Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2i3pNdkQrPYH4cT4Vpn46Yvpaz4tsbhdQ6ozruAFNQxq/0/323830343a363937343a3a2f33322d3334203d3e20323730323731.roa
File:                     323830343a363937343a3a2f33322d3334203d3e20323730323731.roa (raw, json)
Hash identifier:          2qRnafsGX8rSpIK6/MykydIRObuv3/rG8nw41tggKaw=
Subject key identifier:   7D:9F:21:25:E4:6A:24:96:69:D8:72:84:37:78:2C:E7:DE:20:83:3E
Certificate issuer:       /CN=9CAA8BC475F6A2B9405F6E944ABE6AA13AAB39FD
Certificate serial:       0EF729E2244382230CD4711C258D3FC6D973B4B5
Authority key identifier: 9C:AA:8B:C4:75:F6:A2:B9:40:5F:6E:94:4A:BE:6A:A1:3A:AB:39:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CAA8BC475F6A2B9405F6E944ABE6AA13AAB39FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2i3pNdkQrPYH4cT4Vpn46Yvpaz4tsbhdQ6ozruAFNQxq/0/323830343a363937343a3a2f33322d3334203d3e20323730323731.roa
Signing time:             Tue 14 Apr 2026 18:18:18 +0000
ROA not before:           Tue 14 Apr 2026 18:13:18 +0000
ROA not after:            Tue 13 Apr 2027 18:18:18 +0000
asID:                     270271
IP address blocks:        2804:6974::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2i3pNdkQrPYH4cT4Vpn46Yvpaz4tsbhdQ6ozruAFNQxq/0/9CAA8BC475F6A2B9405F6E944ABE6AA13AAB39FD.crl
                          rsync://rpki-repo.registro.br/repo/2i3pNdkQrPYH4cT4Vpn46Yvpaz4tsbhdQ6ozruAFNQxq/0/9CAA8BC475F6A2B9405F6E944ABE6AA13AAB39FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CAA8BC475F6A2B9405F6E944ABE6AA13AAB39FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 20:28:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f7:29:e2:24:43:82:23:0c:d4:71:1c:25:8d:3f:c6:d9:73:b4:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CAA8BC475F6A2B9405F6E944ABE6AA13AAB39FD
        Validity
            Not Before: Apr 14 18:13:18 2026 GMT
            Not After : Apr 13 18:18:18 2027 GMT
        Subject: CN=7D9F2125E46A249669D8728437782CE7DE20833E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:74:04:02:01:8a:91:45:8a:8f:d5:67:da:a4:
                    41:d6:a7:38:00:4c:26:3f:72:b8:38:89:91:40:bf:
                    30:ec:01:2f:2d:a7:72:8d:ec:38:84:e1:b3:96:cc:
                    ed:17:78:5b:b9:3d:5b:f1:51:bb:ff:bf:b5:99:fd:
                    50:16:8a:66:72:47:92:f8:3b:45:ed:04:6f:d0:0f:
                    00:bd:f0:ab:c3:e6:e1:08:96:e1:a5:ff:ec:4e:4c:
                    32:fc:d7:df:4d:cc:f8:a1:16:19:97:22:02:b8:32:
                    ee:db:16:e1:3c:22:a1:62:0a:45:ca:80:25:66:a0:
                    9a:6e:a3:b0:18:c5:ac:f0:32:04:f7:ae:95:50:39:
                    c5:73:d2:95:70:a4:ac:f4:c7:d4:19:34:9d:12:89:
                    d7:94:a2:df:ff:7d:38:0a:89:9f:20:fc:ab:93:c1:
                    a1:1e:48:6b:cd:d3:a0:aa:b6:79:9d:ae:ec:3e:a5:
                    c8:9a:0d:bf:9b:cf:c5:69:2a:96:f7:78:91:db:19:
                    23:c4:8a:9f:c9:80:32:33:b0:bd:45:5b:6d:ca:33:
                    c4:5d:e7:1a:6c:3d:bb:a3:fb:91:a4:47:bd:0b:41:
                    57:77:b1:2e:8d:5a:ed:ba:f1:92:98:17:cb:ce:ce:
                    a6:75:5e:77:f5:c8:ae:3c:86:2e:d3:c0:a5:07:e5:
                    10:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9F:21:25:E4:6A:24:96:69:D8:72:84:37:78:2C:E7:DE:20:83:3E
            X509v3 Authority Key Identifier:
                keyid:9C:AA:8B:C4:75:F6:A2:B9:40:5F:6E:94:4A:BE:6A:A1:3A:AB:39:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2i3pNdkQrPYH4cT4Vpn46Yvpaz4tsbhdQ6ozruAFNQxq/0/9CAA8BC475F6A2B9405F6E944ABE6AA13AAB39FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CAA8BC475F6A2B9405F6E944ABE6AA13AAB39FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2i3pNdkQrPYH4cT4Vpn46Yvpaz4tsbhdQ6ozruAFNQxq/0/323830343a363937343a3a2f33322d3334203d3e20323730323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6974::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:8a:a0:fb:12:93:2b:58:13:ed:06:e5:aa:16:21:99:95:31:
         4d:f7:ea:4c:82:cb:2f:59:19:73:0e:03:3e:52:e6:62:9e:41:
         e0:8c:9b:a7:5c:85:3e:57:26:10:38:a1:29:0e:e9:4c:47:a1:
         bd:b8:c5:dd:f8:3d:c4:79:48:28:09:a7:59:89:7c:7f:af:a1:
         42:5c:7a:60:a5:a4:4e:61:c7:0c:7e:07:47:ef:3c:5e:87:90:
         14:d7:24:e9:1f:76:db:0f:3f:f4:a1:4e:25:38:d5:3d:62:a8:
         d9:ca:65:bd:1b:5f:8e:84:9b:59:1c:91:09:41:6c:52:26:da:
         0f:3a:0c:fa:5e:e6:2a:f4:68:99:90:0a:c5:74:d4:2f:54:72:
         1c:10:33:bc:68:f4:0f:15:1b:cf:00:e3:a1:3d:42:5e:ab:26:
         b4:ff:e5:4a:5a:da:bf:4e:56:5c:39:cb:c3:e8:a6:c9:de:d4:
         1c:7f:11:2a:84:6b:ea:e4:c2:05:67:07:53:6b:77:a0:fa:06:
         08:c0:b5:ab:4f:4d:3f:e7:7e:d5:24:e1:af:2b:b8:57:16:c6:
         27:a2:c9:6b:0b:8e:44:c6:a5:4e:95:28:46:02:76:f3:69:44:
         62:fb:93:2a:dc:59:58:fb:e8:74:b9:08:02:b2:a9:f0:3f:2b:
         d8:68:cd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:07:05 2026 by rpki-client