Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/323830343a323836303a3a2f33322d313238203d3e20323633393539.roa
File:                     323830343a323836303a3a2f33322d313238203d3e20323633393539.roa (raw, json)
Hash identifier:          qsb9N9dYEdCtVT35SpCUkRlPOvEp8aAl53ugH+NRURk=
Subject key identifier:   47:99:8A:D9:77:44:92:1A:C5:F0:54:9F:4F:71:1E:47:E6:27:91:FA
Certificate issuer:       /CN=8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F
Certificate serial:       02E39892022C4EE3EA7ED1D11827A1E5F02F6A20
Authority key identifier: 8C:B5:A2:51:6F:71:3C:FF:E9:D1:50:4E:79:A4:BD:3B:9A:FB:0A:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/323830343a323836303a3a2f33322d313238203d3e20323633393539.roa
Signing time:             Mon 13 Apr 2026 15:01:10 +0000
ROA not before:           Mon 13 Apr 2026 14:56:10 +0000
ROA not after:            Mon 12 Apr 2027 15:01:10 +0000
asID:                     263959
IP address blocks:        2804:2860::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl
                          rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 13:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e3:98:92:02:2c:4e:e3:ea:7e:d1:d1:18:27:a1:e5:f0:2f:6a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F
        Validity
            Not Before: Apr 13 14:56:10 2026 GMT
            Not After : Apr 12 15:01:10 2027 GMT
        Subject: CN=47998AD97744921AC5F0549F4F711E47E62791FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:08:92:e9:bf:70:20:cc:9c:23:ac:10:29:5c:
                    81:bc:f2:98:cb:d8:5f:8a:36:70:6c:16:04:5e:c3:
                    d4:82:5d:11:03:e0:b2:72:4f:9c:fe:0b:ab:f2:a0:
                    bf:c6:40:a8:f9:9f:f9:11:25:52:4d:2a:7a:a1:fc:
                    a3:97:71:ee:b2:ce:f1:bb:c3:d6:5d:05:32:e6:f1:
                    6f:3c:c5:8a:d4:b7:77:3e:78:1f:21:3f:93:79:f3:
                    0b:9b:19:bc:5f:7b:76:e4:94:14:89:0e:5e:d0:6f:
                    ad:ff:90:f8:39:2e:e3:4e:71:13:34:57:5d:62:8b:
                    21:57:a3:34:55:0e:72:4a:10:78:4b:3b:22:9f:72:
                    5f:68:a2:fc:96:ca:5c:c8:d1:8c:25:41:8f:5c:18:
                    d3:6e:49:ef:d8:5c:42:51:a2:68:e6:0d:89:f4:14:
                    e1:6c:f7:e5:51:c0:ff:08:35:06:70:ff:95:76:40:
                    f9:76:1b:2d:e9:78:46:b1:41:34:34:77:f2:f7:cd:
                    13:c0:9d:62:04:16:52:39:51:c7:0c:a5:7d:65:c9:
                    1d:35:ec:1a:f1:ce:66:2f:58:fd:08:ef:ad:81:1f:
                    57:c9:90:2c:ce:ab:d4:f4:da:9f:ef:5a:8b:8a:75:
                    08:1f:ff:c9:07:d8:8b:6a:4e:c2:bc:11:0a:89:06:
                    24:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:99:8A:D9:77:44:92:1A:C5:F0:54:9F:4F:71:1E:47:E6:27:91:FA
            X509v3 Authority Key Identifier:
                keyid:8C:B5:A2:51:6F:71:3C:FF:E9:D1:50:4E:79:A4:BD:3B:9A:FB:0A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/323830343a323836303a3a2f33322d313238203d3e20323633393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2860::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:47:a5:0a:52:49:ca:0a:fd:07:78:d7:0e:f8:69:34:ff:cc:
         0c:67:56:d9:9b:65:08:09:71:9f:84:a0:05:30:d6:0b:da:b4:
         0b:84:be:9b:ca:89:66:58:89:d1:ae:13:44:2a:49:7e:57:bd:
         b2:28:5f:f1:d1:53:92:8c:cf:8e:fd:26:98:cf:af:1f:12:61:
         91:59:f8:24:8f:f4:a1:0b:74:e6:64:91:92:0d:9f:e5:fa:2b:
         be:7e:e2:5b:71:0d:54:b3:b0:d9:b0:79:49:80:7c:08:55:1c:
         57:54:4e:91:e4:db:a3:24:6a:a3:bc:e6:53:2e:4f:13:03:7f:
         e1:f4:7c:b4:7b:8c:31:1e:fd:d0:d7:04:1e:f2:e4:b9:ee:2a:
         30:fc:1b:de:ec:37:c3:89:9b:37:cb:e0:69:b4:67:d8:38:dd:
         9b:f2:30:36:68:59:32:f3:f6:ac:74:0d:eb:8e:8b:79:3d:39:
         9f:a3:07:87:9c:10:71:e6:f9:50:f9:fc:e4:20:d1:26:3e:9e:
         22:f9:6b:ba:3b:3c:95:c8:19:11:2c:59:5b:b2:bc:7b:5b:9a:
         3e:21:16:be:2e:db:40:e0:7e:09:ca:9a:4f:50:d5:1e:37:21:
         1f:0b:20:0d:74:96:4c:61:24:85:62:66:4e:e1:a8:fb:20:67:
         be:88:f8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:21:21 2026 by rpki-client