Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/323830343a356438303a3a2f33322d313238203d3e20323638393736.roa
File:                     323830343a356438303a3a2f33322d313238203d3e20323638393736.roa (raw, json)
Hash identifier:          bBxU6C+sp2g1GQ302WiH5MTWv72Rp/qpcSEawi3NK4Y=
Subject key identifier:   D8:74:1C:42:52:86:2C:98:23:F3:20:2A:68:43:F2:B6:A6:5C:6D:E3
Certificate issuer:       /CN=81693D2B616AFC0CE814A28BA2622B591A667447
Certificate serial:       17509D032FF77B1ECFBE0B68005785DA78E42800
Authority key identifier: 81:69:3D:2B:61:6A:FC:0C:E8:14:A2:8B:A2:62:2B:59:1A:66:74:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81693D2B616AFC0CE814A28BA2622B591A667447.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/323830343a356438303a3a2f33322d313238203d3e20323638393736.roa
Signing time:             Mon 06 Apr 2026 17:55:23 +0000
ROA not before:           Mon 06 Apr 2026 17:50:23 +0000
ROA not after:            Mon 05 Apr 2027 17:55:23 +0000
asID:                     268976
IP address blocks:        2804:5d80::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/81693D2B616AFC0CE814A28BA2622B591A667447.crl
                          rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/81693D2B616AFC0CE814A28BA2622B591A667447.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81693D2B616AFC0CE814A28BA2622B591A667447.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 Apr 2026 09:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:50:9d:03:2f:f7:7b:1e:cf:be:0b:68:00:57:85:da:78:e4:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81693D2B616AFC0CE814A28BA2622B591A667447
        Validity
            Not Before: Apr  6 17:50:23 2026 GMT
            Not After : Apr  5 17:55:23 2027 GMT
        Subject: CN=D8741C4252862C9823F3202A6843F2B6A65C6DE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:28:b3:29:ee:b9:37:1b:6e:a9:77:65:aa:5c:
                    b3:46:f1:2d:cc:b2:eb:e4:b5:3a:78:3c:3a:ce:b2:
                    4f:41:1b:8c:9c:d0:b3:22:80:06:9c:b7:f1:9f:aa:
                    a2:01:27:39:48:4d:94:9b:c2:cb:c1:e2:e4:c7:7e:
                    88:ac:7b:f0:39:20:c5:d0:f0:f9:35:77:36:32:5b:
                    59:5b:ba:53:b5:76:61:d4:ff:b6:84:ad:f0:13:c4:
                    30:9c:cf:0d:45:68:d9:a3:89:ca:80:52:ae:bb:b4:
                    e8:9f:2a:f0:c2:00:10:4b:29:41:75:33:e5:02:0f:
                    29:43:46:b9:bb:bc:cb:39:bf:82:ec:30:8d:d0:83:
                    48:99:0c:41:0d:bd:e4:97:1d:63:1e:cb:cc:d3:70:
                    2c:d3:ec:52:15:aa:65:f1:01:48:87:8d:7e:ea:15:
                    52:7a:4e:55:8d:0f:66:06:33:a8:73:2c:f8:65:9d:
                    77:90:58:a2:0e:5a:38:00:72:e9:e4:5a:7f:82:af:
                    c8:20:65:52:17:3b:a5:70:97:1c:2e:df:ca:8f:8e:
                    b6:ae:de:f2:00:12:7e:a8:15:d4:9a:69:3e:43:db:
                    44:9d:42:47:d4:f7:87:b9:a2:b7:26:12:12:a5:cf:
                    64:60:84:15:94:c7:d1:69:1e:1a:c6:32:e7:ca:46:
                    af:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:74:1C:42:52:86:2C:98:23:F3:20:2A:68:43:F2:B6:A6:5C:6D:E3
            X509v3 Authority Key Identifier:
                keyid:81:69:3D:2B:61:6A:FC:0C:E8:14:A2:8B:A2:62:2B:59:1A:66:74:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/81693D2B616AFC0CE814A28BA2622B591A667447.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81693D2B616AFC0CE814A28BA2622B591A667447.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/323830343a356438303a3a2f33322d313238203d3e20323638393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:4f:f1:bf:be:b2:30:9b:da:ae:42:67:81:bb:6d:4e:ae:28:
         09:22:7c:77:2c:49:00:5b:e5:e2:44:2c:a5:c9:59:14:49:9e:
         7f:e2:77:5f:0a:d7:28:99:e7:92:fd:f7:6b:6e:02:3b:9d:bb:
         64:ff:38:f5:81:70:18:4b:dc:92:e7:97:3a:f2:0f:8f:cd:ae:
         9e:91:78:eb:da:8b:2d:5b:80:01:38:19:4b:20:88:95:40:63:
         9f:71:8d:92:55:eb:db:13:ec:18:29:eb:db:8d:0d:02:3c:df:
         bc:00:f3:6c:6a:de:72:c1:a4:1f:bc:2b:2a:ac:5d:3a:7c:b8:
         70:ab:e0:c4:17:f9:f1:84:60:55:8c:6f:0e:d7:5b:f9:30:00:
         2a:df:e1:4d:bb:6e:c3:29:d4:9a:85:8a:f2:ec:44:d2:f8:15:
         49:6b:eb:f2:76:3e:93:ea:75:fa:68:db:08:22:cf:01:bb:0f:
         d7:5a:54:3d:fc:d3:07:33:a5:ac:a6:da:c3:17:a1:99:db:15:
         e4:f0:9c:63:3d:0c:e8:fb:a5:eb:04:27:21:02:ee:df:bd:51:
         4d:b8:af:ac:7a:6b:cd:be:da:e4:04:7a:f1:9d:5d:66:09:0d:
         85:3e:c8:35:2a:b6:3d:19:36:44:ef:99:ab:3c:a7:7d:9d:b1:
         dd:9f:a3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 09:19:38 2026 by rpki-client