Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAMSWocuPcqYaidaF4fb1Agcx7zsuy9zc7PC16VSuxyR/0/323830343a346233303a3a2f33322d3438203d3e20323637323839.roa
File:                     323830343a346233303a3a2f33322d3438203d3e20323637323839.roa (raw, json)
Hash identifier:          C42nHklKLHtstsuUF5GS+h6UuhjprWYcV02TiFJJ9oU=
Subject key identifier:   F9:B6:8B:4B:70:A6:D6:A0:00:7D:65:75:4C:AF:CC:CA:FD:7D:1A:BC
Certificate issuer:       /CN=21690242975CC26690E3137226394CCBDBDBCFC8
Certificate serial:       64195C382B7D54570587C0959863C70775302AEC
Authority key identifier: 21:69:02:42:97:5C:C2:66:90:E3:13:72:26:39:4C:CB:DB:DB:CF:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21690242975CC26690E3137226394CCBDBDBCFC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAMSWocuPcqYaidaF4fb1Agcx7zsuy9zc7PC16VSuxyR/0/323830343a346233303a3a2f33322d3438203d3e20323637323839.roa
Signing time:             Tue 24 Feb 2026 20:23:43 +0000
ROA not before:           Tue 24 Feb 2026 20:18:43 +0000
ROA not after:            Tue 23 Feb 2027 20:23:43 +0000
asID:                     267289
IP address blocks:        2804:4b30::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DAMSWocuPcqYaidaF4fb1Agcx7zsuy9zc7PC16VSuxyR/0/21690242975CC26690E3137226394CCBDBDBCFC8.crl
                          rsync://rpki-repo.registro.br/repo/DAMSWocuPcqYaidaF4fb1Agcx7zsuy9zc7PC16VSuxyR/0/21690242975CC26690E3137226394CCBDBDBCFC8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21690242975CC26690E3137226394CCBDBDBCFC8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 02:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:19:5c:38:2b:7d:54:57:05:87:c0:95:98:63:c7:07:75:30:2a:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21690242975CC26690E3137226394CCBDBDBCFC8
        Validity
            Not Before: Feb 24 20:18:43 2026 GMT
            Not After : Feb 23 20:23:43 2027 GMT
        Subject: CN=F9B68B4B70A6D6A0007D65754CAFCCCAFD7D1ABC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9a:3e:8a:3b:37:19:2f:7f:d3:d0:0e:f5:2c:
                    14:3b:27:b9:8a:86:c7:b8:9d:d8:e5:20:ca:54:e8:
                    37:5e:8b:2d:82:79:99:63:b3:1b:b2:03:20:69:c1:
                    74:de:de:94:0d:de:00:2b:ee:08:f2:d1:c9:bf:e5:
                    6f:20:81:a8:17:19:17:07:a8:7b:7a:18:ed:34:c3:
                    e6:46:20:30:ca:c0:65:6e:92:0e:c6:5b:e7:3a:e4:
                    fb:69:4a:cc:49:20:87:89:31:ab:a4:58:74:4c:db:
                    3a:f2:e1:4d:11:18:e3:a6:59:07:96:9f:d7:97:7e:
                    79:79:96:e1:67:6b:a5:bc:a0:e7:38:67:c1:e4:b3:
                    b1:ea:88:47:24:ca:8c:01:a3:a0:63:da:8e:66:5e:
                    36:45:86:16:98:5d:30:4c:91:2d:b1:e1:ce:9a:80:
                    e6:d9:50:6d:87:74:d6:99:2a:96:cf:53:33:c5:cb:
                    10:5d:79:ec:35:ab:3f:65:b6:45:09:12:e6:1a:de:
                    b6:5b:95:c5:17:4a:8b:92:a7:a2:38:71:50:4a:ba:
                    f0:ae:62:af:4e:86:6a:21:a3:84:24:02:0d:3e:a4:
                    9b:87:69:96:8c:d8:b9:af:19:f3:c6:12:55:db:ea:
                    37:43:6b:50:08:fa:61:94:ca:2e:7d:9f:e0:51:b1:
                    ca:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B6:8B:4B:70:A6:D6:A0:00:7D:65:75:4C:AF:CC:CA:FD:7D:1A:BC
            X509v3 Authority Key Identifier:
                keyid:21:69:02:42:97:5C:C2:66:90:E3:13:72:26:39:4C:CB:DB:DB:CF:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAMSWocuPcqYaidaF4fb1Agcx7zsuy9zc7PC16VSuxyR/0/21690242975CC26690E3137226394CCBDBDBCFC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21690242975CC26690E3137226394CCBDBDBCFC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAMSWocuPcqYaidaF4fb1Agcx7zsuy9zc7PC16VSuxyR/0/323830343a346233303a3a2f33322d3438203d3e20323637323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b30::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:e2:7a:99:b2:66:3e:34:16:e7:bb:1b:0a:42:0f:7b:0c:b3:
         df:85:6c:80:ed:68:e3:fc:f7:50:fb:61:8a:a8:e7:42:46:24:
         ed:73:3a:8c:27:90:e0:24:a1:f3:ac:64:b5:43:d7:15:61:54:
         0c:69:38:da:75:1a:b3:ce:22:98:7a:c9:4c:03:38:f1:28:1d:
         c7:79:a2:34:01:2d:e0:70:13:03:41:3a:1e:1e:92:ea:6d:0d:
         89:15:28:7f:73:29:6e:33:71:e8:ed:df:b6:60:52:41:30:cb:
         8c:48:cf:90:36:0d:92:7d:86:ea:09:d8:61:30:7e:ca:9e:dc:
         98:e2:9c:83:e3:4a:0a:cf:45:37:de:96:a1:be:a8:af:af:d9:
         a5:8f:ad:13:11:16:81:39:14:0e:5b:53:23:2a:d2:a3:11:60:
         a1:38:47:69:80:f2:36:6d:09:b7:e0:6a:98:3b:fc:76:0e:e5:
         00:4d:4d:43:0b:41:ee:ed:fe:1b:4a:62:24:b5:6c:c6:42:cc:
         fc:7c:ad:dd:ba:14:94:a4:1f:ad:9a:94:f6:f7:c3:f3:14:18:
         3d:9e:76:21:ec:45:5d:1f:a2:e8:bc:be:81:e4:73:cc:0a:86:
         2e:91:c0:97:c7:a7:c0:8a:39:a0:55:8e:e4:14:2c:92:b4:b5:
         a2:d0:17:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:55:57 2026 by rpki-client