Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/323830343a353134633a3a2f33332d3333203d3e20323638343434.roa
File:                     323830343a353134633a3a2f33332d3333203d3e20323638343434.roa (raw, json)
Hash identifier:          2DpywoWTtDKYLbm0cHMnxKNf9CYUAaDMbVOjeTYNp6E=
Subject key identifier:   CB:A0:29:BD:C2:0E:C7:73:EC:3C:7A:D7:70:E5:B0:CB:C7:9E:19:C3
Certificate issuer:       /CN=DC4F645F797D2D16DAAC799CE76E8F530B7EFCEA
Certificate serial:       07813CBB55CEC1AFB248A424F9D0CD368039D500
Authority key identifier: DC:4F:64:5F:79:7D:2D:16:DA:AC:79:9C:E7:6E:8F:53:0B:7E:FC:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC4F645F797D2D16DAAC799CE76E8F530B7EFCEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/323830343a353134633a3a2f33332d3333203d3e20323638343434.roa
Signing time:             Wed 08 Apr 2026 13:22:01 +0000
ROA not before:           Wed 08 Apr 2026 13:17:01 +0000
ROA not after:            Wed 07 Apr 2027 13:22:01 +0000
asID:                     268444
IP address blocks:        2804:514c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/DC4F645F797D2D16DAAC799CE76E8F530B7EFCEA.crl
                          rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/DC4F645F797D2D16DAAC799CE76E8F530B7EFCEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC4F645F797D2D16DAAC799CE76E8F530B7EFCEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 16:27:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:81:3c:bb:55:ce:c1:af:b2:48:a4:24:f9:d0:cd:36:80:39:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC4F645F797D2D16DAAC799CE76E8F530B7EFCEA
        Validity
            Not Before: Apr  8 13:17:01 2026 GMT
            Not After : Apr  7 13:22:01 2027 GMT
        Subject: CN=CBA029BDC20EC773EC3C7AD770E5B0CBC79E19C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2a:08:de:70:9a:12:32:37:14:b6:a7:f2:9b:
                    73:48:d1:ce:31:3a:48:05:90:b2:f3:a3:7e:ea:54:
                    f1:a3:f2:39:f1:02:9e:cb:1a:ff:cb:89:58:d1:f8:
                    86:f7:0f:c3:3b:2b:b3:81:7b:14:de:11:17:0c:a5:
                    82:76:6e:72:53:03:37:04:11:e3:84:33:f6:82:2a:
                    ae:8c:8c:25:34:06:fa:53:41:d9:da:74:98:da:41:
                    03:74:e1:98:d4:88:be:ba:66:76:7c:cd:85:28:b2:
                    a1:c4:f6:f5:93:63:3d:14:55:fe:5d:5b:18:83:3e:
                    95:84:2b:6c:29:1f:c6:fb:69:75:43:55:fe:20:bc:
                    19:1a:e1:89:40:13:d7:9e:38:5f:89:d5:cb:bf:0d:
                    b4:73:78:a4:ac:af:a5:ad:be:dd:a5:f9:e4:a0:f3:
                    f5:e5:42:86:0a:77:f0:70:b4:dc:2d:78:95:d1:55:
                    bf:43:11:9a:1c:99:7e:b7:13:6c:c6:c7:84:6f:cf:
                    50:ce:f8:95:c0:37:7c:d4:b8:de:eb:12:87:2e:5a:
                    03:19:d9:93:35:50:9a:fd:28:ee:03:cf:44:e0:40:
                    f6:08:07:48:5f:8b:1c:36:78:b2:19:37:94:55:f3:
                    0f:c9:88:3b:67:fe:f6:e9:9b:16:56:d9:c8:a8:4e:
                    99:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A0:29:BD:C2:0E:C7:73:EC:3C:7A:D7:70:E5:B0:CB:C7:9E:19:C3
            X509v3 Authority Key Identifier:
                keyid:DC:4F:64:5F:79:7D:2D:16:DA:AC:79:9C:E7:6E:8F:53:0B:7E:FC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/DC4F645F797D2D16DAAC799CE76E8F530B7EFCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC4F645F797D2D16DAAC799CE76E8F530B7EFCEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/323830343a353134633a3a2f33332d3333203d3e20323638343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:514c::/33

    Signature Algorithm: sha256WithRSAEncryption
         59:f9:cd:c1:7d:aa:5c:02:88:8d:46:3a:0e:e1:c7:eb:3e:28:
         8d:3c:1e:70:c0:68:ea:53:9d:40:5a:76:2d:b3:87:a3:4c:7e:
         a8:d4:47:cf:6a:0a:56:7d:7c:f4:98:91:9e:45:84:f2:76:5c:
         92:8e:05:e2:30:7a:93:38:8b:bb:f9:41:1d:fa:6f:05:d8:a6:
         e1:11:b9:d0:43:41:6f:67:30:10:54:0d:fd:90:3c:40:80:59:
         83:c2:87:f0:37:4f:c7:89:ef:34:41:6d:b4:7d:b0:a0:39:c0:
         6a:08:6c:2b:18:3b:4b:35:e8:87:11:8e:4b:a0:c2:51:f8:49:
         7c:62:ff:a2:c0:4a:76:f3:a3:89:e4:c6:8f:cd:de:83:de:f6:
         85:e5:2f:8a:27:14:37:37:8f:fe:e4:67:0f:9d:dd:51:20:6d:
         98:75:3a:4b:a3:2e:d8:db:8d:82:b2:d4:c9:b5:ea:f8:12:3f:
         43:1e:eb:a8:eb:90:be:dc:92:c7:3e:8e:58:98:a4:a5:f2:fd:
         17:2c:e5:33:04:02:e1:87:f6:c4:19:1a:f1:31:e5:f1:8b:29:
         e8:5a:78:48:f4:c1:ba:33:c1:eb:f8:86:13:d9:74:40:3f:7d:
         ff:e5:df:b3:eb:f5:0b:f7:f2:68:27:47:54:22:5a:e1:db:91:
         e4:3d:91:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:40:09 2026 by rpki-client