Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EHWT29GHderZcjLH2BgXDDbqcBLtM2j8D1CcE3AbkKoP/0/323830343a346364633a3a2f33322d3438203d3e20323637333937.roa
File:                     323830343a346364633a3a2f33322d3438203d3e20323637333937.roa (raw, json)
Hash identifier:          6ZJDk3/hZOEPdlCOCz6Mbldnqh05MkGXDt1MV/PfLTM=
Subject key identifier:   66:41:9E:4B:45:9E:1F:7B:DF:4D:A2:94:CB:FA:CE:1D:94:38:01:4F
Certificate issuer:       /CN=0F91D797126CC38CA101187EE0D0F96A3EE7D0AB
Certificate serial:       69FACEDA793C3B87C84EE36BA0256AC246363AA0
Authority key identifier: 0F:91:D7:97:12:6C:C3:8C:A1:01:18:7E:E0:D0:F9:6A:3E:E7:D0:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F91D797126CC38CA101187EE0D0F96A3EE7D0AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EHWT29GHderZcjLH2BgXDDbqcBLtM2j8D1CcE3AbkKoP/0/323830343a346364633a3a2f33322d3438203d3e20323637333937.roa
Signing time:             Sat 11 Apr 2026 21:22:06 +0000
ROA not before:           Sat 11 Apr 2026 21:17:06 +0000
ROA not after:            Sat 10 Apr 2027 21:22:06 +0000
asID:                     267397
IP address blocks:        2804:4cdc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EHWT29GHderZcjLH2BgXDDbqcBLtM2j8D1CcE3AbkKoP/0/0F91D797126CC38CA101187EE0D0F96A3EE7D0AB.crl
                          rsync://rpki-repo.registro.br/repo/EHWT29GHderZcjLH2BgXDDbqcBLtM2j8D1CcE3AbkKoP/0/0F91D797126CC38CA101187EE0D0F96A3EE7D0AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F91D797126CC38CA101187EE0D0F96A3EE7D0AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 04:47:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:fa:ce:da:79:3c:3b:87:c8:4e:e3:6b:a0:25:6a:c2:46:36:3a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F91D797126CC38CA101187EE0D0F96A3EE7D0AB
        Validity
            Not Before: Apr 11 21:17:06 2026 GMT
            Not After : Apr 10 21:22:06 2027 GMT
        Subject: CN=66419E4B459E1F7BDF4DA294CBFACE1D9438014F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:be:d6:3e:99:43:a4:ef:89:af:a1:47:7a:a2:
                    d0:da:b9:7f:d5:c5:f6:20:e3:a0:47:30:b8:ce:50:
                    d6:d6:55:5c:51:c6:70:02:09:f6:a5:b5:bf:0e:fe:
                    0a:44:e7:2e:31:46:e9:1d:70:e3:b5:0a:1b:75:cd:
                    ae:7f:c0:51:ba:cc:26:b7:06:81:df:12:63:11:c9:
                    38:a3:6c:3f:f9:ea:3b:dd:8f:2e:20:29:49:a5:53:
                    07:60:72:21:44:48:bc:e0:c0:1d:97:1a:a8:4a:c8:
                    52:cf:ba:d9:bf:0c:d5:9b:03:54:44:15:f2:37:cd:
                    7d:52:1e:cc:aa:eb:0e:65:88:09:bc:0d:66:17:5a:
                    36:47:f1:8a:df:c1:b3:5f:27:31:13:33:97:69:f2:
                    11:fb:17:4b:ff:bc:09:96:6f:cd:f3:75:25:26:9c:
                    0b:cb:e7:d0:da:e6:02:c2:a9:16:2d:6f:48:21:34:
                    ae:26:6a:04:47:7f:88:1a:66:cf:8f:b6:7d:ef:a9:
                    20:36:0a:94:0e:a0:bb:c4:95:2c:d4:11:06:0e:f5:
                    b9:d5:1f:89:c3:63:9a:94:9f:26:d8:25:78:e0:7e:
                    d2:24:f2:f3:21:53:9b:d0:07:fc:fc:5c:b2:cb:f3:
                    9c:1f:52:30:f3:b2:c1:24:d7:0d:ea:89:a4:57:82:
                    54:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:41:9E:4B:45:9E:1F:7B:DF:4D:A2:94:CB:FA:CE:1D:94:38:01:4F
            X509v3 Authority Key Identifier:
                keyid:0F:91:D7:97:12:6C:C3:8C:A1:01:18:7E:E0:D0:F9:6A:3E:E7:D0:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EHWT29GHderZcjLH2BgXDDbqcBLtM2j8D1CcE3AbkKoP/0/0F91D797126CC38CA101187EE0D0F96A3EE7D0AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F91D797126CC38CA101187EE0D0F96A3EE7D0AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EHWT29GHderZcjLH2BgXDDbqcBLtM2j8D1CcE3AbkKoP/0/323830343a346364633a3a2f33322d3438203d3e20323637333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:25:8d:47:65:44:87:9c:86:10:5b:19:df:cc:32:73:25:73:
         62:22:21:90:37:ff:5c:b8:1a:12:b5:a5:e4:77:15:d5:b9:25:
         9b:1b:55:b0:72:14:aa:38:e4:29:b7:47:e6:3f:27:79:ad:f0:
         5f:f0:c9:fa:a0:fd:13:b3:3f:e7:a4:7f:76:fd:d8:b6:99:f0:
         af:94:c6:06:a1:f3:32:76:91:2b:b5:10:09:36:ab:90:42:6b:
         c2:51:e5:0b:74:3a:7b:3e:ff:59:12:e4:7a:1c:a1:0c:c9:34:
         94:5a:69:7c:54:21:50:09:35:a8:c1:05:5a:c6:cd:40:19:90:
         11:d4:3c:9e:f2:0e:9a:0a:be:25:f4:3c:09:77:4f:40:c6:51:
         9c:3d:34:34:70:2f:f7:4d:5b:59:70:45:4f:be:3f:a8:d6:85:
         60:c2:43:d8:a5:e9:d5:b7:ae:7e:10:11:8f:eb:77:1c:04:ae:
         94:a8:b8:5c:29:26:19:6b:9b:d5:a6:11:a3:f5:5e:f2:75:ec:
         bd:28:ec:20:e8:96:df:82:a7:50:b5:77:32:71:1b:c3:c4:a9:
         60:0f:72:f8:3e:72:bf:62:bc:71:4a:fa:65:95:f6:6c:8e:3c:
         9b:8d:31:24:c4:d7:bb:05:70:bc:f8:9b:c3:fb:a8:48:b1:b3:
         9b:1d:70:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:30:27 2026 by rpki-client