Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A47562jLkxiUfy2SLRSVaFEsNei8Zj1LjoDXdNtJ1Z3F/0/323830343a336362303a3a2f33322d313238203d3e20323636323239.roa
File:                     323830343a336362303a3a2f33322d313238203d3e20323636323239.roa (raw, json)
Hash identifier:          m1X7wDb02eEm57hJV7PveSQrZFS22vlEffOpfa2pGxo=
Subject key identifier:   85:15:AC:11:97:2A:C0:F5:BE:60:BD:C4:B9:EC:CF:35:50:A1:CD:9C
Certificate issuer:       /CN=B6789ACD4DF939B25C41666FED49EE048FEEFAA8
Certificate serial:       4613EE36E9F2DCA3A09D9E9CF59673B5F2A7A750
Authority key identifier: B6:78:9A:CD:4D:F9:39:B2:5C:41:66:6F:ED:49:EE:04:8F:EE:FA:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6789ACD4DF939B25C41666FED49EE048FEEFAA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A47562jLkxiUfy2SLRSVaFEsNei8Zj1LjoDXdNtJ1Z3F/0/323830343a336362303a3a2f33322d313238203d3e20323636323239.roa
Signing time:             Mon 06 Apr 2026 16:50:15 +0000
ROA not before:           Mon 06 Apr 2026 16:45:15 +0000
ROA not after:            Mon 05 Apr 2027 16:50:15 +0000
asID:                     266229
IP address blocks:        2804:3cb0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A47562jLkxiUfy2SLRSVaFEsNei8Zj1LjoDXdNtJ1Z3F/0/B6789ACD4DF939B25C41666FED49EE048FEEFAA8.crl
                          rsync://rpki-repo.registro.br/repo/A47562jLkxiUfy2SLRSVaFEsNei8Zj1LjoDXdNtJ1Z3F/0/B6789ACD4DF939B25C41666FED49EE048FEEFAA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6789ACD4DF939B25C41666FED49EE048FEEFAA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 09:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:13:ee:36:e9:f2:dc:a3:a0:9d:9e:9c:f5:96:73:b5:f2:a7:a7:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6789ACD4DF939B25C41666FED49EE048FEEFAA8
        Validity
            Not Before: Apr  6 16:45:15 2026 GMT
            Not After : Apr  5 16:50:15 2027 GMT
        Subject: CN=8515AC11972AC0F5BE60BDC4B9ECCF3550A1CD9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:94:ca:54:a0:3e:b1:bf:94:b3:6f:d7:57:36:
                    b2:67:4a:fc:3b:9b:f8:27:75:b4:2e:a6:cb:dd:37:
                    dc:9e:27:b8:d6:60:30:19:41:18:25:7b:23:bf:04:
                    1a:e0:5f:5b:e9:81:f3:73:de:d8:df:6a:aa:7f:59:
                    1e:21:c8:c8:14:e5:f8:93:60:cd:ad:ea:13:c0:49:
                    4e:98:62:f9:d3:85:76:bf:5f:ac:cb:3b:8a:aa:9f:
                    4c:41:61:7f:5b:e5:a0:9a:33:2a:90:a1:a2:64:a8:
                    ff:9a:da:7e:e9:e4:16:80:a7:f4:d2:b5:fb:6e:26:
                    4e:a8:eb:bb:86:fb:d7:91:95:de:6f:f9:a2:f3:fc:
                    ce:c4:a1:3b:f3:b9:bb:ef:42:6d:9b:f4:73:59:36:
                    96:5d:e3:97:07:7f:a0:94:41:0c:28:bf:ac:7e:94:
                    8f:a1:8c:6e:28:f0:c0:3f:2d:cd:f5:46:70:97:9e:
                    81:89:d3:60:0a:8c:b0:61:55:f6:91:25:f5:c7:3c:
                    e9:7c:e4:cd:19:f8:1d:d1:3a:3f:a2:82:18:10:7a:
                    41:4b:87:1a:f0:68:44:ad:cf:0c:a2:08:5b:59:64:
                    ca:73:07:b6:0a:a8:8d:fe:1d:5c:c5:2f:36:c0:74:
                    18:43:c0:0a:4f:74:d0:86:d2:22:c8:8b:5c:96:2d:
                    7f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:15:AC:11:97:2A:C0:F5:BE:60:BD:C4:B9:EC:CF:35:50:A1:CD:9C
            X509v3 Authority Key Identifier:
                keyid:B6:78:9A:CD:4D:F9:39:B2:5C:41:66:6F:ED:49:EE:04:8F:EE:FA:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A47562jLkxiUfy2SLRSVaFEsNei8Zj1LjoDXdNtJ1Z3F/0/B6789ACD4DF939B25C41666FED49EE048FEEFAA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6789ACD4DF939B25C41666FED49EE048FEEFAA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A47562jLkxiUfy2SLRSVaFEsNei8Zj1LjoDXdNtJ1Z3F/0/323830343a336362303a3a2f33322d313238203d3e20323636323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3cb0::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:6a:0c:44:16:db:81:0c:c4:b7:c6:12:34:48:61:42:dd:bd:
         35:be:de:0d:2c:57:d0:6e:0b:e5:7e:21:b5:dc:dc:1f:6f:24:
         e0:fb:00:22:b9:40:ec:48:85:9d:a3:d4:d4:28:22:8f:63:f7:
         ef:79:00:89:d9:2b:35:11:53:8d:48:f2:20:95:2f:7f:7d:86:
         e3:1b:0f:51:a8:98:ba:20:a9:51:36:05:11:14:4f:f1:4d:f4:
         19:78:55:c1:0c:ff:08:fc:a2:fa:26:1c:04:a2:36:46:18:a4:
         ea:01:96:ee:9e:a0:0e:71:00:9b:38:17:df:91:4c:ec:dd:01:
         e5:8e:9e:4f:f8:85:1f:7a:3a:14:e0:44:18:fd:e8:7f:e2:94:
         69:0d:72:99:08:f5:f7:fe:71:ea:e5:64:af:d8:59:f1:0e:a4:
         04:c5:68:9c:2b:b6:72:ed:40:f5:b4:fb:78:66:d1:27:aa:7e:
         ca:28:70:2e:69:34:5a:28:94:18:14:7f:e7:31:f7:2f:31:53:
         47:3a:a4:4f:03:44:af:60:34:89:5b:0e:31:a3:94:f1:9f:a6:
         b3:fc:82:7d:e1:17:1e:4e:f6:0d:fc:69:9f:36:75:44:7f:f1:
         e3:ef:90:78:77:9a:1a:b4:21:a3:b8:94:98:95:5c:1f:62:8e:
         62:d8:fd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 15:51:14 2026 by rpki-client