Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BoWor2r3o7tGDkpcpCYMTejwBGNAnbLNgbA79hyVZhTR/0/323830343a313939303a3a2f33322d3332203d3e203631383033.roa
File:                     323830343a313939303a3a2f33322d3332203d3e203631383033.roa (raw, json)
Hash identifier:          y2ht4rJHbcFXL6YvoZfLyHYFc+IwmchgowIf3Y3L4as=
Subject key identifier:   AE:95:8B:B2:33:80:5D:33:DF:3D:79:A4:B4:97:C8:27:FE:F5:EE:AF
Certificate issuer:       /CN=D64747AF7EF5FA19149F0E7E47116B18191BD499
Certificate serial:       196A46F54F1C1F13C49304AB66B7EE2E355E3114
Authority key identifier: D6:47:47:AF:7E:F5:FA:19:14:9F:0E:7E:47:11:6B:18:19:1B:D4:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D64747AF7EF5FA19149F0E7E47116B18191BD499.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BoWor2r3o7tGDkpcpCYMTejwBGNAnbLNgbA79hyVZhTR/0/323830343a313939303a3a2f33322d3332203d3e203631383033.roa
Signing time:             Thu 16 Apr 2026 17:09:59 +0000
ROA not before:           Thu 16 Apr 2026 17:04:59 +0000
ROA not after:            Thu 15 Apr 2027 17:09:59 +0000
asID:                     61803
IP address blocks:        2804:1990::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BoWor2r3o7tGDkpcpCYMTejwBGNAnbLNgbA79hyVZhTR/0/D64747AF7EF5FA19149F0E7E47116B18191BD499.crl
                          rsync://rpki-repo.registro.br/repo/BoWor2r3o7tGDkpcpCYMTejwBGNAnbLNgbA79hyVZhTR/0/D64747AF7EF5FA19149F0E7E47116B18191BD499.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D64747AF7EF5FA19149F0E7E47116B18191BD499.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 01:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:6a:46:f5:4f:1c:1f:13:c4:93:04:ab:66:b7:ee:2e:35:5e:31:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D64747AF7EF5FA19149F0E7E47116B18191BD499
        Validity
            Not Before: Apr 16 17:04:59 2026 GMT
            Not After : Apr 15 17:09:59 2027 GMT
        Subject: CN=AE958BB233805D33DF3D79A4B497C827FEF5EEAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:39:9e:2b:ed:a0:74:a8:78:50:47:7b:bd:9d:
                    29:07:f5:5a:9c:d7:e3:a4:15:cd:91:84:c6:1d:3d:
                    a8:36:d1:d6:58:5d:b5:6d:50:c8:59:b2:3b:77:f3:
                    ee:55:f0:81:96:3b:04:be:79:9a:ab:c6:2c:b9:7d:
                    dd:66:65:aa:58:97:d0:0b:3a:65:4c:57:b3:6f:ea:
                    4d:39:b9:81:e5:80:bb:38:9e:e0:ef:c9:35:c9:52:
                    96:ae:93:0a:68:5a:b1:36:cf:98:fe:08:2b:bc:8a:
                    e0:67:75:f2:39:61:81:a4:a8:25:09:e5:77:e8:e9:
                    a8:df:64:1f:b1:bb:84:66:6b:01:b8:0e:10:03:f4:
                    a1:0a:c1:f5:23:c1:3d:2d:e7:26:a7:77:32:8d:c0:
                    40:e7:e1:63:ab:0e:ab:2b:6e:68:39:60:59:bd:5c:
                    b2:76:c8:b7:0a:92:9b:0d:14:28:e7:38:8f:bc:70:
                    dd:51:4a:60:2b:b2:2e:d8:2f:81:56:33:f9:dd:4f:
                    07:e9:f6:c7:57:3e:94:db:82:26:94:d2:6f:6b:1b:
                    f0:aa:03:1c:f4:99:e1:f2:0b:fa:f0:1e:5a:17:b3:
                    d3:bb:9b:f4:43:5e:2c:aa:ba:ee:09:4e:db:28:ae:
                    dd:ab:15:d8:75:95:f5:27:82:f4:b0:2b:d0:a7:f1:
                    ee:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:95:8B:B2:33:80:5D:33:DF:3D:79:A4:B4:97:C8:27:FE:F5:EE:AF
            X509v3 Authority Key Identifier:
                keyid:D6:47:47:AF:7E:F5:FA:19:14:9F:0E:7E:47:11:6B:18:19:1B:D4:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BoWor2r3o7tGDkpcpCYMTejwBGNAnbLNgbA79hyVZhTR/0/D64747AF7EF5FA19149F0E7E47116B18191BD499.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D64747AF7EF5FA19149F0E7E47116B18191BD499.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BoWor2r3o7tGDkpcpCYMTejwBGNAnbLNgbA79hyVZhTR/0/323830343a313939303a3a2f33322d3332203d3e203631383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1990::/32

    Signature Algorithm: sha256WithRSAEncryption
         ce:e1:98:1c:22:32:11:29:c2:ec:f7:cf:25:1a:c0:4a:47:9b:
         25:15:b4:b7:ff:96:b0:9e:53:ac:29:b5:d3:8a:c3:08:cc:7a:
         05:2a:b3:34:14:ab:3f:d4:ef:8b:5d:8d:76:e2:31:34:6f:79:
         d0:cf:4f:a5:9e:85:22:24:51:2e:6f:64:f8:d5:2a:37:dc:96:
         70:82:f8:02:c9:cc:d0:52:75:18:2e:53:79:be:4d:57:d1:e2:
         b5:16:54:f6:83:40:fd:1c:8d:af:82:40:e8:96:30:88:24:49:
         85:88:37:ae:aa:45:ae:e8:9d:ef:f6:f1:7b:36:bf:de:3a:bf:
         b8:f6:64:eb:52:63:51:af:b3:d0:7e:40:f2:17:00:2c:a1:6a:
         60:3e:73:28:bd:61:b7:0e:eb:bb:0c:f7:d5:13:af:40:33:7b:
         74:54:1d:dc:bf:47:e1:b1:0c:ce:06:c2:d2:55:db:68:f2:f0:
         28:bc:04:a4:de:71:2c:c3:14:c0:54:f4:9c:e4:e1:f4:76:97:
         ab:82:f5:5f:a4:a7:41:98:9b:f4:c6:e7:33:85:b9:60:a4:68:
         ca:a2:d1:88:70:69:7d:d9:91:b0:a7:20:95:86:3a:86:48:8c:
         97:93:49:5a:d4:50:75:71:45:d5:57:e6:dc:74:88:5f:63:e3:
         00:2a:2f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:28:17 2026 by rpki-client