Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/323830343a376365303a3a2f33322d3333203d3e20323731353234.roa
File:                     323830343a376365303a3a2f33322d3333203d3e20323731353234.roa (raw, json)
Hash identifier:          +J4rEB3Rt4T2Ln721WDo+oumy/LO2ZS0AjqCXsjrWc4=
Subject key identifier:   0B:F6:42:2A:D3:FA:BE:5E:AE:9E:95:D5:92:DC:4A:5D:74:B3:01:42
Certificate issuer:       /CN=2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647
Certificate serial:       1DACA78221B6AABF5DB2268043C8497BD6E5FFB1
Authority key identifier: 2D:D9:7F:5E:85:D5:A9:57:8E:78:94:0C:FD:5B:AE:DF:B8:2E:06:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/323830343a376365303a3a2f33322d3333203d3e20323731353234.roa
Signing time:             Tue 07 Apr 2026 20:52:43 +0000
ROA not before:           Tue 07 Apr 2026 20:47:43 +0000
ROA not after:            Tue 06 Apr 2027 20:52:43 +0000
asID:                     271524
IP address blocks:        2804:7ce0::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl
                          rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 23:37:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ac:a7:82:21:b6:aa:bf:5d:b2:26:80:43:c8:49:7b:d6:e5:ff:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647
        Validity
            Not Before: Apr  7 20:47:43 2026 GMT
            Not After : Apr  6 20:52:43 2027 GMT
        Subject: CN=0BF6422AD3FABE5EAE9E95D592DC4A5D74B30142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ae:cc:96:c4:41:bc:51:2d:82:e6:da:a5:2b:
                    65:f9:f4:09:c2:cd:61:6d:01:43:08:f5:ac:b8:51:
                    6f:e1:ff:58:f2:dc:46:bc:a4:92:ec:1e:93:56:b6:
                    a2:12:45:b1:a2:06:e4:b2:50:94:f1:9a:47:5b:ac:
                    5e:20:1c:2a:b8:4f:9a:b7:1c:14:10:a2:5c:f1:20:
                    7c:ef:08:55:1b:76:e3:d6:ed:4c:b6:e7:58:8a:b3:
                    37:d6:27:37:b2:54:a3:3a:0b:93:72:e4:e5:9c:26:
                    0b:3a:6c:b9:66:b8:9d:79:e3:98:59:2f:63:d3:e3:
                    c3:bf:4e:b6:f0:66:30:90:69:47:86:85:26:67:99:
                    64:f9:7b:61:ca:27:a3:bc:03:c4:a2:79:10:ae:83:
                    50:90:47:64:2a:37:02:23:24:ab:0d:2c:29:e4:5e:
                    64:60:3f:e2:fd:86:fc:5b:d9:fa:6e:90:a3:68:b4:
                    7e:05:c6:5e:8e:cb:a4:e0:78:df:7d:5d:c5:d7:23:
                    42:ff:3a:6d:d1:80:40:ff:a5:a4:ab:d4:39:5e:bf:
                    0b:a9:d4:c7:07:3d:56:36:6a:91:7e:3b:28:5c:e2:
                    bd:71:48:d6:f2:f8:cf:0a:7a:d2:74:9b:18:50:f5:
                    e2:40:5f:02:bb:34:2a:2e:9e:be:35:da:06:79:5f:
                    38:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F6:42:2A:D3:FA:BE:5E:AE:9E:95:D5:92:DC:4A:5D:74:B3:01:42
            X509v3 Authority Key Identifier:
                keyid:2D:D9:7F:5E:85:D5:A9:57:8E:78:94:0C:FD:5B:AE:DF:B8:2E:06:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/323830343a376365303a3a2f33322d3333203d3e20323731353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:0c:4c:09:08:bd:a5:86:0d:28:0e:98:6e:23:2a:a1:27:d9:
         73:b8:04:98:ef:5d:d6:2a:47:60:4c:0a:2b:a1:d9:5e:bc:ae:
         0e:e3:3b:2a:e1:c9:4c:47:c2:1e:ab:e5:3b:da:3d:44:a4:12:
         85:48:74:91:61:40:b4:98:09:93:33:49:32:04:3b:60:d7:37:
         4e:74:66:87:de:58:86:84:80:93:5d:e6:c4:92:90:9d:ad:50:
         97:94:85:8f:e7:1a:7d:be:0d:bd:97:64:7e:9d:6c:72:62:38:
         99:b7:d1:80:60:08:62:50:93:45:2a:7c:b2:97:a4:ec:cd:34:
         0d:48:f3:8a:0c:12:be:6f:21:80:76:b9:8e:54:d4:23:d0:bb:
         2e:58:6c:88:4c:96:44:f0:dd:31:2f:6e:43:8b:fa:d9:3e:09:
         15:65:f6:39:09:8c:0a:6d:69:18:50:5e:79:cf:d0:5c:f6:13:
         14:f3:85:f6:cd:c2:c0:83:48:85:31:8a:f9:7d:74:ce:57:f9:
         31:9f:5f:cd:b1:68:f5:97:ad:cd:aa:ae:85:84:85:cf:ee:a4:
         bb:01:9c:97:60:9b:ae:48:e6:22:da:15:66:c0:c6:21:c1:29:
         fc:21:98:a5:ad:9c:43:35:8a:4a:8d:e7:bd:d7:a7:b5:d1:1f:
         4f:a9:48:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 15:56:27 2026 by rpki-client