Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/323830343a316239343a3830303a3a2f34302d3430203d3e203532393734.roa
File:                     323830343a316239343a3830303a3a2f34302d3430203d3e203532393734.roa (raw, json)
Hash identifier:          Bx8fpBlVg6pMIRBRMKhZMc/xEPRfVhHRxVUvRKGvdd8=
Subject key identifier:   CB:F6:5D:4A:39:52:4D:E1:EA:DE:02:68:DC:D5:7A:78:C3:F6:1B:A4
Certificate issuer:       /CN=9DFADCEDBD6F72121FB42196F61E059A1B3D2F45
Certificate serial:       3D6E846716B42068073B4BC555C096323493EEA9
Authority key identifier: 9D:FA:DC:ED:BD:6F:72:12:1F:B4:21:96:F6:1E:05:9A:1B:3D:2F:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/323830343a316239343a3830303a3a2f34302d3430203d3e203532393734.roa
Signing time:             Mon 13 Apr 2026 13:53:53 +0000
ROA not before:           Mon 13 Apr 2026 13:48:53 +0000
ROA not after:            Mon 12 Apr 2027 13:53:53 +0000
asID:                     52974
IP address blocks:        2804:1b94:800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.crl
                          rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 15:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:6e:84:67:16:b4:20:68:07:3b:4b:c5:55:c0:96:32:34:93:ee:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DFADCEDBD6F72121FB42196F61E059A1B3D2F45
        Validity
            Not Before: Apr 13 13:48:53 2026 GMT
            Not After : Apr 12 13:53:53 2027 GMT
        Subject: CN=CBF65D4A39524DE1EADE0268DCD57A78C3F61BA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:14:b0:6d:c4:e5:c1:6c:13:a5:9d:69:88:fd:
                    4a:cb:31:a7:78:d8:41:49:75:9f:0d:a6:69:9a:24:
                    75:6c:14:9e:d3:5e:fc:16:16:bf:fc:88:04:c7:1f:
                    2a:b2:d0:e5:8d:e4:24:ea:b8:be:62:a0:12:c0:36:
                    9b:58:07:7a:cf:49:0a:84:00:01:44:c1:35:a9:46:
                    20:7f:c1:9f:0c:36:9c:88:31:63:3a:77:ce:72:63:
                    1d:4d:37:e3:c1:b4:dc:b5:e7:cd:c8:07:0e:d4:ec:
                    1c:c6:36:50:40:2e:99:cc:04:f9:65:b1:04:94:27:
                    9c:6e:6b:61:e9:b6:c7:1e:87:94:0a:13:7a:02:c1:
                    ab:35:b7:e3:80:c4:c0:e5:41:12:aa:9d:9a:d8:57:
                    87:8e:9e:fa:7d:39:91:b1:aa:5e:8d:2f:02:62:39:
                    62:98:44:c8:c6:eb:f4:75:06:36:8c:15:a0:6b:1f:
                    04:f7:e4:61:9e:5e:cf:19:56:e8:21:ff:1e:3e:cc:
                    d4:fa:b2:56:18:46:2e:23:1b:f2:b9:b5:a9:4c:9e:
                    79:c1:04:5c:4d:8d:e1:22:cf:ca:38:29:b1:12:e4:
                    35:5d:8a:2a:b1:73:fd:17:8f:54:13:17:d2:7a:1c:
                    cd:8f:de:15:b1:cf:b2:93:5d:5f:5c:93:b9:c9:d4:
                    79:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F6:5D:4A:39:52:4D:E1:EA:DE:02:68:DC:D5:7A:78:C3:F6:1B:A4
            X509v3 Authority Key Identifier:
                keyid:9D:FA:DC:ED:BD:6F:72:12:1F:B4:21:96:F6:1E:05:9A:1B:3D:2F:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/323830343a316239343a3830303a3a2f34302d3430203d3e203532393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b94:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         18:a8:52:c5:57:89:d0:53:ed:cf:4c:17:73:8d:c8:c5:de:28:
         61:61:04:36:62:7e:0d:13:2b:2a:19:13:97:b5:9b:2d:85:8b:
         00:6e:69:ba:1c:6d:65:76:fd:be:65:00:90:a8:a3:3c:4c:dc:
         eb:06:b4:fc:32:18:7e:75:7d:76:58:72:b4:0e:a9:a0:e4:01:
         3b:9e:46:b9:3a:13:e4:ef:b1:a6:39:b3:cf:28:c0:eb:73:92:
         ae:88:c1:4f:16:b6:b5:91:60:2c:4f:16:5b:83:e7:97:b7:7a:
         bf:4d:2c:ec:0d:e9:11:01:5f:59:b8:b6:4d:82:1d:2b:30:16:
         dc:f1:5a:33:14:83:1e:48:67:b5:d1:01:71:e1:14:3d:e7:4f:
         d9:ee:f9:53:57:dd:2d:99:ba:d1:81:79:ec:9a:85:d2:b0:9e:
         72:fa:cb:d3:ad:09:c4:76:c5:16:ae:12:37:80:2d:16:93:02:
         6c:6d:20:92:67:70:5a:88:ee:bd:b0:31:8d:3c:86:15:76:e1:
         8d:ba:10:e6:e1:1b:66:42:ab:86:cb:02:d1:48:1a:00:c8:ed:
         02:0a:7a:60:17:8a:81:2d:50:cb:c6:7f:1e:83:15:b8:96:1f:
         7f:8c:82:6f:10:57:7c:a6:09:a2:38:a7:e6:fa:b6:0d:b0:2c:
         5f:3d:73:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:25:51 2026 by rpki-client