Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a363030303a3a2f33362d3336203d3e20323634343235.roa
File:                     323830343a316536303a363030303a3a2f33362d3336203d3e20323634343235.roa (raw, json)
Hash identifier:          f70NZ5qLK2YRNkLxUVJrgTxIhUhBcTKUA+nKhKMolAE=
Subject key identifier:   B0:72:49:7E:33:EA:91:41:31:0D:42:82:A3:A7:36:1B:0D:EC:D9:54
Certificate issuer:       /CN=C4B5041C433317D641803C99F33EBAC111F4589E
Certificate serial:       51D9B465E2229A7D1C35545A69859CEB2533CDA9
Authority key identifier: C4:B5:04:1C:43:33:17:D6:41:80:3C:99:F3:3E:BA:C1:11:F4:58:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B5041C433317D641803C99F33EBAC111F4589E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a363030303a3a2f33362d3336203d3e20323634343235.roa
Signing time:             Wed 15 Apr 2026 17:59:27 +0000
ROA not before:           Wed 15 Apr 2026 17:54:27 +0000
ROA not after:            Wed 14 Apr 2027 17:59:27 +0000
asID:                     264425
IP address blocks:        2804:1e60:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/C4B5041C433317D641803C99F33EBAC111F4589E.crl
                          rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/C4B5041C433317D641803C99F33EBAC111F4589E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B5041C433317D641803C99F33EBAC111F4589E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 09:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:d9:b4:65:e2:22:9a:7d:1c:35:54:5a:69:85:9c:eb:25:33:cd:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4B5041C433317D641803C99F33EBAC111F4589E
        Validity
            Not Before: Apr 15 17:54:27 2026 GMT
            Not After : Apr 14 17:59:27 2027 GMT
        Subject: CN=B072497E33EA9141310D4282A3A7361B0DECD954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:92:a0:70:2d:48:33:88:4f:77:1e:83:f7:1e:
                    49:cd:aa:b1:b4:08:b0:fd:e6:d8:e2:0c:73:4e:14:
                    18:cf:e6:21:f5:97:e0:f8:8e:0e:a2:8b:27:3b:f8:
                    ee:82:ab:51:a5:e7:46:3e:d7:2c:d7:55:79:ba:9f:
                    17:ab:51:39:00:0a:22:c0:9c:4b:db:1f:00:c0:43:
                    04:95:32:da:da:9f:ab:8e:e1:a0:fa:6d:39:12:eb:
                    6e:72:b0:6d:af:cb:b3:aa:b0:d0:b4:95:6d:1c:81:
                    de:34:ae:f3:d8:9a:17:26:5a:2b:d1:05:ac:1a:06:
                    d1:fe:3e:66:0c:b1:40:de:b4:a6:b7:4d:31:1d:da:
                    40:8f:bb:99:d8:54:39:53:40:5c:6f:21:b2:f3:35:
                    04:d1:5b:48:92:b5:4d:93:a5:51:a1:a3:40:c5:67:
                    03:69:ba:41:e1:61:cb:fc:74:87:04:99:66:cd:e8:
                    1c:00:2a:e9:86:23:5f:6e:b0:25:f4:f8:6f:94:8d:
                    6d:a1:c7:46:8a:95:eb:d4:83:02:c4:5d:c0:70:d3:
                    cf:b6:0a:9a:e4:76:64:c9:bc:06:10:08:97:59:37:
                    c1:5a:20:8a:92:52:16:39:25:de:79:35:ca:98:b2:
                    80:be:b1:f8:d8:b4:b3:00:0c:b1:1f:a2:b8:12:94:
                    02:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:72:49:7E:33:EA:91:41:31:0D:42:82:A3:A7:36:1B:0D:EC:D9:54
            X509v3 Authority Key Identifier:
                keyid:C4:B5:04:1C:43:33:17:D6:41:80:3C:99:F3:3E:BA:C1:11:F4:58:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/C4B5041C433317D641803C99F33EBAC111F4589E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B5041C433317D641803C99F33EBAC111F4589E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a363030303a3a2f33362d3336203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e60:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         55:73:cd:fc:01:8b:95:e7:98:b6:a6:4e:38:ac:cd:4d:57:4e:
         8c:7b:bb:51:14:f6:21:56:49:b5:f4:66:8b:7d:70:33:2e:8d:
         f2:d3:35:a6:2c:13:8a:5c:75:ff:e6:3b:36:ee:da:4f:38:a9:
         d1:ac:66:4a:c4:50:4b:09:89:23:43:de:27:aa:f7:92:64:10:
         05:51:df:54:15:68:62:7f:3d:61:df:66:f7:a1:99:77:0b:32:
         ea:7c:ac:ce:a5:eb:8c:68:62:01:aa:02:5d:2a:6b:69:b1:1a:
         9f:77:27:c3:f6:7e:1e:5d:0d:0d:36:6c:fd:07:3b:72:47:f6:
         29:91:8a:25:81:50:34:fd:fd:ec:97:b1:75:da:e5:bd:be:1d:
         4b:e8:45:77:c9:7f:90:ad:b5:85:d9:41:b0:bf:58:a6:6a:26:
         f1:14:1a:2b:25:ca:b7:70:5c:7c:cc:0f:6f:7f:3c:47:a3:8c:
         04:f0:f3:56:a1:02:b3:05:2f:9f:d4:6a:f2:cd:c0:90:94:7c:
         9e:31:6b:8c:40:66:fd:fa:db:25:b9:59:24:34:b1:28:a6:d7:
         a7:f4:b0:7f:45:87:c9:67:7d:a6:19:75:f4:0d:31:54:a6:99:
         07:c6:32:e4:44:63:8c:5d:41:82:50:43:ed:f5:bc:32:ad:9e:
         dd:d9:5d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:46:18 2026 by rpki-client