Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/323830343a6138343a656530303a3a2f34302d3430203d3e20323632323936.roa
File:                     323830343a6138343a656530303a3a2f34302d3430203d3e20323632323936.roa (raw, json)
Hash identifier:          mDcMDQwTPA78ifZvoKvdqDlYTjvnUzJGnZaSV+0DLCo=
Subject key identifier:   AA:1A:C5:6C:58:EB:3E:2E:35:17:5C:B0:F7:3D:9C:A5:9A:35:0F:82
Certificate issuer:       /CN=45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8
Certificate serial:       33EF0FE5D43D8362586230E324DE657A5C32ED2D
Authority key identifier: 45:EA:42:90:9E:CD:9A:80:74:9A:F8:9F:D7:AC:8F:53:15:E5:FF:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/323830343a6138343a656530303a3a2f34302d3430203d3e20323632323936.roa
Signing time:             Mon 13 Apr 2026 15:44:40 +0000
ROA not before:           Mon 13 Apr 2026 15:39:40 +0000
ROA not after:            Mon 12 Apr 2027 15:44:40 +0000
asID:                     262296
IP address blocks:        2804:a84:ee00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 09:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ef:0f:e5:d4:3d:83:62:58:62:30:e3:24:de:65:7a:5c:32:ed:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8
        Validity
            Not Before: Apr 13 15:39:40 2026 GMT
            Not After : Apr 12 15:44:40 2027 GMT
        Subject: CN=AA1AC56C58EB3E2E35175CB0F73D9CA59A350F82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ce:fa:60:f8:00:5c:a1:b7:23:f2:7a:05:35:
                    73:3c:71:f9:f2:64:bb:77:75:2e:71:e6:9e:b3:52:
                    5a:a5:f6:e5:c6:58:2d:77:49:87:9a:aa:a5:fe:6b:
                    eb:3a:2e:0a:9a:88:04:46:9d:4e:9e:b1:cf:42:04:
                    16:45:5b:54:a0:a3:9f:46:43:35:17:8d:43:e5:1d:
                    60:f4:7c:64:15:cc:e3:82:2c:f9:a5:c6:7e:b9:ac:
                    2b:b5:07:58:e1:4b:29:1c:34:47:f6:9e:41:dc:e1:
                    2a:c8:fd:64:2e:57:04:bc:f6:08:05:5e:47:ad:26:
                    30:4e:37:30:6a:18:76:48:14:ac:05:41:8f:19:68:
                    93:a6:4d:56:a4:4c:b5:7b:98:8a:e8:76:2e:8f:af:
                    ba:ed:e1:cf:49:57:44:8a:28:b8:2d:d2:1a:33:21:
                    62:b2:60:fe:a1:3a:cf:94:65:02:de:e0:95:bf:06:
                    53:7c:0c:a4:47:a6:9e:7b:e8:42:de:b9:d1:c4:04:
                    9d:ae:ac:4f:1e:92:75:aa:ac:93:b6:6a:8b:42:ca:
                    31:0c:93:ff:16:8f:85:68:0b:d4:78:77:b2:14:1a:
                    49:24:8a:a0:11:ef:81:9c:01:e7:83:16:41:32:c2:
                    d4:8b:65:8b:85:99:e7:c7:4c:f2:a4:a8:fd:21:bf:
                    b3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:1A:C5:6C:58:EB:3E:2E:35:17:5C:B0:F7:3D:9C:A5:9A:35:0F:82
            X509v3 Authority Key Identifier:
                keyid:45:EA:42:90:9E:CD:9A:80:74:9A:F8:9F:D7:AC:8F:53:15:E5:FF:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/323830343a6138343a656530303a3a2f34302d3430203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a84:ee00::/40

    Signature Algorithm: sha256WithRSAEncryption
         61:de:f7:34:4b:6d:86:b6:3b:7d:95:1c:49:c3:62:1f:1a:73:
         b7:20:90:cf:69:5b:0c:fb:f5:47:bf:26:73:48:46:f5:d4:d9:
         67:e7:ab:35:80:ea:02:58:42:1a:f9:b3:f4:f4:45:2d:24:8f:
         f9:54:91:8f:ab:b1:2b:9b:b1:60:54:15:18:2a:f8:70:bc:d2:
         15:e1:50:05:f9:5c:fd:56:14:08:6d:da:48:71:bc:8d:11:a9:
         c0:7e:b7:d1:27:e9:d9:a7:56:89:d7:55:d6:f4:2c:50:6f:31:
         23:19:68:54:8a:b9:25:88:e3:19:31:46:6a:ad:9a:42:99:04:
         b6:ea:1d:5f:72:1c:5b:f1:38:98:e1:7f:d2:c9:4b:c0:86:1a:
         56:40:b1:48:6f:a5:17:e9:46:53:98:77:11:3c:57:4b:ce:b6:
         db:98:59:ea:fd:14:55:63:e0:c4:f5:6b:98:66:cb:50:e5:1a:
         78:c6:96:41:8c:83:9f:51:2e:9c:ab:4b:6b:3c:9e:34:07:10:
         39:3e:ac:cf:b1:ec:df:60:49:a4:3c:60:a7:03:8b:0c:93:5e:
         77:7c:4d:ec:9e:39:48:ca:2f:c3:d5:2e:9d:41:fe:0c:c1:88:
         b0:ab:4d:db:c3:4f:49:3b:3a:a3:ce:7d:10:33:43:7b:6a:6e:
         52:5b:8d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:20:23 2026 by rpki-client