Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/323830343a366163383a3a2f33322d3438203d3e20323730333538.roa
File:                     323830343a366163383a3a2f33322d3438203d3e20323730333538.roa (raw, json)
Hash identifier:          fGDb3CWkacAUyzWcLaZGwqRDOncl4hitb8P3Q/FDzCQ=
Subject key identifier:   F7:A3:B6:06:73:6B:3C:84:09:F8:D5:0A:FF:E5:F9:0E:EC:60:21:76
Certificate issuer:       /CN=0083068954DCDE91B36D8D1C1017BF1FEDF3AB00
Certificate serial:       27EF5D5B4E32C07324188C17F1DFD639360037BD
Authority key identifier: 00:83:06:89:54:DC:DE:91:B3:6D:8D:1C:10:17:BF:1F:ED:F3:AB:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0083068954DCDE91B36D8D1C1017BF1FEDF3AB00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/323830343a366163383a3a2f33322d3438203d3e20323730333538.roa
Signing time:             Thu 09 Apr 2026 19:49:00 +0000
ROA not before:           Thu 09 Apr 2026 19:44:00 +0000
ROA not after:            Thu 08 Apr 2027 19:49:00 +0000
asID:                     270358
IP address blocks:        2804:6ac8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/0083068954DCDE91B36D8D1C1017BF1FEDF3AB00.crl
                          rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/0083068954DCDE91B36D8D1C1017BF1FEDF3AB00.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0083068954DCDE91B36D8D1C1017BF1FEDF3AB00.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 Apr 2026 06:47:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ef:5d:5b:4e:32:c0:73:24:18:8c:17:f1:df:d6:39:36:00:37:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0083068954DCDE91B36D8D1C1017BF1FEDF3AB00
        Validity
            Not Before: Apr  9 19:44:00 2026 GMT
            Not After : Apr  8 19:49:00 2027 GMT
        Subject: CN=F7A3B606736B3C8409F8D50AFFE5F90EEC602176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:da:df:24:bd:a1:8e:80:2a:a9:5f:eb:98:cc:
                    a0:4e:d9:9e:80:fe:0f:4d:48:b7:96:83:92:ee:a3:
                    41:7e:fc:64:b4:97:43:da:17:99:34:82:7b:f0:6e:
                    28:ea:af:ab:01:ae:23:bb:32:fa:e9:ec:ec:a4:ba:
                    3a:f3:38:4f:24:a5:0e:c1:62:02:36:a4:ea:da:a5:
                    c1:aa:c5:fe:f6:8f:f8:d0:16:0e:87:37:78:3b:22:
                    c6:b7:4c:17:50:ab:3a:b4:af:3f:03:5a:d6:da:b8:
                    40:7e:5d:ad:71:04:e2:e8:c9:f9:72:5a:28:f1:c0:
                    73:8b:59:0d:11:f4:69:ad:5a:82:19:fa:86:70:8a:
                    18:ed:61:74:6e:d3:98:cb:24:bc:1e:83:7e:f5:9a:
                    f3:69:50:93:8e:55:fc:68:69:24:8b:12:cc:a5:e0:
                    ac:3c:1c:95:a1:6f:fc:b8:61:a7:2d:70:c2:2f:90:
                    07:9a:df:a2:ec:b2:4f:ad:dd:fc:0b:cc:e1:7c:bc:
                    67:40:82:df:d8:39:ee:6d:df:a1:4d:fa:48:5c:fa:
                    85:c6:4a:92:04:fe:0c:21:d2:60:12:37:d6:bc:42:
                    7b:d3:aa:6e:7a:ed:55:d0:80:4e:e1:72:59:6e:ee:
                    69:1c:65:4d:aa:d2:57:ad:4b:de:50:18:b4:51:0c:
                    a7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A3:B6:06:73:6B:3C:84:09:F8:D5:0A:FF:E5:F9:0E:EC:60:21:76
            X509v3 Authority Key Identifier:
                keyid:00:83:06:89:54:DC:DE:91:B3:6D:8D:1C:10:17:BF:1F:ED:F3:AB:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/0083068954DCDE91B36D8D1C1017BF1FEDF3AB00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0083068954DCDE91B36D8D1C1017BF1FEDF3AB00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/323830343a366163383a3a2f33322d3438203d3e20323730333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ac8::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:18:69:cd:ef:f3:27:c6:d7:40:fb:1d:52:20:41:8d:16:04:
         5e:a1:67:55:b7:66:fb:0c:23:30:a6:8a:ca:8b:5f:c6:a5:0a:
         6d:95:f1:4f:46:09:3c:f7:13:a8:e9:c7:0e:ac:75:e6:22:00:
         2b:aa:72:d3:48:57:5b:d6:d2:66:8d:ad:4f:d6:33:54:50:2f:
         86:28:7d:82:ce:0b:8e:89:21:46:23:65:05:91:a9:01:14:03:
         d1:d2:ea:7f:a7:40:80:9f:4c:8b:99:32:72:77:76:60:5b:42:
         0f:c6:d2:83:d6:94:7e:e3:e7:4d:73:48:0e:19:19:d7:93:67:
         09:ef:89:0b:f0:6c:01:19:7c:07:7f:4c:5d:f2:00:a4:70:fd:
         a5:73:03:83:05:20:90:6d:c6:a5:55:6a:40:b1:2d:aa:fb:66:
         48:37:77:1f:a1:ce:db:bd:e5:ac:98:62:8b:58:16:5d:52:67:
         d0:8c:d0:24:6a:bc:d7:70:5c:77:68:48:9c:d7:17:0d:72:6b:
         2d:fa:e2:30:9a:48:ce:94:ea:63:87:a3:0f:32:a2:de:dc:21:
         94:b0:7c:71:3f:59:f2:75:d5:64:e4:c0:09:c8:77:31:a4:b6:
         94:96:a0:28:23:de:56:4c:7b:42:99:16:7b:40:fb:b5:04:41:
         43:db:19:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 12 21:18:35 2026 by rpki-client