Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a383130303a3a2f34302d3430203d3e20323638303931.roa
File:                     323830343a353764633a383130303a3a2f34302d3430203d3e20323638303931.roa (raw, json)
Hash identifier:          qXPMMV2xeX4pxAFo49hPbPEmIVaAdxkHmEewuslIyYM=
Subject key identifier:   43:81:DF:B7:24:F0:17:40:28:B9:BB:3F:87:FD:EE:49:AC:51:43:8E
Certificate issuer:       /CN=89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C
Certificate serial:       74687EECBC9B72D5D2F7E7FCDE5A2171BE6EBB9A
Authority key identifier: 89:48:9A:8E:2C:AF:2E:A1:6C:1D:AA:6E:07:FB:00:46:3F:4F:78:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a383130303a3a2f34302d3430203d3e20323638303931.roa
Signing time:             Thu 09 Apr 2026 18:53:04 +0000
ROA not before:           Thu 09 Apr 2026 18:48:04 +0000
ROA not after:            Thu 08 Apr 2027 18:53:04 +0000
asID:                     268091
IP address blocks:        2804:57dc:8100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.crl
                          rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 02:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:68:7e:ec:bc:9b:72:d5:d2:f7:e7:fc:de:5a:21:71:be:6e:bb:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C
        Validity
            Not Before: Apr  9 18:48:04 2026 GMT
            Not After : Apr  8 18:53:04 2027 GMT
        Subject: CN=4381DFB724F0174028B9BB3F87FDEE49AC51438E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d6:7e:a1:59:2c:1a:c5:02:25:7d:44:ef:ff:
                    1d:5a:e8:40:54:d7:e4:60:ab:fb:e0:6a:6c:da:15:
                    25:bd:a3:0c:47:96:f0:78:a0:1e:db:1e:85:32:35:
                    2d:7c:71:ee:f9:10:66:1d:e4:2b:b1:1e:d9:d2:cf:
                    e7:39:b8:ed:ef:a0:47:de:bc:95:b5:3b:f1:c5:74:
                    1c:7c:9a:30:bd:2b:09:06:ed:51:83:96:1d:bb:e2:
                    bf:75:09:20:5a:8f:db:9b:84:25:77:db:6c:e9:37:
                    ea:5e:f9:a6:56:c9:cd:88:c7:3e:49:5a:81:e6:7a:
                    e9:b5:31:ec:0b:1b:54:c1:a4:04:f0:a4:0b:1a:cf:
                    03:5a:ec:48:c4:40:b9:88:70:ef:b2:8d:d8:fc:67:
                    85:25:d0:88:79:9c:c3:9f:17:2b:1f:bf:9d:64:7e:
                    cb:67:bc:b2:01:b7:4c:79:e7:02:47:18:3a:19:ce:
                    83:13:7f:7e:b9:a1:05:47:9d:e8:84:47:9c:88:ed:
                    93:93:74:7e:89:86:04:4b:bd:34:ba:6b:dd:b8:63:
                    82:85:43:a8:44:db:e2:b0:17:5a:bc:10:21:ea:e7:
                    43:77:f7:58:73:de:b5:cc:f8:05:ad:4f:d1:b0:1d:
                    21:10:95:83:10:dc:25:6f:f1:ab:1a:53:09:3e:b8:
                    65:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:81:DF:B7:24:F0:17:40:28:B9:BB:3F:87:FD:EE:49:AC:51:43:8E
            X509v3 Authority Key Identifier:
                keyid:89:48:9A:8E:2C:AF:2E:A1:6C:1D:AA:6E:07:FB:00:46:3F:4F:78:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a383130303a3a2f34302d3430203d3e20323638303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57dc:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         cd:45:1d:ee:ad:fc:8b:1c:c8:f2:f6:1a:1e:49:99:cb:03:bf:
         40:98:72:1c:6e:79:da:db:ae:7d:4f:7e:12:dd:d6:0d:bf:2a:
         12:35:f0:a1:97:d5:49:2e:c9:bb:2a:99:0b:77:51:f8:64:9d:
         13:b2:f2:53:7b:94:c7:a4:2e:dc:a2:af:f4:71:49:12:0a:a8:
         2d:02:20:15:4d:73:ed:b8:39:5a:02:2d:6b:7e:0d:a0:af:1f:
         af:ca:a4:4f:2d:a7:da:34:75:3d:58:bc:aa:90:7d:8b:23:1c:
         4d:65:ae:f4:51:f4:6a:30:b3:49:03:13:f1:cf:3d:59:05:b9:
         cb:78:44:7e:24:fa:a4:5e:9b:d5:b0:39:4c:b9:cb:7b:13:38:
         53:87:c1:bd:e0:70:9d:56:af:a1:82:5c:83:88:ea:0b:74:ad:
         6a:a5:4a:38:18:d0:04:94:44:3c:02:08:7b:ec:28:69:80:71:
         0c:2a:b2:20:6a:ac:34:77:d1:87:e8:9f:ee:7a:98:49:55:2e:
         7d:27:f6:16:21:36:69:a5:0c:0c:14:ce:26:f7:88:36:55:c5:
         c5:f1:f5:c8:c1:54:87:49:9a:c3:72:6a:f2:b9:c2:f1:a2:50:
         df:e1:2a:6d:6a:bd:13:cb:17:bd:45:d6:a8:4c:74:e2:17:4c:
         a5:80:cc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:31:42 2026 by rpki-client