Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a623030303a3a2f33362d3336203d3e20323634343235.roa
File:                     323830343a316536303a623030303a3a2f33362d3336203d3e20323634343235.roa (raw, json)
Hash identifier:          WAV3hlibE3nYMGVwq5uToBDGFiZxJa6UgSzCntWTQnM=
Subject key identifier:   AE:EE:7F:9D:F7:2E:E2:9F:2A:CC:39:E3:3D:83:24:F2:1C:0E:27:8E
Certificate issuer:       /CN=C4B5041C433317D641803C99F33EBAC111F4589E
Certificate serial:       173E09104AACE73D4829938BA701FD31279272E9
Authority key identifier: C4:B5:04:1C:43:33:17:D6:41:80:3C:99:F3:3E:BA:C1:11:F4:58:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B5041C433317D641803C99F33EBAC111F4589E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a623030303a3a2f33362d3336203d3e20323634343235.roa
Signing time:             Wed 15 Apr 2026 17:59:25 +0000
ROA not before:           Wed 15 Apr 2026 17:54:25 +0000
ROA not after:            Wed 14 Apr 2027 17:59:25 +0000
asID:                     264425
IP address blocks:        2804:1e60:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/C4B5041C433317D641803C99F33EBAC111F4589E.crl
                          rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/C4B5041C433317D641803C99F33EBAC111F4589E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B5041C433317D641803C99F33EBAC111F4589E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 09:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:3e:09:10:4a:ac:e7:3d:48:29:93:8b:a7:01:fd:31:27:92:72:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4B5041C433317D641803C99F33EBAC111F4589E
        Validity
            Not Before: Apr 15 17:54:25 2026 GMT
            Not After : Apr 14 17:59:25 2027 GMT
        Subject: CN=AEEE7F9DF72EE29F2ACC39E33D8324F21C0E278E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c1:50:e5:49:52:84:9f:48:15:f7:ac:d4:a9:
                    a4:8a:6a:16:f6:6f:d2:07:61:ff:0a:c8:ab:b8:e6:
                    94:4f:d3:29:d5:be:b8:d7:bd:ad:95:b8:f3:b2:dd:
                    c1:a9:d8:2a:25:35:c7:0b:5e:26:85:46:ca:2e:66:
                    d0:a0:6f:ec:3e:03:37:85:c2:8b:46:ab:b8:8d:38:
                    52:98:61:75:ce:fe:ee:43:9c:8d:f6:be:ce:51:09:
                    6c:31:3b:89:61:80:98:d9:78:52:c4:d4:1f:23:1a:
                    28:14:00:4b:cb:3c:29:2e:23:72:91:c4:fd:dc:69:
                    2e:10:f3:00:1b:1b:3d:2c:5c:3e:c3:dd:01:29:80:
                    72:97:ce:6f:55:94:1e:d8:d9:8b:47:6a:44:d6:bb:
                    85:6b:86:4c:a6:96:46:61:2e:f3:2c:85:56:28:7f:
                    3f:a6:52:e2:b4:1a:65:c7:7e:b1:c0:c6:b2:ad:d2:
                    79:9e:17:7e:26:27:6f:ef:51:cf:c5:4f:1e:3b:84:
                    89:c3:bf:52:11:1f:7c:13:67:de:a9:8d:2f:6f:20:
                    74:21:79:91:32:48:20:3c:cf:73:e9:e7:1a:06:53:
                    64:c2:43:4e:b9:8d:91:7d:48:8a:fa:51:95:ce:28:
                    b3:8c:e3:a2:be:7e:9a:47:b8:1f:d2:d5:3a:99:23:
                    66:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:EE:7F:9D:F7:2E:E2:9F:2A:CC:39:E3:3D:83:24:F2:1C:0E:27:8E
            X509v3 Authority Key Identifier:
                keyid:C4:B5:04:1C:43:33:17:D6:41:80:3C:99:F3:3E:BA:C1:11:F4:58:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/C4B5041C433317D641803C99F33EBAC111F4589E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B5041C433317D641803C99F33EBAC111F4589E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a623030303a3a2f33362d3336203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e60:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1c:16:54:d4:31:00:23:52:69:1f:1d:c5:32:5e:ee:d1:d6:b2:
         ad:e0:11:15:f5:3d:3a:fb:10:a9:db:bd:a2:9a:30:20:ae:01:
         24:ef:7e:d2:02:df:0e:2d:a4:f2:0f:b5:9e:38:99:c4:0c:1a:
         11:3f:24:8a:1b:ad:f2:1c:a1:fc:31:7c:bf:b6:23:57:c7:54:
         cd:c7:22:25:9c:09:f8:23:65:bf:9f:92:ac:e9:ff:f7:ae:7e:
         37:78:3f:d1:75:7f:3b:24:6f:ee:3b:09:11:0c:4d:49:7f:60:
         36:a2:f1:fd:5f:65:0f:9d:98:bd:38:a3:e2:04:41:80:01:0a:
         bc:4b:8d:60:66:cf:bd:fe:8f:1a:bb:7f:37:67:ff:43:39:23:
         46:b2:e7:49:55:a4:f6:02:5a:90:42:79:93:08:d5:76:dd:c2:
         4a:8a:45:05:79:d9:e0:36:32:63:6d:37:8b:1f:3e:87:99:78:
         50:fb:53:79:42:cc:6f:75:c1:dd:3f:56:b8:dc:20:c7:e0:a6:
         81:ff:c8:d0:96:1b:49:31:93:e8:d3:b3:d8:aa:73:a8:a2:52:
         db:08:10:86:ea:22:ae:d8:ff:21:24:73:fd:66:82:13:1b:e5:
         38:1b:30:38:7f:cb:9c:05:d9:74:e4:f8:38:a5:7c:e2:66:2e:
         b8:c6:89:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:46:11 2026 by rpki-client