Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/323830343a353431383a3a2f33322d3438203d3e20323638363238.roa
File:                     323830343a353431383a3a2f33322d3438203d3e20323638363238.roa (raw, json)
Hash identifier:          BScz2I5iQT+7rCvWP0qw7jFvdiEXKt6y7lg7OZfYlKo=
Subject key identifier:   A1:D9:F1:C8:84:23:85:AE:5D:05:36:15:4F:D1:CE:15:38:9A:C0:C8
Certificate issuer:       /CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB
Certificate serial:       616A882367F38B2E863DAE1E5196D12385192ED8
Authority key identifier: 2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/323830343a353431383a3a2f33322d3438203d3e20323638363238.roa
Signing time:             Fri 03 Apr 2026 14:14:56 +0000
ROA not before:           Fri 03 Apr 2026 14:09:56 +0000
ROA not after:            Fri 02 Apr 2027 14:14:56 +0000
asID:                     268628
IP address blocks:        2804:5418::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl
                          rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 09:36:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:6a:88:23:67:f3:8b:2e:86:3d:ae:1e:51:96:d1:23:85:19:2e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB
        Validity
            Not Before: Apr  3 14:09:56 2026 GMT
            Not After : Apr  2 14:14:56 2027 GMT
        Subject: CN=A1D9F1C8842385AE5D0536154FD1CE15389AC0C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cb:6e:0d:f0:33:c0:82:b9:dc:06:d4:97:60:
                    25:10:7b:a9:e4:6d:c1:d1:f6:17:5c:06:6d:2f:60:
                    8a:cb:0a:50:39:8f:e0:86:15:bd:45:9a:93:50:7f:
                    00:ba:9c:f1:49:dc:b3:d8:4d:ab:75:a1:37:79:6d:
                    b9:b2:7c:c1:1d:dc:c2:b6:67:59:9d:33:22:37:a0:
                    18:b4:fc:63:fd:6e:3b:81:07:cf:18:28:43:be:19:
                    9a:6b:95:95:70:74:b8:bc:2a:a8:c9:25:4c:fb:ed:
                    de:98:19:6e:22:2a:a1:b3:11:7c:ce:85:5e:8f:bc:
                    dd:ae:e5:b0:83:25:b2:0b:4e:d7:d8:82:79:7d:dd:
                    bd:40:07:49:c6:d2:0a:a5:37:8c:d8:af:63:5b:80:
                    d4:6a:c0:98:1f:f5:2e:67:24:b7:bd:19:a3:04:3b:
                    f8:ba:19:65:b1:a1:e5:60:1b:69:c8:7d:04:e6:69:
                    78:64:34:16:a9:20:e0:6b:e7:14:57:0e:89:6e:5f:
                    6b:24:7b:81:8c:77:b7:30:e9:80:ef:ac:bf:04:6a:
                    8d:df:fc:66:a7:08:dd:fa:00:21:b0:0c:30:a6:35:
                    3b:51:c8:2d:e1:58:2c:b6:0e:0a:42:c2:1e:d5:89:
                    40:51:3a:27:31:f3:8c:83:51:f7:8b:f3:87:14:ea:
                    b6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D9:F1:C8:84:23:85:AE:5D:05:36:15:4F:D1:CE:15:38:9A:C0:C8
            X509v3 Authority Key Identifier:
                keyid:2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/323830343a353431383a3a2f33322d3438203d3e20323638363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5418::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:03:a6:d2:c9:4a:17:12:bd:fa:35:e9:3b:19:1d:88:a7:14:
         be:89:2e:bc:71:cc:f8:15:64:17:95:47:54:c7:93:4f:5f:44:
         4e:bc:68:29:27:30:54:29:96:55:6b:ec:7c:c2:7f:45:2f:c5:
         03:97:f5:d8:85:1d:6d:30:47:e0:d9:46:26:89:ca:5f:aa:81:
         90:38:46:22:4b:cf:ee:66:55:02:d0:fd:3b:46:0a:57:9f:60:
         2f:69:dc:98:b5:a8:d1:8e:7c:ac:2e:83:c0:e2:25:72:43:da:
         78:fc:ff:1b:34:5e:1e:8f:db:12:60:2f:e5:cf:53:7a:05:69:
         45:71:bf:e5:04:2c:9b:dc:92:20:6c:1f:2e:8c:f9:61:c8:a2:
         bd:9f:d9:7b:fc:07:8a:79:43:a0:d7:ec:25:d1:21:65:07:68:
         e3:b8:66:fe:2f:6a:db:fe:1d:f3:f5:ca:0b:4d:a9:88:20:fb:
         0d:db:44:b8:d3:b0:a2:ea:47:c5:a3:d2:8b:40:73:d2:af:04:
         c1:31:be:21:04:e4:b2:a2:5b:56:7f:d5:e1:45:9b:cb:37:c6:
         1c:b8:5b:ed:08:f4:26:65:4b:75:b0:4a:f5:df:1a:2e:b9:e2:
         c4:8f:cf:20:26:2d:b1:70:5e:29:83:d8:59:72:7c:cd:27:4d:
         6a:3c:04:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 13:10:04 2026 by rpki-client