Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9MbnSYu4piBENykZXH8SY6D8Ci2ko36tU1qvaVL9ka8n/0/323830343a386666343a3a2f33322d3332203d3e20323733353234.roa
File:                     323830343a386666343a3a2f33322d3332203d3e20323733353234.roa (raw, json)
Hash identifier:          u+2bDvCuQSt1qqzo9/hpPiFThrOGJfsJ1Nvr2LSyuz8=
Subject key identifier:   DA:F4:C9:22:84:B1:D2:6C:13:4B:31:9A:31:FD:69:1C:63:6B:C9:35
Certificate issuer:       /CN=44FC663CB9A5482DEAEFF5C69188D973E49BDE64
Certificate serial:       4EA2F7A68F1BA84593BE84524E782AD9C88D7598
Authority key identifier: 44:FC:66:3C:B9:A5:48:2D:EA:EF:F5:C6:91:88:D9:73:E4:9B:DE:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44FC663CB9A5482DEAEFF5C69188D973E49BDE64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9MbnSYu4piBENykZXH8SY6D8Ci2ko36tU1qvaVL9ka8n/0/323830343a386666343a3a2f33322d3332203d3e20323733353234.roa
Signing time:             Tue 07 Apr 2026 03:48:33 +0000
ROA not before:           Tue 07 Apr 2026 03:43:33 +0000
ROA not after:            Tue 06 Apr 2027 03:48:33 +0000
asID:                     273524
IP address blocks:        2804:8ff4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9MbnSYu4piBENykZXH8SY6D8Ci2ko36tU1qvaVL9ka8n/0/44FC663CB9A5482DEAEFF5C69188D973E49BDE64.crl
                          rsync://rpki-repo.registro.br/repo/9MbnSYu4piBENykZXH8SY6D8Ci2ko36tU1qvaVL9ka8n/0/44FC663CB9A5482DEAEFF5C69188D973E49BDE64.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44FC663CB9A5482DEAEFF5C69188D973E49BDE64.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 10:49:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:a2:f7:a6:8f:1b:a8:45:93:be:84:52:4e:78:2a:d9:c8:8d:75:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44FC663CB9A5482DEAEFF5C69188D973E49BDE64
        Validity
            Not Before: Apr  7 03:43:33 2026 GMT
            Not After : Apr  6 03:48:33 2027 GMT
        Subject: CN=DAF4C92284B1D26C134B319A31FD691C636BC935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:34:16:a4:b4:1d:cf:21:5c:18:a0:db:57:8a:
                    d7:dc:b6:f9:d5:f4:6e:03:ef:60:3c:5b:3c:26:0e:
                    87:76:10:c8:7b:55:dc:b7:cb:56:80:01:fc:e0:4e:
                    7d:dd:03:2e:c4:6a:6e:ed:c9:3b:23:43:a6:b5:0e:
                    cc:50:ba:48:d8:83:ec:23:6d:70:1f:06:35:a0:29:
                    d4:43:69:43:ee:50:20:a4:eb:08:96:66:53:f6:39:
                    eb:aa:64:a9:3d:98:e6:7c:49:c1:78:e7:78:e8:ae:
                    81:62:7c:87:ee:f2:55:f2:74:fe:09:b9:1f:e7:03:
                    43:d5:a8:32:9f:63:2f:41:ac:2d:87:32:e3:d3:bd:
                    b4:69:c3:54:43:d7:2e:b4:c0:87:d6:8b:7b:90:ec:
                    42:f3:a1:47:21:5f:1b:30:db:c2:3c:01:db:60:46:
                    a4:4a:6d:07:02:38:88:53:76:46:46:1a:dc:2e:e8:
                    1a:c0:c5:eb:66:6b:37:45:fd:aa:cc:17:d5:b5:df:
                    37:68:9a:3e:6a:7e:9f:3f:78:46:c5:3f:ab:f3:98:
                    35:d5:b5:96:4f:83:d4:0c:7c:ec:88:6d:06:35:61:
                    eb:75:38:6e:8e:f8:4f:66:5b:90:ff:92:16:da:a9:
                    66:8c:2a:3a:e0:83:0b:71:b4:0b:23:a1:be:80:09:
                    9a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F4:C9:22:84:B1:D2:6C:13:4B:31:9A:31:FD:69:1C:63:6B:C9:35
            X509v3 Authority Key Identifier:
                keyid:44:FC:66:3C:B9:A5:48:2D:EA:EF:F5:C6:91:88:D9:73:E4:9B:DE:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9MbnSYu4piBENykZXH8SY6D8Ci2ko36tU1qvaVL9ka8n/0/44FC663CB9A5482DEAEFF5C69188D973E49BDE64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44FC663CB9A5482DEAEFF5C69188D973E49BDE64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MbnSYu4piBENykZXH8SY6D8Ci2ko36tU1qvaVL9ka8n/0/323830343a386666343a3a2f33322d3332203d3e20323733353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ff4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:02:55:de:10:03:69:43:fe:c5:cf:46:fd:47:17:3a:45:c4:
         b6:1d:38:02:f9:bf:2b:49:46:69:4a:e8:f8:29:b9:7b:74:d5:
         d2:71:58:ff:b3:88:d0:b9:6d:f4:55:41:6a:d3:47:97:19:4b:
         58:77:1d:4b:bb:20:b7:e7:66:af:76:df:b0:51:53:6d:8c:db:
         ea:40:5d:6c:64:78:b9:3e:8f:1d:b3:33:6c:e7:57:ee:ab:ee:
         ab:34:29:c7:cf:39:fb:81:88:c3:53:ab:54:41:92:cd:78:17:
         47:34:4a:e6:94:23:a5:07:51:0d:32:f5:f5:03:71:7e:fb:31:
         98:5f:d4:d2:d9:56:89:2b:d4:b0:84:1c:7c:6a:44:5c:1c:72:
         95:96:39:df:36:c5:9c:c0:73:9d:80:bc:b2:e2:e3:c9:ab:df:
         bf:9b:92:7c:3e:34:f6:5f:75:a6:0b:9d:53:1f:c0:02:85:a5:
         93:f8:ca:a7:92:e8:60:74:31:d0:90:2b:54:11:0a:e7:7a:d6:
         25:50:ae:8c:e4:55:a4:39:6c:15:c3:e4:53:5c:ae:f4:11:4c:
         7b:33:c8:06:a1:5b:2c:81:81:96:0e:0a:e7:d4:0e:65:cc:2e:
         4f:81:c8:5a:ff:4e:be:8c:bf:3f:65:af:fb:f4:75:e6:63:55:
         a9:0c:5b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 20:34:17 2026 by rpki-client