Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/323830343a356538343a3a2f33332d3333203d3e20323639303338.roa
File:                     323830343a356538343a3a2f33332d3333203d3e20323639303338.roa (raw, json)
Hash identifier:          pdtktsFXNoKkFpOHCauZb+nl/oDtg96XUcFlIFtEEfM=
Subject key identifier:   EF:CD:08:12:8A:7C:21:D6:07:C4:B0:4D:1E:89:C6:1B:3C:5C:B0:83
Certificate issuer:       /CN=7CF640D40A98BEDEB3FAC955113876C0B04FEE62
Certificate serial:       3E866DD7706B1585226EBC0C95267A04D0327E25
Authority key identifier: 7C:F6:40:D4:0A:98:BE:DE:B3:FA:C9:55:11:38:76:C0:B0:4F:EE:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/323830343a356538343a3a2f33332d3333203d3e20323639303338.roa
Signing time:             Mon 13 Apr 2026 12:03:11 +0000
ROA not before:           Mon 13 Apr 2026 11:58:11 +0000
ROA not after:            Mon 12 Apr 2027 12:03:11 +0000
asID:                     269038
IP address blocks:        2804:5e84::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.crl
                          rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 23:12:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:86:6d:d7:70:6b:15:85:22:6e:bc:0c:95:26:7a:04:d0:32:7e:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CF640D40A98BEDEB3FAC955113876C0B04FEE62
        Validity
            Not Before: Apr 13 11:58:11 2026 GMT
            Not After : Apr 12 12:03:11 2027 GMT
        Subject: CN=EFCD08128A7C21D607C4B04D1E89C61B3C5CB083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:99:b6:6e:d2:e6:a8:cf:d2:dd:92:2d:b1:9c:
                    41:61:5e:a6:aa:46:75:4b:d3:e2:30:56:55:fa:e2:
                    4b:d8:24:1d:6f:09:b3:60:f5:40:b7:4c:07:d6:3b:
                    1b:6e:bd:00:8f:c3:06:19:76:e5:a2:2d:4d:e6:54:
                    70:6a:1f:f7:a5:e6:b3:36:e3:03:b9:1d:bc:5c:19:
                    33:01:54:f9:49:8c:84:43:ba:be:a7:c7:ea:65:bc:
                    e8:5c:9f:c2:32:84:41:9f:1b:c6:26:3f:9c:32:cd:
                    cd:7b:a1:e8:55:e6:46:8e:a9:d1:36:6e:b4:45:1a:
                    d7:72:30:fc:19:2f:29:53:ab:8f:b4:37:90:26:b7:
                    2b:0f:ff:4c:54:1d:3d:b6:13:82:1e:35:08:07:14:
                    12:59:4c:42:be:bc:64:a5:c6:a5:f5:b4:c0:48:d0:
                    58:5e:aa:79:24:6e:5f:6f:45:96:89:21:45:24:3b:
                    bf:21:13:d7:1e:cc:77:a8:54:84:f7:91:3d:ff:f8:
                    8b:ae:03:6e:3d:65:d1:db:42:73:2d:e1:fb:2d:21:
                    08:55:ad:28:cc:24:56:0e:0f:54:16:87:50:84:c3:
                    27:32:01:a8:c4:21:c0:34:d5:b8:85:d6:f2:dc:b4:
                    77:29:4d:3f:89:e8:47:fe:1d:0e:c5:ef:57:e5:59:
                    1a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CD:08:12:8A:7C:21:D6:07:C4:B0:4D:1E:89:C6:1B:3C:5C:B0:83
            X509v3 Authority Key Identifier:
                keyid:7C:F6:40:D4:0A:98:BE:DE:B3:FA:C9:55:11:38:76:C0:B0:4F:EE:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/323830343a356538343a3a2f33332d3333203d3e20323639303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e84::/33

    Signature Algorithm: sha256WithRSAEncryption
         7d:6d:10:fd:a4:d0:fd:07:6f:30:62:b3:89:10:bd:a6:3f:be:
         23:00:a1:b0:66:9e:b3:62:3b:85:dc:3b:1b:32:63:a7:53:5b:
         6e:d1:a0:26:48:92:2b:94:e1:fc:e2:07:2c:3f:ce:18:20:29:
         fe:52:9a:6c:e0:3a:b8:87:70:1e:08:4b:c8:2c:45:b6:cc:77:
         31:24:24:9d:30:4c:23:82:ed:4e:da:b6:dc:50:ca:10:f9:b8:
         c9:dd:87:04:7e:a3:90:70:2c:bd:3c:a9:37:e6:94:4e:ad:b1:
         46:0d:7d:62:02:4d:68:49:87:7c:5a:a8:23:6f:6e:93:7c:60:
         46:45:8e:d3:dd:89:c7:88:e4:df:67:15:98:c4:c5:60:99:b5:
         7e:74:b0:40:b0:1b:75:67:ee:ee:1b:4f:0f:7a:29:f0:cf:8e:
         fd:fc:b4:95:b1:02:78:75:bf:df:ca:f1:5f:93:50:49:db:ad:
         6b:f1:cc:71:5e:1e:5d:d1:fa:a5:c0:bb:0c:3e:fe:0e:8d:1f:
         a2:a5:71:35:2e:29:05:9c:f5:91:67:4f:fa:0a:3c:9e:0d:7d:
         f5:df:af:47:8b:a3:89:ed:e1:4b:ab:90:d0:83:97:5e:f9:cd:
         f9:35:f2:39:b1:9d:56:ae:9a:19:bf:42:e6:1b:ee:b3:99:12:
         07:03:f4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:22:15 2026 by rpki-client