Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/323830343a366435303a3a2f33332d3333203d3e20323730353234.roa
File:                     323830343a366435303a3a2f33332d3333203d3e20323730353234.roa (raw, json)
Hash identifier:          UjlQzacO6eMu9HtWbhClmTpUVQ6yFrQImn93+zfnplU=
Subject key identifier:   C2:1D:8C:B0:8A:E3:E1:2F:25:BB:98:E4:F0:21:E8:72:A5:25:5F:04
Certificate issuer:       /CN=4582BF5F264D259FE997D22E716C8A5B71A0BB83
Certificate serial:       5414D4EFF7D862D45177A21DF99CCF39578480FE
Authority key identifier: 45:82:BF:5F:26:4D:25:9F:E9:97:D2:2E:71:6C:8A:5B:71:A0:BB:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4582BF5F264D259FE997D22E716C8A5B71A0BB83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/323830343a366435303a3a2f33332d3333203d3e20323730353234.roa
Signing time:             Fri 17 Apr 2026 17:05:31 +0000
ROA not before:           Fri 17 Apr 2026 17:00:31 +0000
ROA not after:            Fri 16 Apr 2027 17:05:31 +0000
asID:                     270524
IP address blocks:        2804:6d50::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/4582BF5F264D259FE997D22E716C8A5B71A0BB83.crl
                          rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/4582BF5F264D259FE997D22E716C8A5B71A0BB83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4582BF5F264D259FE997D22E716C8A5B71A0BB83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 19:27:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:14:d4:ef:f7:d8:62:d4:51:77:a2:1d:f9:9c:cf:39:57:84:80:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4582BF5F264D259FE997D22E716C8A5B71A0BB83
        Validity
            Not Before: Apr 17 17:00:31 2026 GMT
            Not After : Apr 16 17:05:31 2027 GMT
        Subject: CN=C21D8CB08AE3E12F25BB98E4F021E872A5255F04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c7:f0:0f:da:f6:55:14:91:28:b3:62:c7:53:
                    00:9f:d3:f8:e3:05:ec:93:04:75:de:4d:40:18:00:
                    98:5d:6e:1b:e2:9f:95:67:07:1e:89:fe:cf:8c:9a:
                    b6:0a:89:4e:ac:dc:9a:b4:e5:95:3a:e5:fb:fb:d0:
                    83:fb:f7:bd:f6:59:fb:9b:22:f4:4e:83:cf:d2:b2:
                    a4:38:dd:fb:f1:5e:57:67:7a:f7:4f:25:f0:22:72:
                    c1:1a:cb:66:a2:4e:61:94:97:a6:a2:c9:46:1c:dc:
                    c9:d7:6c:fe:1b:e1:7a:a3:d5:77:b3:0a:67:a6:eb:
                    e4:1d:34:5c:ec:79:1d:a5:e5:86:f8:aa:7b:fc:20:
                    d4:67:10:3a:49:2f:7c:3d:45:aa:32:f3:0c:a0:11:
                    78:1a:71:3e:ef:50:d9:95:1c:ab:9a:47:cf:a1:b1:
                    69:df:43:e0:14:5a:38:d7:dc:c7:88:c9:dc:89:92:
                    3c:51:07:86:25:68:a4:74:6f:f1:ff:d1:7f:52:76:
                    14:d5:ee:cd:9f:52:2f:6f:85:62:4c:79:5b:a7:49:
                    ad:47:87:c4:d5:ef:82:db:8c:87:b7:4b:33:ca:d6:
                    c5:7c:a7:ef:0e:0e:1f:a1:0f:37:9f:a6:d6:ba:de:
                    a3:e2:e4:b7:69:cf:3f:2a:74:5a:9d:92:53:b9:df:
                    e1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:1D:8C:B0:8A:E3:E1:2F:25:BB:98:E4:F0:21:E8:72:A5:25:5F:04
            X509v3 Authority Key Identifier:
                keyid:45:82:BF:5F:26:4D:25:9F:E9:97:D2:2E:71:6C:8A:5B:71:A0:BB:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/4582BF5F264D259FE997D22E716C8A5B71A0BB83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4582BF5F264D259FE997D22E716C8A5B71A0BB83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/323830343a366435303a3a2f33332d3333203d3e20323730353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d50::/33

    Signature Algorithm: sha256WithRSAEncryption
         bf:a8:cc:28:37:57:59:f9:68:d1:fd:c3:be:20:f8:7c:c1:ac:
         d6:6a:71:3a:a6:50:a8:49:cd:1a:a2:3e:a6:45:99:d0:8d:57:
         3e:b7:a2:7e:0c:f4:a5:f2:fc:72:a7:79:94:42:73:c0:71:7e:
         38:b0:14:5e:b4:05:3f:fa:c2:39:21:b2:e4:c7:39:b6:8b:3e:
         74:1a:6c:17:9e:4d:06:86:bb:51:13:cd:43:a0:05:16:fa:01:
         81:ef:81:31:95:48:32:1c:c4:7c:cc:5f:18:f4:26:c4:86:46:
         de:e7:25:16:a5:e0:d6:6f:7e:4c:2f:98:1d:57:f5:b1:6b:98:
         ba:95:aa:33:8d:f4:27:d1:c6:d5:7f:56:7e:f8:63:6d:c7:5b:
         b5:1a:73:4f:35:2f:95:44:0e:73:40:be:12:16:ee:24:16:d6:
         7b:0e:76:3e:c4:7a:d7:83:8c:73:5a:0a:52:d9:9a:6f:3d:64:
         68:4a:c6:90:b4:47:be:75:4a:c8:af:64:51:91:e2:08:31:02:
         bb:f3:f1:a4:e0:39:42:7d:23:c9:50:e6:b1:8c:2d:b9:c6:81:
         a9:7c:55:95:6e:9b:6e:e4:57:89:89:8b:79:48:48:42:5c:9b:
         ee:ba:ce:91:8b:dd:e6:b4:f3:7b:77:3b:41:4e:1f:6b:ac:3f:
         c0:ad:20:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:26:26 2026 by rpki-client