Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CurJLa9K7J9vwYRJNYYpEXdY478dHC6EfQ4gfxx3YTgr/0/323830343a373832383a3a2f33322d313238203d3e20323731323234.roa
File:                     323830343a373832383a3a2f33322d313238203d3e20323731323234.roa (raw, json)
Hash identifier:          KTyrhnxDIbz5FqiRSSqCJh9BUQhivr5/iwkisfSxUYw=
Subject key identifier:   A4:2A:24:5F:2F:AC:8C:47:C0:BE:3C:CE:2F:FB:C5:F6:1A:12:B9:53
Certificate issuer:       /CN=6CD9541DF11DA48FE6CE48D8471F71AAB10E639B
Certificate serial:       23BF863848219DB0B1232694ACAF41B661CF9619
Authority key identifier: 6C:D9:54:1D:F1:1D:A4:8F:E6:CE:48:D8:47:1F:71:AA:B1:0E:63:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD9541DF11DA48FE6CE48D8471F71AAB10E639B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CurJLa9K7J9vwYRJNYYpEXdY478dHC6EfQ4gfxx3YTgr/0/323830343a373832383a3a2f33322d313238203d3e20323731323234.roa
Signing time:             Mon 13 Apr 2026 15:01:11 +0000
ROA not before:           Mon 13 Apr 2026 14:56:11 +0000
ROA not after:            Mon 12 Apr 2027 15:01:11 +0000
asID:                     271224
IP address blocks:        2804:7828::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CurJLa9K7J9vwYRJNYYpEXdY478dHC6EfQ4gfxx3YTgr/0/6CD9541DF11DA48FE6CE48D8471F71AAB10E639B.crl
                          rsync://rpki-repo.registro.br/repo/CurJLa9K7J9vwYRJNYYpEXdY478dHC6EfQ4gfxx3YTgr/0/6CD9541DF11DA48FE6CE48D8471F71AAB10E639B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD9541DF11DA48FE6CE48D8471F71AAB10E639B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 04:15:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:bf:86:38:48:21:9d:b0:b1:23:26:94:ac:af:41:b6:61:cf:96:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD9541DF11DA48FE6CE48D8471F71AAB10E639B
        Validity
            Not Before: Apr 13 14:56:11 2026 GMT
            Not After : Apr 12 15:01:11 2027 GMT
        Subject: CN=A42A245F2FAC8C47C0BE3CCE2FFBC5F61A12B953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a5:0b:88:0c:e3:c5:8a:3b:d2:53:3f:b9:16:
                    b0:3e:b6:2b:fe:18:2f:40:1e:8c:4f:00:e2:f2:15:
                    c2:33:35:6d:9d:a5:e7:61:81:8a:89:3e:b4:03:da:
                    f0:34:7d:f6:9e:23:33:fa:c5:1d:6c:c0:7a:7e:7d:
                    34:9b:04:bf:1d:0e:d6:1b:87:af:1b:40:52:0e:e7:
                    8f:8f:8d:e2:20:0c:52:51:a9:3d:2b:89:bb:aa:ad:
                    9f:25:0c:ec:6b:f2:1f:c7:7e:bb:38:07:94:ca:e8:
                    4b:10:a0:b2:b7:5c:cf:3c:f1:cd:da:73:05:ca:b1:
                    5d:93:ac:c4:9f:df:61:55:9e:30:70:55:3f:f2:12:
                    72:f5:9a:2e:69:58:06:dc:b9:77:22:d0:6b:77:42:
                    96:ca:55:e4:f5:76:09:d0:6a:da:e0:ea:75:42:40:
                    da:9e:79:d2:a6:9f:ff:d5:29:e4:ca:a3:f4:b3:2d:
                    71:97:15:bc:cd:c0:77:91:b7:a4:82:83:df:df:95:
                    2a:1c:11:25:c1:58:b6:53:3c:6c:df:eb:5e:a4:a4:
                    5e:e3:86:eb:9e:b7:43:2a:00:0c:6e:37:c6:aa:e6:
                    ae:8a:48:df:09:7f:4b:c2:52:ed:8d:d2:c0:0d:7d:
                    d7:5f:a0:b0:e1:a6:7a:ca:e2:84:eb:5e:65:87:54:
                    f2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:2A:24:5F:2F:AC:8C:47:C0:BE:3C:CE:2F:FB:C5:F6:1A:12:B9:53
            X509v3 Authority Key Identifier:
                keyid:6C:D9:54:1D:F1:1D:A4:8F:E6:CE:48:D8:47:1F:71:AA:B1:0E:63:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CurJLa9K7J9vwYRJNYYpEXdY478dHC6EfQ4gfxx3YTgr/0/6CD9541DF11DA48FE6CE48D8471F71AAB10E639B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD9541DF11DA48FE6CE48D8471F71AAB10E639B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CurJLa9K7J9vwYRJNYYpEXdY478dHC6EfQ4gfxx3YTgr/0/323830343a373832383a3a2f33322d313238203d3e20323731323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7828::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:5a:7b:23:fd:3d:58:81:ab:d9:0a:b8:73:7b:2d:ba:89:da:
         1a:0d:da:ae:e1:58:5e:bd:16:a4:0a:0d:84:02:b9:45:3d:f3:
         d4:ba:d2:90:17:ee:80:a4:12:ed:9c:8d:c0:b8:15:c0:76:a5:
         04:f6:5a:48:f9:26:21:68:ba:e2:c4:48:d3:54:d2:eb:fc:93:
         48:4f:56:5f:b6:64:91:3c:7b:85:bf:eb:e6:40:29:24:d8:09:
         7b:ff:f0:05:97:f0:2c:20:77:96:5a:81:91:bc:11:55:d1:7e:
         64:d3:d6:87:e6:56:a0:0c:ff:ad:ce:c1:dd:43:af:7a:86:2b:
         b5:13:1a:34:06:92:dd:1c:73:51:e2:e1:79:12:70:fa:e9:9c:
         97:9f:4d:01:48:53:fa:ea:07:83:7e:53:21:22:96:0d:94:60:
         9b:73:55:72:f5:c8:13:85:50:2a:72:9e:cd:fe:08:07:8f:4c:
         75:88:c8:af:68:48:9e:00:38:71:5d:a0:05:66:e9:f0:4a:ea:
         63:0b:ec:9d:73:d7:45:f1:e5:30:de:64:84:c7:86:c6:d5:bd:
         9b:ba:ea:83:ad:3e:f8:f0:76:9a:e2:d2:53:b0:33:ac:64:a4:
         9e:a0:11:07:24:55:44:7a:4d:3d:64:48:b7:bb:cd:3a:66:de:
         c8:af:0e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:59:24 2026 by rpki-client