Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/323830343a313264303a3a2f33362d3336203d3e20323632373036.roa
File:                     323830343a313264303a3a2f33362d3336203d3e20323632373036.roa (raw, json)
Hash identifier:          mQTqMiJf2qQP+9BAgaLIzElxcuRDZ3nCP+Z4ZZjp0L8=
Subject key identifier:   8F:9E:90:60:D4:B5:88:ED:60:8E:A9:B2:F7:0F:AB:F6:25:9C:5D:17
Certificate issuer:       /CN=D7252ED92923FF7276B97F5469069929707F562C
Certificate serial:       739E81E501F97470A1408337031F042508BF98FB
Authority key identifier: D7:25:2E:D9:29:23:FF:72:76:B9:7F:54:69:06:99:29:70:7F:56:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7252ED92923FF7276B97F5469069929707F562C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/323830343a313264303a3a2f33362d3336203d3e20323632373036.roa
Signing time:             Wed 20 May 2026 19:40:42 +0000
ROA not before:           Wed 20 May 2026 19:35:42 +0000
ROA not after:            Wed 19 May 2027 19:40:42 +0000
asID:                     262706
IP address blocks:        2804:12d0::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/D7252ED92923FF7276B97F5469069929707F562C.crl
                          rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/D7252ED92923FF7276B97F5469069929707F562C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7252ED92923FF7276B97F5469069929707F562C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 May 2026 22:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:9e:81:e5:01:f9:74:70:a1:40:83:37:03:1f:04:25:08:bf:98:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7252ED92923FF7276B97F5469069929707F562C
        Validity
            Not Before: May 20 19:35:42 2026 GMT
            Not After : May 19 19:40:42 2027 GMT
        Subject: CN=8F9E9060D4B588ED608EA9B2F70FABF6259C5D17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fc:8c:7f:a1:ec:f6:47:4d:2f:ed:e6:06:ba:
                    66:b3:7a:de:81:8c:9c:a9:85:f4:0a:de:4d:8c:ac:
                    64:45:c3:87:45:8b:75:d3:33:85:72:37:ed:eb:37:
                    7c:1c:56:ff:12:65:b4:cb:19:f8:a0:4a:85:5a:f9:
                    a9:21:d2:f8:bb:67:84:20:ba:da:0b:20:5b:bc:5e:
                    1a:2a:81:76:94:0f:c7:ef:63:80:43:ce:64:92:1b:
                    f3:5d:ce:af:c3:8c:bf:05:38:c3:4c:fe:33:44:40:
                    c2:64:78:cf:73:d7:56:df:e6:eb:3d:16:9b:6c:c3:
                    0d:6e:3e:9d:45:1b:23:b5:ca:f0:29:c7:4a:09:c6:
                    ae:2f:31:b3:4b:74:13:f9:7e:cd:e7:55:69:89:ae:
                    37:c0:e2:a3:3a:a3:b1:ae:38:c5:cc:47:06:71:ad:
                    b0:e4:a1:25:de:b3:1c:f5:aa:ac:61:35:cd:06:94:
                    11:1a:52:2a:a7:4f:eb:8a:d7:cd:75:41:b8:a6:01:
                    8b:1e:00:18:5a:0a:0a:0e:f2:b1:ed:74:20:9f:d8:
                    0b:11:85:ef:21:e0:a5:5b:0b:e7:18:54:bd:f5:ad:
                    54:17:07:be:5f:90:23:7d:79:86:9d:a2:29:c9:6c:
                    57:94:50:ea:55:f7:c3:47:20:e7:96:c0:d8:3d:c2:
                    9f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:9E:90:60:D4:B5:88:ED:60:8E:A9:B2:F7:0F:AB:F6:25:9C:5D:17
            X509v3 Authority Key Identifier:
                keyid:D7:25:2E:D9:29:23:FF:72:76:B9:7F:54:69:06:99:29:70:7F:56:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/D7252ED92923FF7276B97F5469069929707F562C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7252ED92923FF7276B97F5469069929707F562C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/323830343a313264303a3a2f33362d3336203d3e20323632373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12d0::/36

    Signature Algorithm: sha256WithRSAEncryption
         22:0d:6c:48:99:bb:07:71:c5:8c:23:d3:b8:78:30:08:37:18:
         3b:2b:75:dc:ce:da:dc:4e:7a:e8:76:1c:c7:17:2c:52:ce:76:
         2c:18:92:98:1c:d5:52:38:f0:2f:e7:c0:ab:96:77:0b:e5:21:
         2d:5c:d8:6f:bc:a5:ac:a4:6b:23:f2:39:bc:d2:d4:82:70:69:
         0c:32:a1:45:26:a9:a4:3a:8b:84:d6:f2:eb:bf:a5:3e:81:31:
         7c:75:e4:8c:26:aa:79:fb:16:75:60:e0:ab:ae:2d:51:fe:2e:
         da:ac:2c:84:da:be:54:ee:9a:af:aa:fa:9d:87:2f:3e:d2:83:
         33:2a:c7:28:24:9b:a7:83:68:32:88:20:94:0f:0d:35:c6:60:
         fc:7e:d6:c6:e9:87:03:f6:c9:d8:74:69:f8:2f:0e:f7:a2:2d:
         82:c4:1e:90:bc:eb:b3:eb:df:64:af:1e:35:f0:7a:f2:d3:d5:
         f1:d6:dd:5f:cf:16:64:76:8c:a6:c8:9d:10:dc:a7:42:0c:08:
         08:b8:42:e2:7a:0b:b5:bf:e4:91:2b:c1:3b:de:6e:7f:c4:70:
         3a:b9:d6:3a:68:c8:9f:6b:b1:cb:2d:26:38:c5:ce:dd:df:b1:
         98:b1:a8:1a:77:7c:5e:bd:41:33:09:bf:4a:64:e6:0c:da:b2:
         b9:07:81:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:42:14 2026 by rpki-client