Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/323830343a336132303a3a2f33322d3332203d3e20323636303732.roa
File:                     323830343a336132303a3a2f33322d3332203d3e20323636303732.roa (raw, json)
Hash identifier:          nL2wLy7/WFVbTXYUHExMTYyRJjXGol0mGraV9g+w47U=
Subject key identifier:   E9:8D:82:39:82:F0:07:13:CF:E7:38:CD:F1:04:0A:E2:81:C8:8A:E9
Certificate issuer:       /CN=A4F6CF3EA81A06C7671C0EE07506E011FB81992C
Certificate serial:       30552B30823F49D178161CD6DD0851D332407869
Authority key identifier: A4:F6:CF:3E:A8:1A:06:C7:67:1C:0E:E0:75:06:E0:11:FB:81:99:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4F6CF3EA81A06C7671C0EE07506E011FB81992C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/323830343a336132303a3a2f33322d3332203d3e20323636303732.roa
Signing time:             Tue 28 Apr 2026 12:29:17 +0000
ROA not before:           Tue 28 Apr 2026 12:24:17 +0000
ROA not after:            Tue 27 Apr 2027 12:29:17 +0000
asID:                     266072
IP address blocks:        2804:3a20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/A4F6CF3EA81A06C7671C0EE07506E011FB81992C.crl
                          rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/A4F6CF3EA81A06C7671C0EE07506E011FB81992C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4F6CF3EA81A06C7671C0EE07506E011FB81992C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Oct 2026 13:22:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:55:2b:30:82:3f:49:d1:78:16:1c:d6:dd:08:51:d3:32:40:78:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4F6CF3EA81A06C7671C0EE07506E011FB81992C
        Validity
            Not Before: Apr 28 12:24:17 2026 GMT
            Not After : Apr 27 12:29:17 2027 GMT
        Subject: CN=E98D823982F00713CFE738CDF1040AE281C88AE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:29:73:66:49:33:4f:92:5b:9b:78:f6:70:88:
                    d4:63:dd:99:25:97:a2:0f:08:31:fe:46:41:7c:8b:
                    d0:f8:e7:8e:de:66:dc:7e:98:3e:11:73:7a:3e:5d:
                    10:ce:04:5f:51:32:c8:fb:71:94:33:06:bb:14:8b:
                    59:49:21:77:b3:72:b5:01:db:a3:6e:ea:c9:31:d2:
                    82:93:43:1a:71:6b:37:c9:ac:30:e3:ae:cd:1e:db:
                    1d:14:f6:41:91:0b:af:e9:84:30:e0:68:94:fb:8d:
                    aa:8f:d3:91:35:1f:4a:8d:8c:b3:7b:d0:f9:ba:d8:
                    09:5b:16:d1:a4:63:6d:31:16:79:04:5d:21:6e:27:
                    73:2b:74:72:a8:2c:c4:a8:47:9d:ba:d2:13:78:9a:
                    99:4e:5b:2b:5a:18:40:c8:a9:51:b6:2d:6e:1a:7d:
                    2f:c5:9a:e3:75:e7:d7:39:b5:7a:cc:c2:5d:9b:74:
                    f2:ed:30:b6:45:de:b5:42:6e:31:32:bc:db:e0:84:
                    34:a8:b9:39:4b:72:e2:10:9c:53:0d:e7:51:e8:98:
                    94:66:cc:c1:ee:62:9f:58:bd:a9:56:b3:06:fa:69:
                    6a:ea:1e:75:72:cc:14:a1:37:0a:97:41:09:63:0a:
                    d9:d6:5d:8a:c9:6e:b5:60:ac:6a:fd:89:14:d8:78:
                    9f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:8D:82:39:82:F0:07:13:CF:E7:38:CD:F1:04:0A:E2:81:C8:8A:E9
            X509v3 Authority Key Identifier:
                keyid:A4:F6:CF:3E:A8:1A:06:C7:67:1C:0E:E0:75:06:E0:11:FB:81:99:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/A4F6CF3EA81A06C7671C0EE07506E011FB81992C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4F6CF3EA81A06C7671C0EE07506E011FB81992C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/323830343a336132303a3a2f33322d3332203d3e20323636303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a20::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:29:69:ae:57:ea:40:07:40:55:ce:ea:58:d9:ed:29:3e:6b:
         75:99:45:02:f7:8d:a0:21:07:14:1c:a6:fe:30:18:22:d6:94:
         a2:a1:3e:4c:44:fd:8b:4d:e5:d1:42:e2:14:88:1e:df:5b:a3:
         43:3b:ec:7c:e8:33:6d:16:19:83:00:bd:48:ea:b7:cd:50:bb:
         1e:c9:2c:7c:35:c2:c3:53:e8:60:8e:80:88:f0:1d:d0:cd:cd:
         fb:69:50:20:d4:7e:2c:e5:70:8c:4e:a3:b4:0e:71:c9:64:77:
         c8:3b:af:ad:5f:8b:73:59:98:6d:00:d3:d7:11:22:9d:04:cf:
         01:b2:f4:9a:36:af:3e:3f:7f:ae:e9:f7:34:d3:7f:06:86:4d:
         a2:8f:57:cb:ef:6a:36:67:fc:c5:8c:36:9f:32:bb:6c:a0:71:
         14:75:78:e7:8b:a6:e1:db:61:66:6b:60:a8:29:4a:66:93:5b:
         c4:3c:86:63:4e:3c:9c:00:44:e9:1c:56:bf:19:9a:c8:43:4f:
         51:50:f4:89:b8:81:96:80:bd:55:c6:6c:a3:aa:69:60:27:8c:
         14:ee:4e:46:b0:7d:0c:8f:9f:b3:73:22:c1:71:30:42:cc:f6:
         d5:e2:11:48:31:61:83:ed:af:c7:c3:af:7b:f5:61:2b:2b:68:
         f9:0c:0f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:36:11 2026 by rpki-client