Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/323830343a323262303a3a2f33322d3438203d3e20323634313136.roa
File:                     323830343a323262303a3a2f33322d3438203d3e20323634313136.roa (raw, json)
Hash identifier:          1Akt4t93alEmTHO4HtN7BuSGQqTzCbwB1EnYW4OK+fw=
Subject key identifier:   33:9F:4C:BA:66:76:13:73:47:B0:98:A1:B1:62:EF:17:CB:6B:56:76
Certificate issuer:       /CN=22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB
Certificate serial:       51F958FA34321444E0BAD968ACA42A869D6FC9B6
Authority key identifier: 22:DE:B3:D2:A1:4F:98:97:27:53:CA:F8:B7:BC:5C:5E:20:27:F7:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/323830343a323262303a3a2f33322d3438203d3e20323634313136.roa
Signing time:             Wed 01 Apr 2026 14:48:21 +0000
ROA not before:           Wed 01 Apr 2026 14:43:21 +0000
ROA not after:            Wed 31 Mar 2027 14:48:21 +0000
asID:                     264116
IP address blocks:        2804:22b0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.crl
                          rsync://rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 23:36:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f9:58:fa:34:32:14:44:e0:ba:d9:68:ac:a4:2a:86:9d:6f:c9:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB
        Validity
            Not Before: Apr  1 14:43:21 2026 GMT
            Not After : Mar 31 14:48:21 2027 GMT
        Subject: CN=339F4CBA6676137347B098A1B162EF17CB6B5676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:20:54:d6:e6:e1:e2:a2:f8:e9:c6:b7:e1:6c:
                    c5:94:2c:ad:f9:82:28:49:7e:0c:4d:81:28:3f:47:
                    4a:76:bc:ae:98:3a:18:62:3d:a7:ca:19:00:fd:77:
                    ee:dc:18:6b:7f:a1:95:80:df:f2:cc:bd:5b:61:93:
                    bb:b5:a9:85:fc:92:87:63:3d:7a:53:e7:4e:72:31:
                    ad:55:12:83:2d:e4:99:a6:14:06:66:33:f7:9c:fa:
                    ff:25:61:17:b6:16:c0:45:d5:b9:0c:5e:6b:d1:1e:
                    a7:6d:18:9e:37:36:b3:a0:da:5a:58:70:85:23:e0:
                    a3:f2:19:69:19:65:2a:f4:48:f4:19:1f:cd:b1:e0:
                    7b:98:50:75:e8:89:28:d7:9a:85:da:d6:81:91:73:
                    99:67:15:f4:11:7b:4e:f1:01:8e:f1:00:fe:a5:2f:
                    6c:fb:5b:0f:8b:d9:ee:98:9d:fc:93:9b:89:c6:28:
                    9b:c8:2f:bd:d9:55:c3:70:9e:9b:6f:bf:66:3e:5a:
                    86:df:1d:97:28:9c:3e:43:6e:21:60:75:93:a0:7f:
                    22:3b:89:15:fd:02:30:bb:43:eb:a6:a0:f7:4d:c0:
                    51:32:36:d5:9c:89:a9:b5:0a:52:34:8b:12:58:a8:
                    54:6c:b1:e7:8a:be:47:16:11:b8:40:7e:5d:1a:9c:
                    0e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:9F:4C:BA:66:76:13:73:47:B0:98:A1:B1:62:EF:17:CB:6B:56:76
            X509v3 Authority Key Identifier:
                keyid:22:DE:B3:D2:A1:4F:98:97:27:53:CA:F8:B7:BC:5C:5E:20:27:F7:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/323830343a323262303a3a2f33322d3438203d3e20323634313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:2d:b9:03:ea:53:f8:ea:e1:fb:88:7c:b5:f6:c3:7a:5e:75:
         7b:15:72:06:17:7a:e1:bb:16:38:2b:03:62:ed:49:d3:a3:da:
         b0:f8:1b:f9:de:1c:bc:5c:3b:3f:03:2d:75:e0:64:fb:5c:c3:
         29:a7:07:50:3b:c7:69:05:46:b1:10:cc:07:4c:1b:dc:c3:ca:
         d7:dc:70:c8:7f:d3:a5:d5:54:3a:67:c6:f1:02:c8:b0:83:b3:
         3b:9f:91:f8:32:4f:97:47:46:a6:9e:76:b3:e5:36:ff:c0:96:
         90:fc:5e:2f:a9:67:39:e9:b5:31:03:37:1a:cd:0b:d0:e0:01:
         33:cf:e3:65:8a:f8:c9:7b:54:24:f5:e8:17:21:27:7e:ca:28:
         0c:7e:22:78:51:c6:65:2c:f6:19:47:16:61:3c:a6:fa:ee:9a:
         53:d3:03:9a:d8:1a:13:16:a7:dd:6f:f6:3d:ff:71:98:2e:0a:
         3a:62:49:c2:13:ee:f7:d2:0a:0a:1e:b2:d1:d2:f5:93:1a:8d:
         d3:35:41:b8:36:d4:63:24:c9:84:74:db:30:5e:a3:7e:99:4d:
         b1:73:ab:30:e7:28:74:5b:79:90:6f:4d:02:cf:f0:1a:f0:df:
         3b:2e:39:4f:df:e8:f2:14:47:f3:01:07:3d:8f:0a:17:72:5d:
         0c:36:d2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:50:26 2026 by rpki-client