Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/323830343a343163383a383030303a3a2f33332d3333203d3e20323637343536.roa
File:                     323830343a343163383a383030303a3a2f33332d3333203d3e20323637343536.roa (raw, json)
Hash identifier:          ygccDWTC2RU/mvk1DCem32HOqLvRxLbpaJ9tN3vLlNw=
Subject key identifier:   B1:8C:3E:7C:2A:10:6B:05:49:C5:6B:E3:DC:FA:1B:6D:33:DD:86:65
Certificate issuer:       /CN=76E1848CDA572B37FCF5D9FC2F32072BAB9072B2
Certificate serial:       3B03170D467D0712C1F3FE36BC07368E9CE371C1
Authority key identifier: 76:E1:84:8C:DA:57:2B:37:FC:F5:D9:FC:2F:32:07:2B:AB:90:72:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/323830343a343163383a383030303a3a2f33332d3333203d3e20323637343536.roa
Signing time:             Fri 27 Mar 2026 18:58:02 +0000
ROA not before:           Fri 27 Mar 2026 18:53:02 +0000
ROA not after:            Fri 26 Mar 2027 18:58:02 +0000
asID:                     267456
IP address blocks:        2804:41c8:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.crl
                          rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 15:11:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:03:17:0d:46:7d:07:12:c1:f3:fe:36:bc:07:36:8e:9c:e3:71:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76E1848CDA572B37FCF5D9FC2F32072BAB9072B2
        Validity
            Not Before: Mar 27 18:53:02 2026 GMT
            Not After : Mar 26 18:58:02 2027 GMT
        Subject: CN=B18C3E7C2A106B0549C56BE3DCFA1B6D33DD8665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7b:66:e3:82:8c:64:51:6d:1f:0c:3f:9c:96:
                    ff:80:5a:0a:4d:f3:ec:0a:8e:d8:e3:5b:72:2e:93:
                    4e:ad:f2:cd:17:71:d7:94:39:53:3e:ae:34:5a:b4:
                    b6:6d:4e:e1:1d:c3:69:a3:ff:55:c0:06:6e:95:70:
                    ef:89:70:0d:f6:61:f4:09:43:63:98:a7:24:2e:97:
                    a0:87:bf:da:7d:36:c9:51:a7:10:9a:82:92:04:7b:
                    b7:78:ce:3c:3e:1c:24:95:00:58:90:24:2e:3e:af:
                    e0:88:2f:ff:52:8e:85:ad:e9:27:14:ff:8c:d6:e2:
                    01:41:2c:b8:d2:4f:c3:ad:e8:aa:18:ab:d8:57:e8:
                    28:e0:ec:0e:55:bc:d7:14:7b:1b:c5:e9:06:ad:3c:
                    1f:2a:da:c6:f4:54:84:21:83:14:2b:c6:1d:f6:fd:
                    31:43:01:d9:c1:63:37:68:95:86:49:08:ce:42:62:
                    af:78:6d:32:09:95:df:91:1a:ae:3e:d4:2a:1e:02:
                    40:d8:71:da:23:58:3b:99:4f:40:10:ab:2b:a2:58:
                    cb:3d:8f:51:d0:cf:2d:39:09:8a:f0:85:c1:aa:6b:
                    c9:4a:03:85:fc:0d:80:79:c6:67:fe:40:80:08:3a:
                    0e:e0:27:cb:9f:a0:38:63:a7:ba:17:54:5c:1a:b4:
                    14:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8C:3E:7C:2A:10:6B:05:49:C5:6B:E3:DC:FA:1B:6D:33:DD:86:65
            X509v3 Authority Key Identifier:
                keyid:76:E1:84:8C:DA:57:2B:37:FC:F5:D9:FC:2F:32:07:2B:AB:90:72:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/323830343a343163383a383030303a3a2f33332d3333203d3e20323637343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41c8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         b9:4c:2e:d8:5c:b5:d0:da:ae:60:ef:24:91:d2:7c:6e:1b:78:
         a3:73:a4:fc:22:f6:6a:68:7a:c0:17:41:3c:6b:80:95:c1:c2:
         20:15:7a:4b:3b:76:bd:b0:2d:60:b4:77:dc:2d:99:ac:96:88:
         13:eb:89:36:df:fb:9c:7a:3f:3e:8e:49:c1:61:67:44:08:5c:
         36:34:91:ca:52:fc:7d:4e:ad:95:76:7b:c2:9a:19:cf:1d:42:
         f4:79:bf:54:0e:33:72:4a:9c:f2:ca:42:76:ae:47:38:94:74:
         17:43:99:cf:ba:02:63:66:73:64:54:eb:e7:5b:f8:b7:18:cb:
         69:bc:73:6d:7e:9e:09:f2:57:8a:3f:6b:7d:e4:1b:94:c3:eb:
         12:0e:50:98:88:ef:e1:e1:b8:6b:a1:82:8e:94:ea:72:0e:50:
         62:86:35:55:ab:b1:2f:aa:65:37:95:6c:6c:80:b4:10:01:e7:
         e8:ac:9f:9b:c0:3a:6e:c7:0d:d3:03:76:9f:c5:f5:78:25:30:
         23:cb:be:35:11:c0:bf:58:7b:da:85:2c:24:f4:b8:e2:9c:29:
         64:d3:a5:be:f2:55:71:68:03:73:5d:41:72:65:bf:01:be:86:
         43:33:9b:63:cf:e6:0c:30:fd:5f:cc:37:5a:45:f2:79:08:a4:
         50:c3:b4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 18:10:24 2026 by rpki-client