Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a633030303a3a2f33362d3336203d3e20323634343235.roa
File:                     323830343a316536303a633030303a3a2f33362d3336203d3e20323634343235.roa (raw, json)
Hash identifier:          uP28DSIGS3RTVJLqejDbXXb29OKxFUToQdV7Pls0rUw=
Subject key identifier:   2C:9C:19:11:F3:83:6A:CE:27:AE:10:13:D2:25:93:82:7B:BD:84:C1
Certificate issuer:       /CN=C4B5041C433317D641803C99F33EBAC111F4589E
Certificate serial:       3B90D62B6731622AE1850491B6D99C9C3583458B
Authority key identifier: C4:B5:04:1C:43:33:17:D6:41:80:3C:99:F3:3E:BA:C1:11:F4:58:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B5041C433317D641803C99F33EBAC111F4589E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a633030303a3a2f33362d3336203d3e20323634343235.roa
Signing time:             Wed 15 Apr 2026 17:59:23 +0000
ROA not before:           Wed 15 Apr 2026 17:54:23 +0000
ROA not after:            Wed 14 Apr 2027 17:59:23 +0000
asID:                     264425
IP address blocks:        2804:1e60:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/C4B5041C433317D641803C99F33EBAC111F4589E.crl
                          rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/C4B5041C433317D641803C99F33EBAC111F4589E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B5041C433317D641803C99F33EBAC111F4589E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 09:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:90:d6:2b:67:31:62:2a:e1:85:04:91:b6:d9:9c:9c:35:83:45:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4B5041C433317D641803C99F33EBAC111F4589E
        Validity
            Not Before: Apr 15 17:54:23 2026 GMT
            Not After : Apr 14 17:59:23 2027 GMT
        Subject: CN=2C9C1911F3836ACE27AE1013D22593827BBD84C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bb:80:e9:03:d2:fc:33:ee:90:0b:14:e6:d9:
                    69:c2:0b:d2:2d:14:33:85:5f:04:b6:5c:21:a6:84:
                    59:65:07:e7:31:9f:1c:5c:47:95:ce:7c:8e:53:95:
                    df:3f:6f:b5:31:f9:32:81:08:bb:6e:30:64:f2:80:
                    cd:1c:7f:f9:12:79:18:94:bf:e5:4b:fb:f6:4c:60:
                    fb:43:cc:2d:75:1b:c4:28:92:4d:e6:96:43:47:72:
                    7f:bd:42:28:04:fb:55:aa:68:88:b3:91:30:23:1d:
                    7a:b1:c6:dc:38:2e:c8:9d:a3:90:9d:19:ac:6f:14:
                    63:a0:7f:cd:08:20:99:cb:18:1c:11:ed:5b:ca:7b:
                    51:bf:56:04:78:24:19:10:e1:b2:b1:5f:9d:b6:83:
                    a9:78:a9:c1:58:ac:3a:d0:9e:04:2a:13:a1:02:5f:
                    e0:92:14:f7:6e:cc:47:d9:b5:6b:1d:51:14:d7:9b:
                    26:77:5e:d1:96:dc:78:8a:c6:c7:e7:48:13:fc:5f:
                    f1:21:2d:36:c3:0e:30:83:19:94:a7:34:bb:f5:1b:
                    31:22:a7:7a:8e:d9:85:b7:94:29:25:ac:b5:35:70:
                    83:07:5a:5d:48:db:25:ab:f4:b9:d7:a0:85:86:89:
                    7b:a6:4f:bd:c9:59:28:24:8b:eb:f5:03:38:bb:e7:
                    7b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9C:19:11:F3:83:6A:CE:27:AE:10:13:D2:25:93:82:7B:BD:84:C1
            X509v3 Authority Key Identifier:
                keyid:C4:B5:04:1C:43:33:17:D6:41:80:3C:99:F3:3E:BA:C1:11:F4:58:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/C4B5041C433317D641803C99F33EBAC111F4589E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B5041C433317D641803C99F33EBAC111F4589E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a633030303a3a2f33362d3336203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e60:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5b:12:54:e7:bc:b9:74:16:c9:a5:fd:95:6d:b3:7e:64:46:37:
         fe:f4:11:14:d0:7d:06:7c:e7:80:74:c6:15:2f:eb:29:78:75:
         01:ed:0c:00:56:74:75:93:2c:68:c7:53:81:4b:5e:cb:ad:b2:
         f4:31:d9:82:4c:1e:ad:e8:00:87:f2:2e:e5:79:a2:0e:08:38:
         1c:02:69:ed:a0:01:db:a2:be:74:da:4b:b1:59:e9:16:62:1d:
         a7:2f:9a:fa:f6:79:3c:75:a9:8f:01:46:1d:6c:8c:ea:52:69:
         1c:1b:02:07:39:ef:f4:bc:e4:35:33:23:bd:0c:12:56:ec:34:
         e4:83:0d:1d:f9:34:1b:08:b2:91:20:98:5e:91:72:b7:27:cc:
         17:ee:e1:65:d0:4f:c3:c5:2c:34:a2:00:9e:41:2f:7f:02:47:
         3d:4e:cf:b8:8b:87:1a:c2:e6:3e:51:a3:08:46:61:2c:ee:da:
         f7:2a:69:8b:b6:77:76:4d:2a:06:22:36:d5:9b:ac:8c:c8:99:
         f3:96:88:9f:f0:00:1b:b0:e1:19:a9:09:4d:6a:d2:f5:c6:71:
         1c:b0:a9:4b:86:ec:51:b5:50:f6:a6:f4:c8:d0:91:61:49:c3:
         30:0b:f1:5b:16:b9:a5:b6:e3:f0:4c:9e:8a:47:73:0f:8a:b9:
         2d:c2:a1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:46:16 2026 by rpki-client