Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a3a2f33322d3332203d3e20323634343235.roa
File:                     323830343a316536303a3a2f33322d3332203d3e20323634343235.roa (raw, json)
Hash identifier:          hF8FPdYl2lzyXCwgheO0deTRF54Nrl1hn+e6VTJofMM=
Subject key identifier:   95:E5:08:2B:F7:66:FA:E5:B6:0A:8C:96:A4:1C:15:56:11:F4:9C:4F
Certificate issuer:       /CN=C4B5041C433317D641803C99F33EBAC111F4589E
Certificate serial:       4AFB518EC24554886DC58C08C54975D8289B1EEC
Authority key identifier: C4:B5:04:1C:43:33:17:D6:41:80:3C:99:F3:3E:BA:C1:11:F4:58:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B5041C433317D641803C99F33EBAC111F4589E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a3a2f33322d3332203d3e20323634343235.roa
Signing time:             Wed 15 Apr 2026 17:57:52 +0000
ROA not before:           Wed 15 Apr 2026 17:52:52 +0000
ROA not after:            Wed 14 Apr 2027 17:57:52 +0000
asID:                     264425
IP address blocks:        2804:1e60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/C4B5041C433317D641803C99F33EBAC111F4589E.crl
                          rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/C4B5041C433317D641803C99F33EBAC111F4589E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B5041C433317D641803C99F33EBAC111F4589E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 09:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:fb:51:8e:c2:45:54:88:6d:c5:8c:08:c5:49:75:d8:28:9b:1e:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4B5041C433317D641803C99F33EBAC111F4589E
        Validity
            Not Before: Apr 15 17:52:52 2026 GMT
            Not After : Apr 14 17:57:52 2027 GMT
        Subject: CN=95E5082BF766FAE5B60A8C96A41C155611F49C4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:fb:e2:31:1a:90:3d:4f:3a:02:da:d4:e0:f7:
                    c2:ed:43:2e:d6:44:87:eb:85:d6:76:1c:8f:02:f7:
                    c5:de:da:0f:23:09:6d:cc:fe:55:fa:11:49:eb:7f:
                    41:37:34:17:17:ed:66:5f:7a:19:0e:7b:f5:fe:4b:
                    48:49:b3:3c:61:2d:0a:f6:97:ed:94:f2:bf:7c:14:
                    d9:9b:5c:b1:c5:b3:dc:5f:8b:aa:72:b2:be:ce:7b:
                    99:56:69:1b:87:f1:47:eb:c3:e1:92:12:0b:e2:92:
                    4c:1d:d0:39:31:57:2c:92:57:e1:47:4a:65:7d:c4:
                    2a:58:f5:61:39:b7:38:40:fe:87:3a:8c:c7:1d:ba:
                    51:26:c1:e0:cd:e5:50:4e:25:07:e2:3c:5c:e2:1d:
                    fa:24:4c:96:97:83:a8:d1:61:68:70:0f:47:da:d5:
                    fd:a4:1d:37:f9:ed:ca:09:1e:a6:a9:56:c7:05:c9:
                    33:77:37:9a:b2:31:40:9a:84:50:c0:a9:48:18:46:
                    53:52:c6:6b:93:1e:93:18:46:56:73:a6:74:49:2d:
                    94:63:dd:ff:d3:6f:43:4e:86:ab:2c:c9:48:2a:e1:
                    47:49:13:d8:9e:b4:cf:e9:99:bb:ad:12:70:07:93:
                    f5:e9:78:e0:df:ca:60:a3:21:40:12:4a:ff:f1:d5:
                    53:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E5:08:2B:F7:66:FA:E5:B6:0A:8C:96:A4:1C:15:56:11:F4:9C:4F
            X509v3 Authority Key Identifier:
                keyid:C4:B5:04:1C:43:33:17:D6:41:80:3C:99:F3:3E:BA:C1:11:F4:58:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/C4B5041C433317D641803C99F33EBAC111F4589E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B5041C433317D641803C99F33EBAC111F4589E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a3a2f33322d3332203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e60::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:3c:a6:e3:ec:27:f6:2b:61:de:8a:56:23:71:12:d3:af:98:
         cd:4c:58:93:11:0d:0f:59:3c:5d:6f:68:1f:8e:fb:fa:ef:82:
         d8:8f:60:a0:4c:c3:f0:89:1b:f3:3b:46:b9:14:60:7b:7c:5c:
         ba:15:86:68:55:9b:08:b9:67:cb:36:c5:1e:72:fc:6b:66:bf:
         4c:be:da:2e:89:15:0d:f1:63:10:ed:9d:30:01:69:2a:22:9a:
         f3:a0:4c:c9:97:95:d1:c0:53:2f:2c:40:74:b8:7f:ef:03:71:
         cf:5a:51:63:7a:bf:db:0c:15:dc:b3:6a:4a:bb:b4:14:43:57:
         74:d3:ad:5b:d3:1d:9a:52:f9:f4:21:41:7b:af:ff:fa:71:c6:
         4b:41:91:c8:92:f8:9c:7d:43:2e:73:1a:ba:51:72:ae:a2:ae:
         4b:e7:9e:f8:71:c8:b8:43:da:c8:ef:28:fc:80:49:19:9a:d3:
         f0:04:f6:16:83:05:76:4b:12:1d:6d:58:b3:88:83:25:4c:e1:
         f2:1a:0c:d4:85:f6:d9:da:8b:e7:ae:fc:a6:46:8e:91:74:55:
         e3:58:48:38:5d:e2:8e:81:48:99:43:89:04:3b:68:fa:11:f2:
         01:4a:d3:27:33:ed:7b:20:cd:36:bf:ae:12:f4:46:9e:44:9c:
         18:bd:39:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:46:04 2026 by rpki-client