Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/0/323830343a373133633a3a2f33322d3438203d3e20323730373736.roa
File:                     323830343a373133633a3a2f33322d3438203d3e20323730373736.roa (raw, json)
Hash identifier:          N+lZz7eK8sUK3gYzd/0nDzjFHD0FwIX08aVqDMwtnnI=
Subject key identifier:   C9:0D:0A:B2:4B:EC:60:43:50:39:29:8F:89:1E:E1:FD:B5:CC:1C:A4
Certificate issuer:       /CN=74D7F5F1399FDCFE62A54C39418AF9C1527A5306
Certificate serial:       7791152C2621BD560BD22A4E7457EC94700F0345
Authority key identifier: 74:D7:F5:F1:39:9F:DC:FE:62:A5:4C:39:41:8A:F9:C1:52:7A:53:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74D7F5F1399FDCFE62A54C39418AF9C1527A5306.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/0/323830343a373133633a3a2f33322d3438203d3e20323730373736.roa
Signing time:             Thu 21 May 2026 11:31:16 +0000
ROA not before:           Thu 21 May 2026 11:26:16 +0000
ROA not after:            Thu 20 May 2027 11:31:16 +0000
asID:                     270776
IP address blocks:        2804:713c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/0/74D7F5F1399FDCFE62A54C39418AF9C1527A5306.crl
                          rsync://rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/0/74D7F5F1399FDCFE62A54C39418AF9C1527A5306.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74D7F5F1399FDCFE62A54C39418AF9C1527A5306.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 11:37:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:91:15:2c:26:21:bd:56:0b:d2:2a:4e:74:57:ec:94:70:0f:03:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74D7F5F1399FDCFE62A54C39418AF9C1527A5306
        Validity
            Not Before: May 21 11:26:16 2026 GMT
            Not After : May 20 11:31:16 2027 GMT
        Subject: CN=C90D0AB24BEC60435039298F891EE1FDB5CC1CA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:01:76:68:09:da:fd:87:23:84:dd:09:c8:22:
                    b3:26:e6:de:23:a7:d9:78:e1:0d:30:55:d9:7e:7d:
                    dc:f6:b3:97:44:99:70:d8:05:11:97:ae:38:f5:09:
                    43:1f:e3:e9:46:07:bc:89:18:93:00:64:10:1c:55:
                    1e:4d:2a:d5:3c:54:4b:40:15:80:74:33:75:cf:e9:
                    b6:8c:e1:57:ff:99:ef:c3:2d:47:3a:45:a7:7a:ff:
                    1f:97:c6:b4:e1:96:c8:32:79:68:6e:e3:3b:d8:e1:
                    06:6c:80:71:91:4b:28:74:a8:a2:87:3d:b7:d5:16:
                    1e:68:f3:30:ee:1e:12:6c:cf:1c:24:74:1d:ef:43:
                    30:1a:4f:d6:18:25:27:5c:11:a4:29:95:3b:b2:fd:
                    50:77:91:9f:2c:70:d6:3f:b6:ba:9b:11:5f:f4:10:
                    69:30:d4:bc:c2:41:ce:ab:b3:3f:62:14:8b:72:ac:
                    e7:04:a6:25:86:21:94:98:cb:04:54:ac:84:2e:40:
                    32:08:58:02:b7:fd:c7:0b:5d:22:5b:38:7b:c1:1c:
                    57:97:e9:e8:d7:06:44:b8:cd:ab:62:f0:8a:9a:3b:
                    bc:84:43:44:34:bb:8a:65:d5:ce:39:13:e8:dc:2d:
                    e4:e1:4a:c9:e8:7c:68:0a:fd:5c:b8:b1:fd:cd:b4:
                    3b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0D:0A:B2:4B:EC:60:43:50:39:29:8F:89:1E:E1:FD:B5:CC:1C:A4
            X509v3 Authority Key Identifier:
                keyid:74:D7:F5:F1:39:9F:DC:FE:62:A5:4C:39:41:8A:F9:C1:52:7A:53:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/0/74D7F5F1399FDCFE62A54C39418AF9C1527A5306.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74D7F5F1399FDCFE62A54C39418AF9C1527A5306.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/0/323830343a373133633a3a2f33322d3438203d3e20323730373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:713c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:69:77:73:f1:67:92:00:1c:25:c9:77:0a:c8:53:45:fe:3d:
         a1:cd:5a:c0:e7:b1:58:0a:f7:f5:42:f9:44:fe:d5:af:81:d9:
         9b:a3:50:ab:e4:f0:1f:6b:e5:e0:52:54:c9:49:b6:16:ee:d2:
         2d:87:8c:34:bb:63:b2:58:e5:0a:fb:41:b9:8a:10:4e:8d:31:
         e4:80:10:79:34:8d:35:1b:93:2b:11:c6:c8:ce:c1:44:b7:6e:
         16:22:44:74:25:94:7b:84:aa:3e:ce:d8:62:7f:9d:ba:06:7e:
         9a:c3:b1:a3:96:e3:83:40:6b:b0:a2:d5:e3:1e:00:f3:6e:9b:
         a8:90:bf:33:3c:ef:4f:80:bf:c4:06:8f:a4:d7:e8:2d:13:87:
         8b:a0:de:3a:51:66:59:80:41:c9:3d:5c:a1:9e:bc:46:ec:a7:
         99:88:d8:84:d1:94:48:5b:de:44:bf:dd:23:ef:31:60:b6:e7:
         35:1f:be:ad:65:72:a5:f5:6b:d0:4d:31:3e:f8:9a:8b:04:c6:
         51:74:7f:6f:02:ca:fb:34:4a:ec:60:af:bd:d9:77:07:39:3e:
         de:09:6c:1c:8d:d3:d8:66:68:40:63:12:11:f0:f1:d4:fe:ac:
         1a:b9:4f:67:2b:ff:17:4e:3f:11:62:72:86:a8:4c:6d:fe:0e:
         1d:45:bf:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:42:18 2026 by rpki-client