Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Wjt5N13MdZD16Ebj8kJuqu41qaTymR4WY55PNnz7ntQ/0/323830343a343265343a3a2f33322d313238203d3e20323637353335.roa
File:                     323830343a343265343a3a2f33322d313238203d3e20323637353335.roa (raw, json)
Hash identifier:          Elmp9D9cv5Z81IsNcdFk+6KKQ4Il0n/zUNy6JYWfELw=
Subject key identifier:   31:62:2B:51:09:B1:21:5F:56:B5:A1:83:12:A6:F8:F9:1B:F0:27:D2
Certificate issuer:       /CN=96BD1D118248F01A383BC9530F7DDC4CBBB94C5D
Certificate serial:       1C23EB6E56751239C5E208D421F80E227C2756F3
Authority key identifier: 96:BD:1D:11:82:48:F0:1A:38:3B:C9:53:0F:7D:DC:4C:BB:B9:4C:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96BD1D118248F01A383BC9530F7DDC4CBBB94C5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Wjt5N13MdZD16Ebj8kJuqu41qaTymR4WY55PNnz7ntQ/0/323830343a343265343a3a2f33322d313238203d3e20323637353335.roa
Signing time:             Fri 10 Apr 2026 18:07:14 +0000
ROA not before:           Fri 10 Apr 2026 18:02:14 +0000
ROA not after:            Fri 09 Apr 2027 18:07:14 +0000
asID:                     267535
IP address blocks:        2804:42e4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Wjt5N13MdZD16Ebj8kJuqu41qaTymR4WY55PNnz7ntQ/0/96BD1D118248F01A383BC9530F7DDC4CBBB94C5D.crl
                          rsync://rpki-repo.registro.br/repo/9Wjt5N13MdZD16Ebj8kJuqu41qaTymR4WY55PNnz7ntQ/0/96BD1D118248F01A383BC9530F7DDC4CBBB94C5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96BD1D118248F01A383BC9530F7DDC4CBBB94C5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 12:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:23:eb:6e:56:75:12:39:c5:e2:08:d4:21:f8:0e:22:7c:27:56:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96BD1D118248F01A383BC9530F7DDC4CBBB94C5D
        Validity
            Not Before: Apr 10 18:02:14 2026 GMT
            Not After : Apr  9 18:07:14 2027 GMT
        Subject: CN=31622B5109B1215F56B5A18312A6F8F91BF027D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:43:c8:d2:47:03:fc:d8:37:12:65:a4:7d:25:
                    ae:b4:d3:6b:73:08:0f:bc:90:7b:9f:47:19:4f:0e:
                    53:01:55:2e:9c:6a:3a:bc:43:89:b6:ba:80:c4:f4:
                    6f:07:4c:1b:40:84:17:2b:d9:81:4d:ff:6f:5f:00:
                    2b:e6:a9:85:e5:af:5f:84:2b:d2:76:3b:16:40:11:
                    06:cd:65:39:b7:d3:0c:2d:93:39:b4:7c:16:c7:da:
                    7e:91:9e:ea:8c:05:01:64:d2:28:85:5b:f0:ec:ce:
                    60:7d:01:61:0c:d4:03:e2:77:65:a9:f8:6f:02:4e:
                    fa:67:40:45:77:dc:c0:43:a1:40:78:09:88:c1:ad:
                    d9:b4:8c:42:f4:ba:ab:68:4d:e1:50:b3:52:dd:5d:
                    a3:e8:c2:89:32:07:0b:b3:79:ab:0f:0c:3e:85:e6:
                    61:ef:58:85:3c:f3:45:9e:96:80:82:e1:95:16:5d:
                    06:ea:92:49:9a:70:a6:65:dd:20:d2:33:a8:25:d9:
                    28:0b:31:a9:7a:fc:47:5a:5d:47:37:04:40:7c:c5:
                    5f:7e:d9:39:5b:55:03:91:19:70:8c:83:d5:e4:71:
                    6c:66:65:b6:49:f8:46:3d:a2:1b:41:6d:8d:23:1a:
                    8f:ba:7a:0e:66:99:e2:5d:27:e5:1c:33:d8:80:ac:
                    76:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:62:2B:51:09:B1:21:5F:56:B5:A1:83:12:A6:F8:F9:1B:F0:27:D2
            X509v3 Authority Key Identifier:
                keyid:96:BD:1D:11:82:48:F0:1A:38:3B:C9:53:0F:7D:DC:4C:BB:B9:4C:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Wjt5N13MdZD16Ebj8kJuqu41qaTymR4WY55PNnz7ntQ/0/96BD1D118248F01A383BC9530F7DDC4CBBB94C5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96BD1D118248F01A383BC9530F7DDC4CBBB94C5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Wjt5N13MdZD16Ebj8kJuqu41qaTymR4WY55PNnz7ntQ/0/323830343a343265343a3a2f33322d313238203d3e20323637353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:42e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:98:a5:0c:c0:46:43:dc:03:7d:88:3e:c7:e8:3d:0e:b9:1c:
         5d:fd:30:88:53:76:37:60:58:58:d0:8e:dd:d5:de:d0:be:b0:
         0c:e1:44:53:74:ac:c0:97:d2:71:65:02:3d:4e:00:3b:09:cd:
         fc:d7:b2:3c:c0:48:e5:75:a6:0a:58:34:2d:0b:d7:5a:f8:2e:
         57:b6:6b:88:f2:78:13:68:df:86:18:72:da:7f:e3:f6:da:f4:
         bb:da:9a:20:78:2f:9a:44:61:5d:03:a7:62:52:65:bd:90:24:
         cb:2e:b5:c5:17:fe:18:a9:fe:24:f5:a0:4d:fd:6c:c9:72:0e:
         45:0b:96:60:ca:c3:63:e4:7a:5a:ca:46:47:ca:a8:0b:92:19:
         27:79:7d:c7:5c:e1:16:91:73:8d:d1:0a:26:63:ef:54:dd:95:
         a3:55:5b:08:76:ec:c2:5a:12:04:34:0e:52:a6:74:8f:98:69:
         5b:13:df:39:3b:32:15:6d:74:bc:12:18:6c:f9:b2:56:e3:b6:
         35:20:45:4b:4c:32:9d:d1:be:fd:0b:d9:56:4a:dd:0b:84:2c:
         5c:36:57:7b:03:70:48:a9:19:58:ee:08:9d:94:ff:76:54:39:
         41:c6:6a:8e:99:e5:b0:9d:77:15:00:52:86:d2:9e:c9:b7:07:
         52:91:0d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 11:43:16 2026 by rpki-client