Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/323830343a3931303a3830303a3a2f34302d3431203d3e203533303735.roa
File:                     323830343a3931303a3830303a3a2f34302d3431203d3e203533303735.roa (raw, json)
Hash identifier:          XF9yawiWwSScBVIhv6VsZCbmAr2Ks1G5dB0xFiO9L5A=
Subject key identifier:   2D:F6:2C:F9:EB:11:00:AE:9F:26:61:99:78:4E:12:B1:FA:25:A2:03
Certificate issuer:       /CN=AB13EC0D6D610051E770A7056856BDE9A8A2CA21
Certificate serial:       185DAB72AD7993B0A53F21DCD9CF49D8AFA5A117
Authority key identifier: AB:13:EC:0D:6D:61:00:51:E7:70:A7:05:68:56:BD:E9:A8:A2:CA:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/323830343a3931303a3830303a3a2f34302d3431203d3e203533303735.roa
Signing time:             Fri 10 Apr 2026 20:27:13 +0000
ROA not before:           Fri 10 Apr 2026 20:22:13 +0000
ROA not after:            Fri 09 Apr 2027 20:27:13 +0000
asID:                     53075
IP address blocks:        2804:910:800::/40 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.crl
                          rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 09:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:5d:ab:72:ad:79:93:b0:a5:3f:21:dc:d9:cf:49:d8:af:a5:a1:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB13EC0D6D610051E770A7056856BDE9A8A2CA21
        Validity
            Not Before: Apr 10 20:22:13 2026 GMT
            Not After : Apr  9 20:27:13 2027 GMT
        Subject: CN=2DF62CF9EB1100AE9F266199784E12B1FA25A203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5d:a4:3a:d7:e4:0f:77:2f:08:5d:f4:3e:7d:
                    67:67:82:5a:e6:ef:7a:de:07:fc:25:e4:54:4c:16:
                    2f:5f:a4:69:4d:81:fb:a5:2e:c2:33:02:07:91:21:
                    a5:00:50:a7:8e:8d:5b:30:31:b6:24:ee:1c:c0:e9:
                    2c:59:ce:32:ae:e5:cd:b5:ba:cb:0a:2b:b6:02:2c:
                    9b:d4:f3:f1:c6:3e:ab:e1:b7:95:4f:e2:ca:48:68:
                    3f:91:af:a3:8a:b3:50:af:0a:97:62:57:32:e0:7a:
                    06:e5:8b:b8:36:e6:ee:4d:8f:ad:ab:f5:4a:53:18:
                    92:50:f7:ba:4b:4b:88:33:4c:3d:f0:dc:c3:be:b6:
                    e1:bb:f6:30:14:6d:2b:36:3c:9c:e2:37:3e:f0:4a:
                    59:42:13:56:25:49:53:06:4b:74:2c:cd:19:03:b2:
                    a1:39:7b:8f:b6:3b:70:56:6d:e1:ae:6e:ee:48:fc:
                    51:89:e7:b1:28:86:25:d2:24:8a:04:2f:1b:11:ae:
                    f1:38:23:e6:b0:59:21:07:e2:84:19:49:1a:d0:86:
                    82:09:22:39:5c:cd:00:a4:c4:ed:b6:bb:be:82:91:
                    b4:83:0e:3b:69:36:23:23:df:4a:4b:25:83:5b:dc:
                    c4:1d:35:7c:25:2e:e2:91:16:0a:a8:88:d4:0b:86:
                    37:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F6:2C:F9:EB:11:00:AE:9F:26:61:99:78:4E:12:B1:FA:25:A2:03
            X509v3 Authority Key Identifier:
                keyid:AB:13:EC:0D:6D:61:00:51:E7:70:A7:05:68:56:BD:E9:A8:A2:CA:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/323830343a3931303a3830303a3a2f34302d3431203d3e203533303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:910:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         6f:f1:3d:cd:60:5b:96:ba:9b:e2:b7:ba:fe:fa:83:c0:12:a9:
         2c:fd:7c:44:49:91:68:8d:63:03:cb:27:32:9e:04:95:b0:95:
         7a:02:ba:d5:76:82:0b:1a:ad:f6:2e:10:74:4e:d5:ad:78:56:
         f4:b7:49:92:42:d0:79:fe:70:55:24:e9:ee:01:22:88:46:a3:
         eb:a3:04:bd:17:4f:b6:6d:44:ee:4e:c6:c9:1f:7c:1b:ff:cb:
         a7:69:3b:66:c9:b0:37:23:84:d4:8e:45:b2:09:be:be:ff:1f:
         dd:b2:f9:d6:e5:1f:73:7b:a3:03:d2:89:48:b1:dd:03:33:56:
         06:c7:79:27:61:91:89:d7:e8:e3:85:59:d4:b2:14:f9:51:6c:
         a9:77:13:1d:fd:a8:d4:9a:55:41:27:29:fd:05:2f:9f:a4:03:
         b0:cb:77:0d:2f:15:19:0a:79:c7:11:20:a7:cd:c1:be:4c:f0:
         a3:4a:03:9d:81:3c:a0:a3:c8:43:e6:7c:cf:e5:d4:ae:13:10:
         dd:d8:1a:ac:a1:e5:4a:da:f7:70:72:4a:26:21:4f:b0:e5:80:
         af:cc:7c:38:47:b9:8e:86:a1:99:10:2b:98:8f:f3:6a:0c:3d:
         25:cd:3f:39:76:99:a9:09:c7:63:0d:2a:f2:ef:8d:1b:d7:ea:
         0f:12:f0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:06:58 2026 by rpki-client