Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a373030303a3a2f33362d3336203d3e20323634343235.roa
File:                     323830343a316536303a373030303a3a2f33362d3336203d3e20323634343235.roa (raw, json)
Hash identifier:          3yTBUq8foEmksTbhLnkbpflFSR9RZo2W4hYijhgaCEw=
Subject key identifier:   E6:CA:F2:5F:41:7D:6E:70:A8:16:95:09:C7:D4:1D:54:82:C4:55:37
Certificate issuer:       /CN=C4B5041C433317D641803C99F33EBAC111F4589E
Certificate serial:       721A3840E2582EABAE813743941FA5910C9B27EC
Authority key identifier: C4:B5:04:1C:43:33:17:D6:41:80:3C:99:F3:3E:BA:C1:11:F4:58:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B5041C433317D641803C99F33EBAC111F4589E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a373030303a3a2f33362d3336203d3e20323634343235.roa
Signing time:             Wed 15 Apr 2026 17:59:24 +0000
ROA not before:           Wed 15 Apr 2026 17:54:24 +0000
ROA not after:            Wed 14 Apr 2027 17:59:24 +0000
asID:                     264425
IP address blocks:        2804:1e60:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/C4B5041C433317D641803C99F33EBAC111F4589E.crl
                          rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/C4B5041C433317D641803C99F33EBAC111F4589E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B5041C433317D641803C99F33EBAC111F4589E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 09:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:1a:38:40:e2:58:2e:ab:ae:81:37:43:94:1f:a5:91:0c:9b:27:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4B5041C433317D641803C99F33EBAC111F4589E
        Validity
            Not Before: Apr 15 17:54:24 2026 GMT
            Not After : Apr 14 17:59:24 2027 GMT
        Subject: CN=E6CAF25F417D6E70A8169509C7D41D5482C45537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:22:1f:89:21:6f:e2:b1:ef:4b:5e:62:dc:2c:
                    6c:07:b3:37:db:4c:4a:57:0d:53:38:5c:6d:db:5c:
                    2e:f6:e5:d3:42:3f:be:e2:9b:de:0c:ed:0a:9a:ce:
                    7d:2a:ec:f9:4a:ba:2f:72:86:71:56:93:b7:78:2f:
                    7f:9f:83:34:71:61:9c:60:f6:74:e0:12:6e:83:6b:
                    d5:c4:c3:fb:a1:9f:0a:e0:9d:4e:ef:7c:7b:a0:2f:
                    82:05:9a:13:fb:df:57:a6:be:f2:27:0f:7a:1a:9f:
                    f0:14:5b:7c:17:35:df:c7:27:4f:2d:0f:79:15:d3:
                    8c:87:45:db:bf:a7:7f:bc:5b:92:90:f5:03:a6:09:
                    38:b9:21:bb:09:cf:75:da:09:8c:97:3c:d6:56:a6:
                    cb:24:34:aa:44:f0:cb:49:03:48:07:f7:60:3f:a6:
                    03:1d:fa:db:0f:17:c0:3d:e8:f4:cd:1b:8c:e9:5c:
                    14:c2:eb:67:50:03:3c:1e:88:46:37:cd:e6:7b:a3:
                    ec:a5:7a:56:42:dd:98:a4:05:84:3e:11:44:97:55:
                    38:5d:1f:04:c3:89:2d:05:94:66:d4:1d:82:75:9e:
                    11:b0:1a:9f:b0:e7:15:2b:80:0b:d4:52:db:b5:48:
                    eb:76:40:2f:81:5d:76:b5:68:97:f3:61:eb:bd:61:
                    00:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CA:F2:5F:41:7D:6E:70:A8:16:95:09:C7:D4:1D:54:82:C4:55:37
            X509v3 Authority Key Identifier:
                keyid:C4:B5:04:1C:43:33:17:D6:41:80:3C:99:F3:3E:BA:C1:11:F4:58:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/C4B5041C433317D641803C99F33EBAC111F4589E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B5041C433317D641803C99F33EBAC111F4589E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a373030303a3a2f33362d3336203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e60:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3c:d2:6b:53:9e:91:34:3c:7a:bd:74:67:1e:1f:08:24:2c:96:
         83:51:22:a9:4e:a2:2c:19:c6:b5:27:1c:6a:34:5c:ba:0b:a4:
         01:1e:a8:20:69:9c:8f:d7:48:05:6f:6e:17:72:e8:e5:97:50:
         17:66:d8:c2:d8:70:25:e2:b4:df:28:5b:94:93:79:f5:6a:d5:
         eb:5c:70:3e:62:ad:94:4c:4e:76:fc:67:96:57:2c:41:c2:99:
         45:32:46:00:a9:fc:cc:b5:b5:42:29:46:a7:3d:19:d5:9c:52:
         e6:4d:f1:7c:19:b6:6d:62:13:eb:c4:5e:3c:9c:91:e5:4f:4a:
         ca:4b:00:34:44:29:d3:45:98:72:e1:c6:9e:eb:ba:8e:d9:02:
         65:7a:5c:ea:d3:05:35:94:cc:3f:87:f6:93:58:a9:a2:f0:61:
         3a:e9:87:dd:25:fa:22:24:a5:1a:8a:16:6c:dc:99:11:c8:6d:
         b7:0f:c4:81:cf:b5:68:b6:2c:bb:1b:f1:37:b8:64:b7:75:a3:
         ef:04:7b:82:14:b3:4e:2a:a0:3f:e8:71:ca:b1:68:20:79:c4:
         b9:05:12:85:5d:16:85:19:48:1f:c0:ae:b7:2b:24:f6:38:6a:
         86:0e:e8:91:3c:c5:9f:3a:58:9a:3a:04:4b:65:11:49:c4:ed:
         89:aa:93:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:45:51 2026 by rpki-client