Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/323830343a3664633a3a2f33322d3438203d3e2037303438.roa
File:                     323830343a3664633a3a2f33322d3438203d3e2037303438.roa (raw, json)
Hash identifier:          zPkWi/cNjw/US2GSg+G0/4gEwvQsnJxZxKugt4AEWE0=
Subject key identifier:   B9:73:F1:50:68:87:D3:A5:91:4B:04:E8:17:03:A2:5C:22:E0:B9:B3
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       626331D5786BFD6C69BCE3F2D430D06BB7ADC174
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/323830343a3664633a3a2f33322d3438203d3e2037303438.roa
Signing time:             Mon 13 Apr 2026 13:48:35 +0000
ROA not before:           Mon 13 Apr 2026 13:43:35 +0000
ROA not after:            Mon 12 Apr 2027 13:48:35 +0000
asID:                     7048
IP address blocks:        2804:6dc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 05:41:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:63:31:d5:78:6b:fd:6c:69:bc:e3:f2:d4:30:d0:6b:b7:ad:c1:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: Apr 13 13:43:35 2026 GMT
            Not After : Apr 12 13:48:35 2027 GMT
        Subject: CN=B973F1506887D3A5914B04E81703A25C22E0B9B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a1:9b:02:60:c4:bc:2a:ea:e7:1e:b7:af:82:
                    55:17:0e:fd:90:80:31:58:e5:aa:c9:83:39:ac:7b:
                    16:f8:c7:05:ab:64:e8:5b:7b:88:56:ca:18:2f:a2:
                    cd:d2:b6:5e:4c:d9:2c:bb:c8:c1:fb:0c:08:cd:50:
                    c4:bf:3e:59:50:6c:e5:cf:08:0c:d8:40:fa:2b:9e:
                    e5:3a:8e:93:bf:3b:fd:37:78:f8:98:b3:b9:de:73:
                    2c:21:5c:7c:b9:4c:00:c8:fc:fa:45:2b:dd:c9:41:
                    c4:59:62:43:d7:d6:cb:6a:b5:1d:2a:c8:da:f3:25:
                    74:ba:4c:6a:8c:87:4c:bc:3d:f0:c2:68:af:02:0b:
                    31:f6:41:a1:2b:65:f2:a5:fc:41:bc:b8:e3:c1:6a:
                    8f:1a:e0:28:0e:a8:b2:68:f9:d2:92:28:df:ae:fe:
                    4c:f5:92:4a:a2:58:9d:22:0b:f3:4e:24:ec:af:9f:
                    05:9d:25:e5:17:ad:5f:2c:6c:8a:a0:b2:50:56:4d:
                    e6:98:70:3a:49:b4:30:10:83:95:d7:f4:3b:ba:e9:
                    be:84:65:12:5b:11:03:48:ee:fc:e9:ce:39:db:cd:
                    11:e7:1b:11:d7:95:d0:f7:18:b1:03:e2:23:75:57:
                    ee:15:0d:28:99:7f:13:88:23:a9:18:26:e4:12:a3:
                    9e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:73:F1:50:68:87:D3:A5:91:4B:04:E8:17:03:A2:5C:22:E0:B9:B3
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/323830343a3664633a3a2f33322d3438203d3e2037303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:39:32:31:14:0d:a1:68:71:d9:07:3b:7d:92:9d:a5:99:a9:
         c4:64:15:09:b8:70:34:c5:e6:19:39:54:4e:d1:12:c0:13:45:
         42:10:28:b4:20:31:75:5c:ff:1d:f1:9d:12:52:22:99:f0:7b:
         68:29:30:50:fd:fe:ed:6a:c9:cf:8c:6d:48:2d:37:00:d2:36:
         08:44:a9:b7:9e:95:eb:c0:33:53:c3:20:e0:25:91:cf:dd:18:
         16:b1:f3:54:04:d8:16:6c:61:b6:ae:ba:e2:a0:24:ec:df:ce:
         98:b3:fd:01:0a:a4:c8:81:6e:33:cd:d4:c1:47:52:b8:6f:33:
         f5:b6:7d:7f:73:00:81:12:ac:d8:98:f5:42:97:39:3b:b4:ab:
         e1:7b:52:47:d7:60:5f:f4:87:19:0f:4e:90:a1:b3:d7:ce:b1:
         65:4e:89:d3:65:4b:64:c7:11:de:e1:4e:81:77:7b:a4:55:ca:
         f8:14:c3:59:0a:93:d3:a3:71:f2:fe:60:c1:76:17:d0:f5:d7:
         2c:db:f5:54:7b:9e:7f:53:ce:fc:0e:ac:42:ac:9c:0e:da:a0:
         a4:71:89:ff:12:4a:7f:37:83:c1:e8:90:29:c6:97:cd:c4:29:
         99:6a:ff:59:a3:0d:63:70:03:75:e1:a7:2a:a3:a6:c4:45:1b:
         3a:db:13:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:35:54 2026 by rpki-client