Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8deUDt1CowYk8CTEDdE97NL1zZW8EUW4yCiBFhB94HYL/0/323830343a326636303a3a2f33322d313238203d3e20323634383837.roa
File:                     323830343a326636303a3a2f33322d313238203d3e20323634383837.roa (raw, json)
Hash identifier:          mtrNd2++IFz4UZEgSq5DmbEx+zRbth9dg/9xI6UzrNs=
Subject key identifier:   67:4A:5C:BC:75:F3:2D:E4:28:D2:1E:5F:8D:82:B3:8D:68:15:95:BC
Certificate issuer:       /CN=201586C3B2FAAB19793753205A59418C57047C4D
Certificate serial:       7553C1B391854C216AA8024CE1780C9E69A4A590
Authority key identifier: 20:15:86:C3:B2:FA:AB:19:79:37:53:20:5A:59:41:8C:57:04:7C:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/201586C3B2FAAB19793753205A59418C57047C4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8deUDt1CowYk8CTEDdE97NL1zZW8EUW4yCiBFhB94HYL/0/323830343a326636303a3a2f33322d313238203d3e20323634383837.roa
Signing time:             Mon 06 Apr 2026 21:17:38 +0000
ROA not before:           Mon 06 Apr 2026 21:12:38 +0000
ROA not after:            Mon 05 Apr 2027 21:17:38 +0000
asID:                     264887
IP address blocks:        2804:2f60::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8deUDt1CowYk8CTEDdE97NL1zZW8EUW4yCiBFhB94HYL/0/201586C3B2FAAB19793753205A59418C57047C4D.crl
                          rsync://rpki-repo.registro.br/repo/8deUDt1CowYk8CTEDdE97NL1zZW8EUW4yCiBFhB94HYL/0/201586C3B2FAAB19793753205A59418C57047C4D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/201586C3B2FAAB19793753205A59418C57047C4D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 06:56:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:53:c1:b3:91:85:4c:21:6a:a8:02:4c:e1:78:0c:9e:69:a4:a5:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=201586C3B2FAAB19793753205A59418C57047C4D
        Validity
            Not Before: Apr  6 21:12:38 2026 GMT
            Not After : Apr  5 21:17:38 2027 GMT
        Subject: CN=674A5CBC75F32DE428D21E5F8D82B38D681595BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0c:c5:bd:41:d2:0e:5b:be:e7:a1:50:32:24:
                    67:7c:4d:2f:f4:80:7a:d0:46:d0:cd:d4:6c:56:f1:
                    c3:87:71:3b:20:89:8a:b7:0f:a8:89:a6:8f:bf:76:
                    81:cb:a7:ba:64:a2:df:ef:e3:c4:63:22:76:46:a4:
                    42:0a:07:a4:d3:0b:12:d3:fd:56:57:83:17:5f:ab:
                    59:ca:7b:38:bc:cd:e1:1a:85:32:96:fd:a3:a4:d5:
                    98:bc:a4:94:dd:20:b8:dd:fd:11:14:39:7e:65:79:
                    78:7b:03:76:2c:bf:a4:ca:cd:05:f9:3a:76:e0:eb:
                    6b:a8:86:d6:eb:d5:db:1d:f7:52:a8:db:0f:49:3c:
                    97:8f:66:0a:e5:21:8b:7c:61:2f:e7:4c:89:9d:9c:
                    15:9c:ef:4d:17:50:cc:2c:0c:c0:e3:56:ca:c6:af:
                    44:9b:0e:41:ee:bc:d9:ba:0f:0e:36:e5:a5:46:7e:
                    d5:0b:59:c9:1b:31:cd:d6:34:ac:b0:33:0d:42:46:
                    7d:84:cb:0a:e6:ef:b2:24:63:a9:0f:aa:e2:9a:f2:
                    52:2c:b1:8b:7c:3d:e1:97:a8:23:92:af:85:61:af:
                    45:22:20:9d:90:b2:6a:56:d3:0f:19:ec:22:b5:2c:
                    54:47:43:4f:3c:ac:c6:e0:6d:6d:1a:dd:2c:a1:b6:
                    13:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4A:5C:BC:75:F3:2D:E4:28:D2:1E:5F:8D:82:B3:8D:68:15:95:BC
            X509v3 Authority Key Identifier:
                keyid:20:15:86:C3:B2:FA:AB:19:79:37:53:20:5A:59:41:8C:57:04:7C:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8deUDt1CowYk8CTEDdE97NL1zZW8EUW4yCiBFhB94HYL/0/201586C3B2FAAB19793753205A59418C57047C4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/201586C3B2FAAB19793753205A59418C57047C4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8deUDt1CowYk8CTEDdE97NL1zZW8EUW4yCiBFhB94HYL/0/323830343a326636303a3a2f33322d313238203d3e20323634383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f60::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:42:34:18:5e:60:0d:bb:d4:c8:20:a2:80:18:81:ef:cf:e7:
         98:43:82:92:ae:f8:e6:e9:5a:09:3f:48:51:7c:a4:d1:40:7f:
         fb:93:9c:00:36:47:62:9d:33:f4:1e:cf:5e:c4:b4:15:30:13:
         1b:04:85:c4:c2:0e:16:ff:0f:f2:fa:01:78:f9:43:1f:19:5c:
         2e:e9:c2:56:1c:93:14:be:f8:c2:9a:19:22:78:0a:1a:2e:6f:
         02:4b:14:ec:17:1d:a2:10:96:68:9a:cc:ef:1e:13:1b:a3:38:
         12:d1:0a:b3:77:7b:29:d5:18:75:87:4b:05:f9:58:9e:d7:3d:
         5c:52:c3:4c:71:8a:80:19:bf:b6:aa:8e:4f:16:a5:f1:a2:53:
         b3:c8:31:6c:e1:22:e6:51:2b:7a:50:ef:ff:9e:06:03:52:77:
         88:e8:87:b0:04:db:62:57:11:d3:73:0b:f6:6a:05:36:a4:1c:
         e5:09:0f:cf:12:ca:8e:d7:1c:23:8d:cd:e2:19:36:86:51:04:
         59:03:26:ff:c0:37:0e:a8:e5:8c:cc:d2:ca:0b:17:02:6d:79:
         2b:8f:cc:4a:e1:e0:3b:f4:1e:10:df:39:e7:4f:c0:4f:b6:ac:
         90:4c:d4:e9:17:ae:e0:db:19:aa:fe:66:e6:01:2c:91:ad:69:
         5e:ac:a4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:44:46 2026 by rpki-client