Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/323830343a316239343a3230303a3a2f34302d3430203d3e203532393734.roa
File:                     323830343a316239343a3230303a3a2f34302d3430203d3e203532393734.roa (raw, json)
Hash identifier:          cThS+lJn843AN5QEcvOxxIUH9rTZ4uCdoS+MBV68OJw=
Subject key identifier:   61:A4:81:5C:F3:D0:A0:FC:3A:F8:22:8C:B5:B4:C6:CF:5D:EB:A3:54
Certificate issuer:       /CN=9DFADCEDBD6F72121FB42196F61E059A1B3D2F45
Certificate serial:       033EFE066199EC2AC4088BDFE679F0260D7BE34B
Authority key identifier: 9D:FA:DC:ED:BD:6F:72:12:1F:B4:21:96:F6:1E:05:9A:1B:3D:2F:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/323830343a316239343a3230303a3a2f34302d3430203d3e203532393734.roa
Signing time:             Mon 13 Apr 2026 13:53:54 +0000
ROA not before:           Mon 13 Apr 2026 13:48:54 +0000
ROA not after:            Mon 12 Apr 2027 13:53:54 +0000
asID:                     52974
IP address blocks:        2804:1b94:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.crl
                          rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 15:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:3e:fe:06:61:99:ec:2a:c4:08:8b:df:e6:79:f0:26:0d:7b:e3:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DFADCEDBD6F72121FB42196F61E059A1B3D2F45
        Validity
            Not Before: Apr 13 13:48:54 2026 GMT
            Not After : Apr 12 13:53:54 2027 GMT
        Subject: CN=61A4815CF3D0A0FC3AF8228CB5B4C6CF5DEBA354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:63:9b:12:ac:4c:56:75:bb:46:a2:7e:ee:b2:
                    3a:aa:01:d7:d3:f9:62:7c:39:2d:11:84:69:e2:5f:
                    b4:38:82:d1:f5:79:0e:57:07:ed:14:0a:a7:a3:c7:
                    95:37:47:6a:94:45:bc:be:a8:ba:ad:0b:a4:27:fb:
                    0f:0c:90:4f:43:a9:15:99:6c:1d:eb:80:6f:47:c9:
                    58:61:8f:71:9b:c7:bd:4a:00:4d:c2:09:ac:78:07:
                    17:45:8c:2b:11:16:7e:ad:b3:79:77:49:31:33:c9:
                    5c:0f:72:0e:96:97:1f:ac:3f:98:cd:b4:61:3c:06:
                    8d:c3:68:bd:c0:89:a9:9a:e6:23:f4:ee:bc:b7:29:
                    24:e2:c1:97:54:c7:31:d1:c3:3c:d0:7e:a4:47:85:
                    bc:95:ef:29:88:b2:f4:da:80:24:50:56:5f:ab:6b:
                    b6:de:f9:94:17:7d:cc:cd:38:65:b1:7b:cb:61:46:
                    6f:04:6d:9d:b1:46:c2:ff:53:db:de:b1:eb:4e:e8:
                    80:70:79:09:c5:99:a5:1a:36:f2:7f:3b:0f:d8:30:
                    74:ff:32:5a:84:b5:da:e4:ec:f8:4b:bd:77:96:bd:
                    2b:c4:72:21:98:d0:c3:93:1d:a1:2b:4b:f4:8a:f6:
                    91:cd:76:be:62:e6:cc:82:eb:17:de:7d:38:59:53:
                    6a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A4:81:5C:F3:D0:A0:FC:3A:F8:22:8C:B5:B4:C6:CF:5D:EB:A3:54
            X509v3 Authority Key Identifier:
                keyid:9D:FA:DC:ED:BD:6F:72:12:1F:B4:21:96:F6:1E:05:9A:1B:3D:2F:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/323830343a316239343a3230303a3a2f34302d3430203d3e203532393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b94:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         97:bf:2c:58:df:76:05:78:61:a9:cc:be:63:15:9a:13:c1:28:
         e8:dc:9c:55:8c:6c:97:16:10:5c:cf:0f:72:e7:e9:ac:3a:4e:
         6d:91:b4:6f:f8:dc:12:39:d4:cd:7d:bd:aa:8d:6a:c8:eb:03:
         93:4a:aa:25:f7:ea:07:76:b9:a0:6f:5f:58:2e:d5:72:e2:ee:
         35:8e:8a:c2:65:9f:e3:7d:03:a6:b0:78:f1:4d:c5:3a:ee:80:
         81:cf:11:d0:75:15:87:cb:94:2d:dc:8a:b9:13:8e:c4:5d:d2:
         37:1f:69:c8:61:15:2f:66:5d:93:b2:60:88:29:19:d0:d9:6a:
         df:c5:86:ee:af:08:ac:b4:48:2d:b7:ff:1a:34:cd:bd:91:a6:
         77:d4:71:35:62:81:28:0a:14:59:e9:04:21:74:60:97:49:e1:
         43:87:7e:44:8f:3a:0b:dc:d8:3f:6f:7d:f7:57:11:11:12:57:
         26:22:6a:d4:e9:b9:42:16:b7:69:50:cd:1c:e9:b9:1d:74:16:
         12:4a:20:ee:36:8c:9c:67:e4:e4:15:33:12:35:7c:9f:c7:9a:
         8c:ee:43:c1:72:f2:c0:28:dd:43:69:47:76:a4:51:5c:36:8c:
         d5:7c:5f:6b:91:a7:aa:70:ea:76:27:a2:77:a8:fc:71:b6:76:
         21:44:34:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:25:52 2026 by rpki-client