Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a3a2f33322d3536203d3e20323632343539.roa
File:                     323830343a3462303a3a2f33322d3536203d3e20323632343539.roa (raw, json)
Hash identifier:          rRd4nYrRmNUjhRykbtEEJ0oHYxxWt9oWVD9yEy38kcM=
Subject key identifier:   1D:41:5A:A6:F9:14:0B:9C:C5:0A:A2:7D:53:2B:52:BE:0E:5E:A8:FF
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       195FB4F915DD331F6EC3E03D92492AF3A378786D
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a3a2f33322d3536203d3e20323632343539.roa
Signing time:             Fri 17 Apr 2026 21:55:46 +0000
ROA not before:           Fri 17 Apr 2026 21:50:46 +0000
ROA not after:            Fri 16 Apr 2027 21:55:46 +0000
asID:                     262459
IP address blocks:        2804:4b0::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl
                          rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 00:37:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:5f:b4:f9:15:dd:33:1f:6e:c3:e0:3d:92:49:2a:f3:a3:78:78:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: Apr 17 21:50:46 2026 GMT
            Not After : Apr 16 21:55:46 2027 GMT
        Subject: CN=1D415AA6F9140B9CC50AA27D532B52BE0E5EA8FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:12:27:2b:a4:54:8f:69:27:02:45:d9:fa:75:
                    6f:67:2c:c3:8b:f4:b6:5e:0e:b2:63:2e:c5:17:81:
                    57:76:3d:42:5c:82:33:10:3a:ec:42:19:58:c1:79:
                    43:c6:b2:48:4e:a4:f6:ee:81:05:e2:1e:7c:73:fd:
                    14:08:61:1d:61:17:e6:24:be:c5:5a:c6:77:d2:9e:
                    e7:cd:eb:31:eb:79:07:1a:e1:bc:a2:23:91:9c:81:
                    f1:a7:b5:33:c5:bd:64:5b:fe:8e:1b:ed:ec:9c:bf:
                    6c:fc:7f:f2:1e:f1:81:17:b8:85:47:1d:f7:92:76:
                    fd:ff:b1:18:30:75:c6:33:a2:76:55:da:92:33:bc:
                    aa:0e:d9:a0:8e:1f:ce:8d:8d:c9:5c:33:05:f1:5d:
                    87:68:4a:4b:e3:3b:c4:77:b0:e1:99:9a:91:ff:16:
                    4d:9d:f3:8a:f1:f6:58:95:d3:88:25:2a:7f:3d:a2:
                    e0:f0:c5:0d:92:e2:21:14:c6:60:be:41:9b:54:cd:
                    01:98:d4:c1:ac:fe:59:e3:ca:a1:06:09:91:a5:58:
                    55:98:51:54:58:20:f9:85:4f:29:67:87:d6:1a:fe:
                    8a:75:fe:ad:f6:1f:3b:0d:31:ae:22:87:55:52:b7:
                    9c:d5:ae:03:37:63:6c:ee:9d:20:71:6a:6a:fd:38:
                    dd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:41:5A:A6:F9:14:0B:9C:C5:0A:A2:7D:53:2B:52:BE:0E:5E:A8:FF
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a3a2f33322d3536203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:0a:a1:c8:68:96:54:25:6d:00:8b:c1:80:94:b0:65:1d:b6:
         42:bc:60:a0:d3:0e:f0:d7:f3:57:6d:22:52:f7:9d:f9:c7:95:
         25:e6:a3:16:07:e9:b4:9f:eb:5e:b9:e8:35:b6:de:d0:67:7d:
         6f:a2:ee:2f:b8:0f:5e:eb:fd:c1:b8:27:7a:f8:97:bd:b8:9c:
         d9:53:4e:7a:5c:53:ee:3a:db:a6:b5:e5:3a:e7:36:89:2b:39:
         ba:1e:00:a4:81:43:fd:59:f9:50:0a:61:4c:14:ee:61:c7:98:
         7d:73:63:98:5d:52:32:dc:8f:c7:79:97:a4:fc:4a:75:57:eb:
         ca:be:65:ef:e9:68:7a:49:57:cb:0c:66:2b:80:d9:39:04:45:
         78:2a:ff:ff:b4:ec:b9:ef:49:60:b5:bd:e7:5c:10:48:63:6a:
         3b:64:51:7b:87:7c:45:66:e1:e7:d0:39:a1:cc:89:38:13:a4:
         82:f2:36:a3:2a:1a:e2:b3:0b:c1:22:b8:3a:17:60:7f:cf:df:
         87:f5:75:0a:44:07:5d:02:1d:d2:c1:8c:77:f9:ff:5c:56:20:
         89:1c:3f:a1:8f:b9:a5:7c:5c:6f:18:30:6f:61:2c:df:b9:bf:
         64:68:7c:e8:75:8c:9a:e4:a4:c7:7a:05:2c:63:21:39:30:c9:
         9b:2e:92:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:13:45 2026 by rpki-client