Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/323830343a326664383a383030303a3a2f33342d3334203d3e20323634393135.roa
File:                     323830343a326664383a383030303a3a2f33342d3334203d3e20323634393135.roa (raw, json)
Hash identifier:          xUbeDcYbgPjUJaUOMTW7O5FilpjrQ0brVMLBRWxLNzE=
Subject key identifier:   43:49:41:CA:39:0A:5C:B6:2E:17:BE:8A:3E:7A:AB:80:83:B6:F9:EB
Certificate issuer:       /CN=97A621E397E2627D02EB77E74594261CF2F5C6EC
Certificate serial:       345AE78E4D89BE1AFDA0F9F041FD1B72BB17C5B9
Authority key identifier: 97:A6:21:E3:97:E2:62:7D:02:EB:77:E7:45:94:26:1C:F2:F5:C6:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97A621E397E2627D02EB77E74594261CF2F5C6EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/323830343a326664383a383030303a3a2f33342d3334203d3e20323634393135.roa
Signing time:             Mon 30 Mar 2026 16:00:44 +0000
ROA not before:           Mon 30 Mar 2026 15:55:44 +0000
ROA not after:            Mon 29 Mar 2027 16:00:44 +0000
asID:                     264915
IP address blocks:        2804:2fd8:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/97A621E397E2627D02EB77E74594261CF2F5C6EC.crl
                          rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/97A621E397E2627D02EB77E74594261CF2F5C6EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97A621E397E2627D02EB77E74594261CF2F5C6EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 05:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:5a:e7:8e:4d:89:be:1a:fd:a0:f9:f0:41:fd:1b:72:bb:17:c5:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97A621E397E2627D02EB77E74594261CF2F5C6EC
        Validity
            Not Before: Mar 30 15:55:44 2026 GMT
            Not After : Mar 29 16:00:44 2027 GMT
        Subject: CN=434941CA390A5CB62E17BE8A3E7AAB8083B6F9EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2c:84:3b:f3:85:20:55:0a:dd:07:1c:50:c5:
                    ec:1c:b1:94:b0:44:b7:17:5c:46:4c:e5:94:0c:50:
                    04:13:e3:8b:73:f0:a6:f9:50:a7:85:b6:5a:fb:da:
                    18:7d:56:d9:19:1f:64:f3:82:f4:68:7d:95:2b:53:
                    84:ae:2c:f4:76:51:74:92:91:68:da:7a:74:1b:b3:
                    c2:5a:d0:4a:85:e1:89:f7:c7:6d:24:f0:1e:11:a1:
                    ea:40:72:a7:4e:69:dc:c9:32:2c:f3:8b:b7:8a:08:
                    86:28:75:f8:96:b7:f9:51:86:78:05:4b:13:cc:03:
                    2f:e4:8a:11:27:cf:6a:07:50:59:9c:5a:67:1c:50:
                    a9:c8:1d:44:07:4f:6e:d7:69:2b:31:0a:61:39:fc:
                    08:cc:d9:f9:81:13:b1:27:f1:b3:03:2e:a6:a3:cf:
                    0f:53:47:c3:e8:c2:ef:fe:0e:e0:64:9c:5c:23:b3:
                    63:4c:fa:6f:5f:d6:3c:77:e8:8d:b2:10:86:9b:ee:
                    18:ef:84:30:3c:b1:10:91:75:c0:49:01:4c:e6:50:
                    d1:9a:c3:9f:91:b6:e2:40:37:d6:f1:96:13:d1:f4:
                    ea:85:db:19:ba:6c:38:c3:d6:57:00:79:a1:15:0d:
                    dc:71:4b:fc:ef:57:10:2d:fe:95:b9:d1:36:ed:97:
                    80:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:49:41:CA:39:0A:5C:B6:2E:17:BE:8A:3E:7A:AB:80:83:B6:F9:EB
            X509v3 Authority Key Identifier:
                keyid:97:A6:21:E3:97:E2:62:7D:02:EB:77:E7:45:94:26:1C:F2:F5:C6:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/97A621E397E2627D02EB77E74594261CF2F5C6EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97A621E397E2627D02EB77E74594261CF2F5C6EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/323830343a326664383a383030303a3a2f33342d3334203d3e20323634393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2fd8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ba:4d:3a:ff:49:26:93:15:3c:ac:c2:99:f3:07:e4:62:82:8b:
         58:87:d9:ef:a7:e1:5c:e6:1f:c3:4d:bd:b0:07:1f:02:7a:81:
         cf:ea:d5:e1:d3:d8:ba:e7:31:53:64:5e:56:70:6e:c3:bc:70:
         89:44:ef:71:90:28:18:fa:cd:98:32:74:e7:fe:44:88:2c:4a:
         21:3a:6b:5a:b2:63:4d:aa:4c:4f:7a:9d:23:ab:0e:05:2e:d4:
         cb:6d:6c:b0:63:61:d5:36:a0:d9:cb:d5:bd:56:cd:27:e7:17:
         34:52:3a:71:57:6c:da:63:26:47:14:1b:4b:a1:cf:25:12:e8:
         45:d1:ff:8f:80:99:35:e4:63:c1:2b:54:7f:83:a5:2c:1e:31:
         4c:50:df:18:7f:db:3f:83:25:3b:4b:4b:ee:f9:fb:24:d5:ac:
         ad:4c:8a:5e:d7:0e:17:72:02:98:90:fc:c1:8b:2b:8d:36:6b:
         a8:a5:69:82:94:0b:ac:95:4f:91:f6:ff:fa:94:01:a1:40:08:
         5b:8c:d0:2f:57:e9:fb:c5:42:77:61:3f:9c:7c:48:f1:7a:fd:
         6e:a2:42:9e:7c:a4:38:9b:b6:a3:a6:d8:ad:1c:89:7b:27:ea:
         f6:f7:ea:8a:85:f8:28:05:98:d7:49:5d:45:1d:99:09:c0:6e:
         4f:9b:1d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:44:39 2026 by rpki-client