Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/323830343a363732633a373830303a3a2f33382d3338203d3e20323639363039.roa
File:                     323830343a363732633a373830303a3a2f33382d3338203d3e20323639363039.roa (raw, json)
Hash identifier:          V4IG9wkG2/yFUQ2aVlbJrs4ZVEqYdeJGJX9WwMVheok=
Subject key identifier:   D5:30:7D:71:04:89:9C:9B:39:54:BD:0A:0A:AD:1B:B4:24:AD:1E:D2
Certificate issuer:       /CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29
Certificate serial:       4D7319CA84F166D40173267CB8D0DFA9B92706DB
Authority key identifier: 43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/323830343a363732633a373830303a3a2f33382d3338203d3e20323639363039.roa
Signing time:             Tue 14 Apr 2026 11:31:26 +0000
ROA not before:           Tue 14 Apr 2026 11:26:26 +0000
ROA not after:            Tue 13 Apr 2027 11:31:26 +0000
asID:                     269609
IP address blocks:        2804:672c:7800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl
                          rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 09:14:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:73:19:ca:84:f1:66:d4:01:73:26:7c:b8:d0:df:a9:b9:27:06:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29
        Validity
            Not Before: Apr 14 11:26:26 2026 GMT
            Not After : Apr 13 11:31:26 2027 GMT
        Subject: CN=D5307D7104899C9B3954BD0A0AAD1BB424AD1ED2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:46:ae:44:f7:6b:68:1d:f3:7c:a3:85:cc:44:
                    f6:06:95:d6:6a:bc:c4:33:ae:90:57:04:d9:15:45:
                    e9:f7:88:09:a8:3f:58:65:e6:45:7a:1c:d9:17:b3:
                    fd:09:e0:0b:ea:4d:59:6a:f3:9b:c9:eb:27:7d:06:
                    93:66:2a:62:fa:c6:71:ef:0b:ca:77:69:47:de:19:
                    b2:dd:f9:d0:86:a8:3d:40:c3:9b:58:3d:0d:19:70:
                    29:38:a4:49:68:58:62:98:12:47:2c:5f:ce:71:a7:
                    2b:44:8d:9a:7a:52:4f:b7:d0:30:c8:9c:6b:cf:55:
                    b0:77:73:98:53:8e:7b:1f:02:88:8d:8a:ca:32:bc:
                    cc:94:1f:ab:c6:90:66:e2:a2:ec:42:da:39:da:96:
                    05:6b:70:c3:2f:98:8c:a8:6e:c5:f8:1d:db:c8:bd:
                    2e:73:77:56:39:ab:83:73:6d:54:19:7d:5c:c7:66:
                    07:86:fb:82:56:22:b7:3e:d5:c1:44:c1:61:ed:59:
                    58:77:3e:0d:97:d7:0c:45:ea:c3:41:c0:07:ca:83:
                    df:c8:df:92:b4:5b:9c:4d:39:f3:72:4b:45:b2:b9:
                    5d:51:8a:c0:2b:1d:6a:57:4f:f5:37:3a:bc:ee:0d:
                    30:7b:0c:08:42:cd:ff:69:bf:e5:d1:b3:f7:ab:f8:
                    5f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:30:7D:71:04:89:9C:9B:39:54:BD:0A:0A:AD:1B:B4:24:AD:1E:D2
            X509v3 Authority Key Identifier:
                keyid:43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/323830343a363732633a373830303a3a2f33382d3338203d3e20323639363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:672c:7800::/38

    Signature Algorithm: sha256WithRSAEncryption
         0b:98:fc:3b:d0:96:87:16:f5:fb:18:63:44:53:8a:c2:d2:60:
         e7:96:cd:d7:03:f2:62:c8:bc:6d:ae:cf:8a:72:16:33:7d:8a:
         c1:1a:6d:66:23:81:18:ef:1c:f9:98:82:e5:b1:58:76:d7:7f:
         b4:b9:0c:2d:ca:9f:3b:00:45:27:84:14:bf:2c:a2:21:ac:a7:
         03:22:27:d7:21:99:dd:f7:37:1f:24:d5:a6:56:94:2f:d9:e8:
         59:ad:31:c3:48:1d:0c:15:c1:75:8a:a3:99:55:b6:3c:fb:89:
         ac:b1:d9:f9:21:ce:95:20:a9:5f:e0:27:b5:29:4f:5b:73:84:
         75:bd:d2:3c:21:ae:71:66:7a:c8:51:af:c3:ed:33:25:3b:05:
         13:a4:0f:50:4e:48:d0:bd:6c:af:3d:c8:a9:07:35:66:e0:ab:
         d8:af:1d:bb:6b:b0:ae:2d:42:60:59:ee:5f:53:d8:6e:d2:76:
         3d:7b:ad:f8:42:07:2d:02:9e:94:eb:84:6f:38:fa:65:87:4b:
         a8:d2:ee:65:42:c9:a8:30:bc:00:29:74:c3:b9:06:6c:02:ad:
         98:9e:a6:3c:62:71:b1:91:f1:5d:1e:1e:85:c5:2d:40:10:04:
         7c:91:3d:eb:f7:02:59:14:64:55:06:54:dc:a2:4b:48:14:b5:
         2d:3d:2e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:32:49 2026 by rpki-client