Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/323830343a3931303a3863303a3a2f34332d3433203d3e203533303735.roa
File:                     323830343a3931303a3863303a3a2f34332d3433203d3e203533303735.roa (raw, json)
Hash identifier:          OCv7eQLFF5/JNoJT/FIKJx3H+C6+XQftEe24WMlvZxY=
Subject key identifier:   D3:E7:DC:FB:BE:0A:DA:81:D6:8A:3F:50:36:35:88:10:FE:FF:0F:96
Certificate issuer:       /CN=AB13EC0D6D610051E770A7056856BDE9A8A2CA21
Certificate serial:       F5307B82C4B4A8B7F96FFE7CF3C23BF181A1FC
Authority key identifier: AB:13:EC:0D:6D:61:00:51:E7:70:A7:05:68:56:BD:E9:A8:A2:CA:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/323830343a3931303a3863303a3a2f34332d3433203d3e203533303735.roa
Signing time:             Sun 12 Apr 2026 00:17:23 +0000
ROA not before:           Sun 12 Apr 2026 00:12:23 +0000
ROA not after:            Sun 11 Apr 2027 00:17:23 +0000
asID:                     53075
IP address blocks:        2804:910:8c0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.crl
                          rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 09:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f5:30:7b:82:c4:b4:a8:b7:f9:6f:fe:7c:f3:c2:3b:f1:81:a1:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB13EC0D6D610051E770A7056856BDE9A8A2CA21
        Validity
            Not Before: Apr 12 00:12:23 2026 GMT
            Not After : Apr 11 00:17:23 2027 GMT
        Subject: CN=D3E7DCFBBE0ADA81D68A3F5036358810FEFF0F96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:26:85:12:02:68:15:df:e9:e5:d3:58:8a:65:
                    81:27:e6:ed:dc:c9:b8:8a:3c:01:b0:0a:1e:fe:53:
                    07:15:5b:21:fe:69:f6:c1:28:97:01:2d:77:1c:53:
                    da:4c:ff:1c:bd:77:e3:f3:cc:55:5e:7a:66:db:a7:
                    e9:b5:f7:e4:64:eb:25:28:b4:c1:e3:85:33:42:05:
                    55:c2:f0:35:ef:2f:b5:4d:2d:36:7e:4f:76:b4:4b:
                    dd:11:c4:07:98:82:df:1f:55:e5:c2:55:2b:e3:cb:
                    6c:8c:61:d0:7a:52:ae:72:da:b3:f2:3a:af:49:b4:
                    a6:73:b7:57:9a:76:4f:0d:b4:24:78:ee:76:e8:45:
                    2c:eb:62:93:fa:3a:0f:02:51:74:a9:3e:20:30:6f:
                    49:a9:81:f8:51:5a:ed:dc:b3:f7:f0:90:53:ff:aa:
                    27:c4:2c:e9:00:de:b2:85:24:e1:f2:97:d5:f1:96:
                    d7:4b:d7:b2:dd:82:94:3f:26:46:89:be:2f:6a:cf:
                    73:89:62:39:e4:39:a2:d5:f6:0f:98:89:80:b9:cc:
                    19:a3:7e:3f:02:d7:88:88:2d:56:e5:78:93:09:c4:
                    f8:9a:98:e2:5e:55:6c:fc:09:7a:f2:e7:a8:e1:3d:
                    9e:5e:98:0c:5b:84:8d:82:94:e8:64:97:e4:74:dd:
                    a8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E7:DC:FB:BE:0A:DA:81:D6:8A:3F:50:36:35:88:10:FE:FF:0F:96
            X509v3 Authority Key Identifier:
                keyid:AB:13:EC:0D:6D:61:00:51:E7:70:A7:05:68:56:BD:E9:A8:A2:CA:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/323830343a3931303a3863303a3a2f34332d3433203d3e203533303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:910:8c0::/43

    Signature Algorithm: sha256WithRSAEncryption
         28:19:0b:1f:f2:35:0c:6a:fb:ef:a7:48:ec:c7:fe:4c:bc:70:
         ca:39:13:a5:c6:cd:15:3b:6f:07:6d:62:42:3a:7f:61:cf:da:
         d8:55:74:54:2e:43:c4:68:9c:a4:1c:5b:27:d2:43:5e:38:49:
         2f:47:d0:f3:4b:52:c8:b5:5c:15:ed:a8:f7:69:13:5c:c9:7d:
         5f:d1:45:67:01:9b:a4:0e:e8:79:31:89:f7:5f:7e:2c:4f:71:
         b9:ff:86:d7:9e:26:83:0f:27:4a:40:8d:13:d2:91:42:88:90:
         90:7b:7e:88:97:25:73:93:71:05:53:0f:b1:59:c7:b3:6d:ae:
         dc:b3:e3:61:13:93:98:01:df:20:c4:4b:d4:c5:f1:1a:5d:e0:
         57:1e:f0:2c:39:e4:43:bd:6c:7b:70:bb:de:93:0b:89:55:dd:
         14:a8:07:9a:58:c4:f8:cf:a8:05:1f:85:9c:cb:97:8c:4f:b4:
         fb:1a:ad:f7:0f:87:6d:e7:dc:4a:2b:ae:c0:b7:01:cd:3c:16:
         d2:dc:50:5c:f8:39:5d:66:e3:ef:10:1b:6d:30:d0:d8:cb:af:
         9a:55:a6:9f:08:99:54:99:7f:d6:34:57:d6:b7:1f:54:e5:1b:
         9c:87:70:71:74:7e:c2:53:4f:ed:ff:a3:c2:3d:e8:1a:d8:dd:
         6b:8f:cd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:06:58 2026 by rpki-client