Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/323830343a316239343a3530303a3a2f34302d3430203d3e203532393734.roa
File:                     323830343a316239343a3530303a3a2f34302d3430203d3e203532393734.roa (raw, json)
Hash identifier:          bKJJ3+xx1SNdu+esZ1chXCHuJOLZUpD/BGu9AIpWJTs=
Subject key identifier:   F4:EF:B2:73:CB:81:A9:68:0D:58:3B:62:4C:88:60:2F:F9:E6:01:16
Certificate issuer:       /CN=9DFADCEDBD6F72121FB42196F61E059A1B3D2F45
Certificate serial:       5C6A2E75EBD42BF91678FE4B45590D0AD9AA2473
Authority key identifier: 9D:FA:DC:ED:BD:6F:72:12:1F:B4:21:96:F6:1E:05:9A:1B:3D:2F:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/323830343a316239343a3530303a3a2f34302d3430203d3e203532393734.roa
Signing time:             Mon 13 Apr 2026 13:53:53 +0000
ROA not before:           Mon 13 Apr 2026 13:48:53 +0000
ROA not after:            Mon 12 Apr 2027 13:53:53 +0000
asID:                     52974
IP address blocks:        2804:1b94:500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.crl
                          rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 15:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:6a:2e:75:eb:d4:2b:f9:16:78:fe:4b:45:59:0d:0a:d9:aa:24:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DFADCEDBD6F72121FB42196F61E059A1B3D2F45
        Validity
            Not Before: Apr 13 13:48:53 2026 GMT
            Not After : Apr 12 13:53:53 2027 GMT
        Subject: CN=F4EFB273CB81A9680D583B624C88602FF9E60116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:39:5a:68:23:24:20:c8:a2:f3:5e:41:ba:d8:
                    cc:f3:4f:98:a8:e1:ce:21:58:7a:23:a3:e6:cf:12:
                    35:d6:70:bd:17:82:77:51:cd:15:32:ad:66:46:d9:
                    ef:c5:ca:ea:f1:d7:35:09:63:e7:27:3c:ce:e4:b8:
                    5a:74:47:bd:49:bd:1e:d6:c4:c8:6d:b9:a8:2a:81:
                    eb:1e:dc:ae:fe:1e:d1:85:e4:3d:fd:79:59:76:02:
                    f2:3b:14:9f:07:5e:42:0f:cd:29:92:5d:b9:26:cf:
                    d5:3d:2b:f7:31:6e:93:ee:2e:29:f2:10:6f:e8:de:
                    c3:d1:dc:a1:ae:47:15:cb:02:97:5e:9e:53:0e:57:
                    2f:a2:8a:28:2b:c1:18:d1:f5:8c:b3:da:b5:63:49:
                    16:75:69:4f:71:8b:23:2a:d1:fa:dc:85:10:40:a6:
                    78:30:66:d9:25:cd:91:96:93:dc:1c:d1:0b:55:de:
                    aa:99:71:d2:92:12:22:42:fa:5e:3b:01:ee:96:4f:
                    02:0d:21:3b:c2:c7:a0:e0:6d:9a:88:81:3b:cd:13:
                    11:85:0c:7a:87:29:ba:e4:33:e8:03:53:0c:39:33:
                    5b:cf:a4:6c:6c:77:da:4f:7e:af:e2:55:fc:30:07:
                    d7:74:69:d9:3f:28:83:e5:53:4e:03:6b:2f:97:43:
                    b5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:EF:B2:73:CB:81:A9:68:0D:58:3B:62:4C:88:60:2F:F9:E6:01:16
            X509v3 Authority Key Identifier:
                keyid:9D:FA:DC:ED:BD:6F:72:12:1F:B4:21:96:F6:1E:05:9A:1B:3D:2F:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/323830343a316239343a3530303a3a2f34302d3430203d3e203532393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b94:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         3c:ee:24:81:74:82:a5:99:7c:87:6c:79:3e:f2:32:ae:5f:63:
         1d:f8:b2:9e:a3:2a:f6:03:1f:5c:73:04:87:14:19:d5:4a:27:
         84:0e:0d:6e:da:b6:bb:63:0f:f5:4a:1f:d6:be:61:9b:1f:ec:
         08:ce:f7:d1:19:af:4f:dd:a0:f3:d8:b2:a1:3d:4d:30:65:52:
         1c:47:be:55:b8:bc:80:a5:6c:31:3e:ea:d8:cf:b5:39:c4:eb:
         f9:34:7d:60:d3:d1:de:95:ed:87:75:22:2a:fb:6a:1b:a6:f0:
         e5:09:5c:d6:28:41:be:a7:81:f6:97:9c:61:bb:cd:76:15:26:
         f7:85:35:b5:e9:9e:16:fc:36:0e:1a:fd:dd:21:80:d8:89:22:
         15:76:36:80:35:f1:2c:fc:65:17:34:d6:96:9a:21:2b:5d:61:
         82:74:b3:c3:4e:a7:bb:29:54:1a:d6:a6:de:6a:99:b8:8e:86:
         b4:f9:88:6d:1b:eb:df:c5:dc:53:fa:ab:9d:0f:23:f5:5b:db:
         ff:be:72:8f:b2:73:02:3b:b2:b4:ad:b8:b9:41:b8:0e:e7:ea:
         12:29:5c:8a:27:3f:06:1f:4e:ab:12:48:7b:a7:c4:41:9d:d0:
         4d:a5:2e:81:b7:56:ac:7f:89:f1:64:81:b0:57:d9:03:1c:78:
         81:4f:15:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:25:23 2026 by rpki-client