Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/323830343a333932383a3a2f33332d313238203d3e20323636303135.roa
File:                     323830343a333932383a3a2f33332d313238203d3e20323636303135.roa (raw, json)
Hash identifier:          oc3QpNKhPohdJUGCyzBpKFEol0T4Z1M5OfgzBh0hKd4=
Subject key identifier:   FB:9A:73:5F:48:26:54:C3:8C:4A:21:DD:2B:B9:C5:63:70:FF:05:89
Certificate issuer:       /CN=F59B95C5AACBB4149873F9DA399F4E1A9D40A767
Certificate serial:       5D738270FF99EDEED3D050BD18285B4C595B2A53
Authority key identifier: F5:9B:95:C5:AA:CB:B4:14:98:73:F9:DA:39:9F:4E:1A:9D:40:A7:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F59B95C5AACBB4149873F9DA399F4E1A9D40A767.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/323830343a333932383a3a2f33332d313238203d3e20323636303135.roa
Signing time:             Mon 13 Apr 2026 18:11:07 +0000
ROA not before:           Mon 13 Apr 2026 18:06:07 +0000
ROA not after:            Mon 12 Apr 2027 18:11:07 +0000
asID:                     266015
IP address blocks:        2804:3928::/33 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/F59B95C5AACBB4149873F9DA399F4E1A9D40A767.crl
                          rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/F59B95C5AACBB4149873F9DA399F4E1A9D40A767.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F59B95C5AACBB4149873F9DA399F4E1A9D40A767.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 04:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:73:82:70:ff:99:ed:ee:d3:d0:50:bd:18:28:5b:4c:59:5b:2a:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F59B95C5AACBB4149873F9DA399F4E1A9D40A767
        Validity
            Not Before: Apr 13 18:06:07 2026 GMT
            Not After : Apr 12 18:11:07 2027 GMT
        Subject: CN=FB9A735F482654C38C4A21DD2BB9C56370FF0589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:28:a5:90:27:a6:85:ae:dd:88:2e:b3:91:ee:
                    7c:4c:ec:16:27:58:bb:39:e5:fb:f4:81:38:a7:c8:
                    0a:ff:b3:63:be:1b:e0:78:b0:f7:c4:92:66:b4:8a:
                    49:2f:93:f6:69:9d:b3:de:6b:3e:31:72:1c:0f:fc:
                    16:e0:0e:dc:51:5a:86:74:b6:d1:4e:9b:4c:a0:8b:
                    68:c2:88:94:76:0a:0c:a5:77:53:35:04:71:99:ad:
                    cb:eb:30:d8:92:d3:d6:5f:c1:9f:ed:06:0d:52:a0:
                    ef:9d:c4:e5:d2:8e:a5:94:90:d0:47:8a:57:f8:fe:
                    82:c4:43:86:64:16:d9:c4:d4:20:57:55:b2:95:da:
                    0a:13:8f:e6:78:fe:8d:f7:51:2b:07:c6:f3:66:f5:
                    4a:49:f8:03:7c:78:89:c0:ef:7b:4d:5a:53:27:85:
                    55:91:aa:b0:85:dd:89:46:d3:45:0f:f1:78:aa:2e:
                    90:98:b1:6a:66:06:be:65:4a:56:69:3a:b2:ec:d8:
                    b6:0e:18:39:4c:bb:c7:09:6b:f9:cb:81:38:f4:fb:
                    bb:85:4b:0f:92:ba:f7:c5:14:a3:02:38:5d:a8:0b:
                    86:ef:60:20:7a:0f:40:e6:0d:35:b9:08:cf:74:b4:
                    cc:3f:60:d9:d4:ec:75:82:73:4d:d2:b6:5f:49:3b:
                    77:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9A:73:5F:48:26:54:C3:8C:4A:21:DD:2B:B9:C5:63:70:FF:05:89
            X509v3 Authority Key Identifier:
                keyid:F5:9B:95:C5:AA:CB:B4:14:98:73:F9:DA:39:9F:4E:1A:9D:40:A7:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/F59B95C5AACBB4149873F9DA399F4E1A9D40A767.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F59B95C5AACBB4149873F9DA399F4E1A9D40A767.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/323830343a333932383a3a2f33332d313238203d3e20323636303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3928::/33

    Signature Algorithm: sha256WithRSAEncryption
         ac:c7:5a:65:47:cd:f7:49:5b:f9:d6:cd:0d:43:02:a1:f7:3e:
         28:77:33:f8:33:7d:35:07:fc:11:49:9a:8f:f3:c1:6c:02:ff:
         df:80:6a:a0:89:21:93:41:bb:1a:d0:70:b6:a6:96:e3:cc:6d:
         16:a7:ad:f8:89:1d:42:0d:3f:2d:c4:67:5b:2b:10:60:b5:41:
         8b:66:70:a0:88:e8:f9:7d:39:90:f1:5c:fa:a5:e8:ab:00:aa:
         70:6e:0b:ab:8a:6c:4c:79:33:8f:c9:be:e9:47:24:d9:79:79:
         47:11:a5:94:fc:9e:16:2d:5e:04:93:be:63:ce:b9:d0:59:37:
         57:12:57:8c:fe:c0:ea:25:e2:6b:a4:65:04:84:14:67:63:76:
         8e:60:00:0b:5a:8a:53:fb:90:7d:ba:db:c5:92:09:3c:35:25:
         1b:06:3f:3d:f5:1b:32:3a:8a:ec:45:62:30:90:09:91:70:c9:
         79:94:e1:d3:83:48:3e:4d:8d:c2:86:5c:cc:5c:36:31:e8:37:
         5b:4c:ab:65:f3:7a:09:71:5a:f3:c4:2d:c7:22:21:a2:e4:89:
         ae:a1:7d:87:25:d2:8e:27:f2:6c:80:ea:0e:7c:1c:78:69:07:
         16:bf:64:59:ab:c2:9d:1b:75:ca:37:26:72:32:35:47:6f:ea:
         5a:27:8b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:46:21 2026 by rpki-client