Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QUc4oD4aNborng5G3kuB1umDUeCErLBAPMoGygqEzPB/0/323830343a343430343a3a2f33342d3334203d3e20323637363136.roa
File:                     323830343a343430343a3a2f33342d3334203d3e20323637363136.roa (raw, json)
Hash identifier:          gt2WMH60ib/ZtghDBClLGnsScrR9W0cBHh9Q9wU1klI=
Subject key identifier:   E0:E1:6F:A2:4F:AA:7F:2F:E9:0E:1C:15:7A:94:41:45:92:C1:21:EB
Certificate issuer:       /CN=06AC590B87FF90201CF77F6DCA5E49EDAA1E1037
Certificate serial:       0D5755962A35D823E032981A469A20627BCCFD6B
Authority key identifier: 06:AC:59:0B:87:FF:90:20:1C:F7:7F:6D:CA:5E:49:ED:AA:1E:10:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06AC590B87FF90201CF77F6DCA5E49EDAA1E1037.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QUc4oD4aNborng5G3kuB1umDUeCErLBAPMoGygqEzPB/0/323830343a343430343a3a2f33342d3334203d3e20323637363136.roa
Signing time:             Mon 30 Mar 2026 19:03:25 +0000
ROA not before:           Mon 30 Mar 2026 18:58:25 +0000
ROA not after:            Mon 29 Mar 2027 19:03:25 +0000
asID:                     267616
IP address blocks:        2804:4404::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QUc4oD4aNborng5G3kuB1umDUeCErLBAPMoGygqEzPB/0/06AC590B87FF90201CF77F6DCA5E49EDAA1E1037.crl
                          rsync://rpki-repo.registro.br/repo/9QUc4oD4aNborng5G3kuB1umDUeCErLBAPMoGygqEzPB/0/06AC590B87FF90201CF77F6DCA5E49EDAA1E1037.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06AC590B87FF90201CF77F6DCA5E49EDAA1E1037.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 04:10:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:57:55:96:2a:35:d8:23:e0:32:98:1a:46:9a:20:62:7b:cc:fd:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06AC590B87FF90201CF77F6DCA5E49EDAA1E1037
        Validity
            Not Before: Mar 30 18:58:25 2026 GMT
            Not After : Mar 29 19:03:25 2027 GMT
        Subject: CN=E0E16FA24FAA7F2FE90E1C157A94414592C121EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c9:a5:5c:05:60:98:54:32:b8:3f:59:8b:ca:
                    ef:67:5f:1a:6c:02:83:d0:20:45:fb:0a:13:38:0c:
                    96:ca:90:bf:2d:cf:d3:c5:75:72:00:38:bb:bd:06:
                    9a:ea:06:44:dc:ac:40:16:40:3c:0c:ff:cf:e6:1d:
                    ab:c0:e5:71:8a:22:52:27:83:4d:a9:3c:3c:1a:03:
                    87:03:9b:77:a2:04:76:f1:6c:4d:14:bb:18:3b:70:
                    43:4d:f2:01:3f:b3:0a:31:82:00:41:ff:e2:23:18:
                    2d:e6:be:28:cb:2f:89:b1:ed:3d:ea:b6:7c:0a:4a:
                    4c:04:b2:b8:08:70:a7:c0:39:c9:4e:17:6d:80:0f:
                    6d:df:95:9c:e4:c1:44:56:42:11:e7:06:59:90:42:
                    08:25:6c:d0:81:e2:10:3f:4e:00:af:2f:2d:05:2b:
                    f1:31:2d:09:38:53:e7:60:73:d5:f3:c9:09:23:41:
                    9b:2c:fe:97:fc:38:eb:c2:3d:08:66:35:d0:d4:99:
                    e0:f8:af:46:8e:b0:b1:03:cc:e3:79:90:f0:a1:a3:
                    62:97:c0:0a:51:9e:7f:4b:82:47:78:6f:61:ed:68:
                    9b:cc:c7:db:ef:e0:ec:d5:ca:22:3d:f6:c5:6e:c5:
                    7f:8c:92:f6:eb:a0:95:3d:c8:39:7c:ea:b2:1d:9e:
                    a9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E1:6F:A2:4F:AA:7F:2F:E9:0E:1C:15:7A:94:41:45:92:C1:21:EB
            X509v3 Authority Key Identifier:
                keyid:06:AC:59:0B:87:FF:90:20:1C:F7:7F:6D:CA:5E:49:ED:AA:1E:10:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QUc4oD4aNborng5G3kuB1umDUeCErLBAPMoGygqEzPB/0/06AC590B87FF90201CF77F6DCA5E49EDAA1E1037.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06AC590B87FF90201CF77F6DCA5E49EDAA1E1037.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QUc4oD4aNborng5G3kuB1umDUeCErLBAPMoGygqEzPB/0/323830343a343430343a3a2f33342d3334203d3e20323637363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4404::/34

    Signature Algorithm: sha256WithRSAEncryption
         b3:14:45:bb:5c:78:0e:55:49:5e:fa:09:34:e1:a4:24:1a:0f:
         cd:7b:53:b5:64:0d:fa:7f:7d:7b:c4:8b:03:44:8e:81:8c:06:
         e8:de:29:09:d4:6a:7c:72:03:4d:97:52:0e:a1:cc:53:0a:5a:
         1d:66:27:1a:96:94:56:96:75:71:a8:9c:6e:57:81:66:9b:da:
         cf:5c:8b:02:41:c1:a4:21:b6:5d:8d:14:2f:2e:96:b9:55:fc:
         d3:bc:10:01:ab:4e:12:f7:b7:f7:98:12:06:d0:9f:e8:44:ce:
         af:b1:58:6c:76:a2:be:2c:94:ed:78:ce:dc:9a:3f:12:75:1d:
         71:64:da:36:e1:f9:bc:2e:00:9c:5c:d2:78:20:c3:73:81:fe:
         27:29:c3:8c:f2:8d:b7:ed:55:38:b9:94:18:75:63:cd:cc:8b:
         79:27:3e:d1:15:0e:77:17:75:85:dc:b3:15:04:ff:a5:9f:95:
         3b:9d:eb:41:80:68:eb:8b:e0:ca:cc:3f:b4:78:2f:9b:8b:d2:
         93:d0:31:f1:76:9e:96:19:ee:cb:33:b7:b8:f4:49:15:d9:24:
         04:47:77:e7:fa:59:c8:48:13:4a:76:da:a4:d2:0b:e6:ad:13:
         e2:f8:e5:e0:82:22:1f:c3:f1:92:13:e0:99:82:9f:79:26:02:
         29:49:51:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 19:08:51 2026 by rpki-client