Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a653030303a3a2f33362d3336203d3e20323634343235.roa
File:                     323830343a316536303a653030303a3a2f33362d3336203d3e20323634343235.roa (raw, json)
Hash identifier:          xZYOFJ9ynsGllx9TTgQgDVUvajTfU6qIxaBivZF0R6Q=
Subject key identifier:   C7:A9:99:72:70:AC:92:78:25:84:82:4E:7B:47:5A:FC:22:FA:DA:11
Certificate issuer:       /CN=C4B5041C433317D641803C99F33EBAC111F4589E
Certificate serial:       4B9E342086AC63033CB9853F07A39EF31B04C1B0
Authority key identifier: C4:B5:04:1C:43:33:17:D6:41:80:3C:99:F3:3E:BA:C1:11:F4:58:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B5041C433317D641803C99F33EBAC111F4589E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a653030303a3a2f33362d3336203d3e20323634343235.roa
Signing time:             Wed 15 Apr 2026 17:59:24 +0000
ROA not before:           Wed 15 Apr 2026 17:54:24 +0000
ROA not after:            Wed 14 Apr 2027 17:59:24 +0000
asID:                     264425
IP address blocks:        2804:1e60:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/C4B5041C433317D641803C99F33EBAC111F4589E.crl
                          rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/C4B5041C433317D641803C99F33EBAC111F4589E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B5041C433317D641803C99F33EBAC111F4589E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 09:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:9e:34:20:86:ac:63:03:3c:b9:85:3f:07:a3:9e:f3:1b:04:c1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4B5041C433317D641803C99F33EBAC111F4589E
        Validity
            Not Before: Apr 15 17:54:24 2026 GMT
            Not After : Apr 14 17:59:24 2027 GMT
        Subject: CN=C7A9997270AC92782584824E7B475AFC22FADA11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:05:90:b9:31:da:ed:8a:38:70:80:e9:7f:e4:
                    90:b4:b1:db:f0:63:3c:60:d7:bd:3b:47:f8:33:ed:
                    bc:6c:e7:67:c8:2e:77:20:66:d4:19:e1:90:c9:d5:
                    16:ad:43:fc:a6:86:04:97:9a:b1:83:23:c0:89:cc:
                    b8:20:ba:45:42:e2:13:83:24:f4:a2:95:3d:29:05:
                    04:20:ec:ba:78:ad:e5:11:00:5f:b9:06:2c:48:c3:
                    34:1e:4a:0a:13:ec:e8:c6:46:29:ab:cd:bf:58:3e:
                    04:6f:36:7a:c0:a0:fc:b7:61:84:e4:1b:ef:17:d5:
                    7c:45:83:78:8d:95:26:80:74:ab:f4:b9:71:74:09:
                    f4:44:4e:b9:0a:b2:0e:d2:f0:4e:c6:05:99:f5:93:
                    1e:65:a4:23:4d:e1:a5:0e:97:73:d4:45:b4:9f:26:
                    54:4d:af:70:ee:65:00:47:f9:5a:a5:be:16:f2:04:
                    68:36:21:35:5a:ff:29:45:33:99:9c:2b:24:08:3b:
                    bc:e8:72:7f:25:05:00:85:df:f8:1c:26:26:ab:09:
                    0e:89:1b:f0:aa:84:6a:3d:b6:f4:85:03:2e:47:b6:
                    4f:b9:96:42:8c:9c:d3:f4:a1:b3:f6:69:1b:22:40:
                    0d:96:ec:8f:bb:d3:fd:dd:31:8d:9b:ab:a7:c9:f4:
                    22:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A9:99:72:70:AC:92:78:25:84:82:4E:7B:47:5A:FC:22:FA:DA:11
            X509v3 Authority Key Identifier:
                keyid:C4:B5:04:1C:43:33:17:D6:41:80:3C:99:F3:3E:BA:C1:11:F4:58:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/C4B5041C433317D641803C99F33EBAC111F4589E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B5041C433317D641803C99F33EBAC111F4589E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a653030303a3a2f33362d3336203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e60:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         51:d4:0f:46:1b:30:77:99:a4:3a:53:5d:cf:82:9f:39:3d:47:
         20:4f:a7:9e:95:4b:56:5f:7e:ae:f3:6d:5a:db:b7:67:5c:d6:
         bb:87:c9:25:23:58:64:94:ed:8a:48:b5:40:2c:ee:24:26:64:
         df:7f:f9:ec:db:73:fb:82:07:a2:99:bd:4a:7e:33:11:ee:a9:
         a3:17:14:10:b8:e3:10:08:3a:7f:2e:8c:50:d0:98:6f:bf:f9:
         77:13:47:b3:e4:19:03:0f:04:96:bf:f2:e6:4f:ac:a6:34:a1:
         65:77:24:32:52:dd:c5:49:bc:9f:17:00:d4:b1:68:78:14:cf:
         58:36:99:de:f2:c0:79:f8:a8:87:ca:39:93:57:e6:37:98:52:
         78:5b:d3:a8:9b:8b:05:24:37:f4:b7:d4:47:dc:01:38:b5:d6:
         e4:93:87:ab:64:f4:8c:7c:35:48:bf:92:74:05:92:65:3c:2a:
         e9:ef:cb:1c:03:02:1d:0c:a0:3b:9c:67:3a:26:22:5c:19:73:
         4f:74:92:1a:85:dd:26:ba:57:2e:d8:1b:c8:23:17:ef:a3:70:
         be:38:a0:b2:ff:1e:c1:71:88:05:0b:bd:93:54:2e:26:52:f1:
         aa:e7:2a:dc:e8:97:95:35:9a:6d:3b:a7:f0:87:0e:f9:98:d9:
         6e:68:0a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:46:18 2026 by rpki-client