:
         7d:0f:58:89:3d:2a:23:f4:ca:4a:12:0e:49:8c:af:6d:12:e6:
         c2:0e:d9:1f:8c:59:2f:2f:ed:61:96:4c:06:a9:71:01:b4:4c:
         dc:ce:19:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 16:42:24 2026 by rpki-client