Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPQYZ4rixwRbnMJ2oGh9PEtZMBXrfGcsJ9nYbr6JCMyo/0/323830343a363639633a343030303a3a2f34302d313238203d3e20323639353731.roa
File:                     323830343a363639633a343030303a3a2f34302d313238203d3e20323639353731.roa (raw, json)
Hash identifier:          6rruxEuj8JgoufKFEoBCXqdC5d/bqSsGLXjqG64+Yko=
Subject key identifier:   CC:28:39:4D:35:61:21:0C:50:A2:E7:9E:7A:93:68:AC:F7:F9:C4:ED
Certificate issuer:       /CN=9F407F1B434DB0D66D6F7D3778029A9723E49B7E
Certificate serial:       35A7E5863EA5E09BC1775361F0DF1122DD1DF804
Authority key identifier: 9F:40:7F:1B:43:4D:B0:D6:6D:6F:7D:37:78:02:9A:97:23:E4:9B:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F407F1B434DB0D66D6F7D3778029A9723E49B7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPQYZ4rixwRbnMJ2oGh9PEtZMBXrfGcsJ9nYbr6JCMyo/0/323830343a363639633a343030303a3a2f34302d313238203d3e20323639353731.roa
Signing time:             Thu 09 Apr 2026 12:43:34 +0000
ROA not before:           Thu 09 Apr 2026 12:38:34 +0000
ROA not after:            Thu 08 Apr 2027 12:43:34 +0000
asID:                     269571
IP address blocks:        2804:669c:4000::/40 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPQYZ4rixwRbnMJ2oGh9PEtZMBXrfGcsJ9nYbr6JCMyo/0/9F407F1B434DB0D66D6F7D3778029A9723E49B7E.crl
                          rsync://rpki-repo.registro.br/repo/EPQYZ4rixwRbnMJ2oGh9PEtZMBXrfGcsJ9nYbr6JCMyo/0/9F407F1B434DB0D66D6F7D3778029A9723E49B7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F407F1B434DB0D66D6F7D3778029A9723E49B7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 05:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a7:e5:86:3e:a5:e0:9b:c1:77:53:61:f0:df:11:22:dd:1d:f8:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F407F1B434DB0D66D6F7D3778029A9723E49B7E
        Validity
            Not Before: Apr  9 12:38:34 2026 GMT
            Not After : Apr  8 12:43:34 2027 GMT
        Subject: CN=CC28394D3561210C50A2E79E7A9368ACF7F9C4ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3b:9c:43:c1:d7:39:9e:5f:96:70:f1:5c:9e:
                    65:50:77:98:31:44:9b:d7:8d:0a:14:32:d9:ed:75:
                    83:39:c9:69:02:3b:84:e8:05:b5:05:2a:70:7e:6e:
                    b5:4f:86:52:85:a7:4b:69:db:50:47:0c:84:34:65:
                    ca:82:16:2a:ad:11:c0:f0:76:e8:d0:87:ff:f3:0c:
                    81:0a:70:89:84:6c:62:1d:50:d3:39:2e:c4:99:e1:
                    47:59:62:66:8f:2d:b5:87:eb:9c:b7:df:b3:88:4c:
                    67:8e:69:4b:e3:c1:3c:c5:02:ee:83:91:fd:f9:1d:
                    97:a3:63:f7:55:03:ac:ea:48:19:fd:39:90:b0:7a:
                    b0:ae:74:92:2e:d1:ae:92:ef:fd:81:81:a0:84:4e:
                    79:5a:a2:25:66:99:4c:0e:66:da:7e:c6:cb:88:f4:
                    37:5f:b3:1f:68:a4:42:b6:c5:4f:2f:87:c0:b9:66:
                    3a:df:23:d1:4d:df:26:ba:79:f3:21:58:46:7c:1c:
                    3d:dc:66:08:c2:00:d0:d1:97:1f:c2:f6:f6:4b:e9:
                    98:d1:e7:b9:48:03:f8:ad:10:ca:cf:3b:69:37:44:
                    e8:5f:04:95:e9:7a:ee:9b:b0:7e:21:c2:ac:2f:bc:
                    ee:4a:37:5e:64:37:b3:cf:6b:9f:cb:e1:82:91:38:
                    13:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:28:39:4D:35:61:21:0C:50:A2:E7:9E:7A:93:68:AC:F7:F9:C4:ED
            X509v3 Authority Key Identifier:
                keyid:9F:40:7F:1B:43:4D:B0:D6:6D:6F:7D:37:78:02:9A:97:23:E4:9B:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPQYZ4rixwRbnMJ2oGh9PEtZMBXrfGcsJ9nYbr6JCMyo/0/9F407F1B434DB0D66D6F7D3778029A9723E49B7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F407F1B434DB0D66D6F7D3778029A9723E49B7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPQYZ4rixwRbnMJ2oGh9PEtZMBXrfGcsJ9nYbr6JCMyo/0/323830343a363639633a343030303a3a2f34302d313238203d3e20323639353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:669c:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         84:1a:ff:39:b0:0e:54:20:b2:eb:5c:93:69:93:5b:ac:83:22:
         23:59:0b:f0:c2:fe:b5:7a:78:47:54:8f:a6:ee:5b:2d:ef:7a:
         07:1b:0b:bd:15:96:cf:b7:0c:d7:05:8e:3f:53:59:a9:30:77:
         40:73:25:5f:cc:8e:3c:8f:7f:98:e2:3a:f3:d0:f2:fa:3f:fc:
         98:2e:fe:9e:58:a2:08:23:74:c6:8b:3f:4a:bd:56:55:34:f4:
         be:2f:7b:32:73:41:52:9c:17:85:2b:6c:17:95:d9:25:bf:72:
         60:d9:95:ae:47:e2:bc:28:b6:9e:00:6b:65:dc:53:8e:28:87:
         c7:c2:3f:55:7a:8b:22:4f:30:31:c3:ae:d9:ee:52:0d:76:6c:
         7c:dd:a4:84:00:eb:57:37:be:16:35:d6:76:66:bc:53:12:ad:
         22:a3:97:89:11:01:78:8c:b8:3f:1f:b5:7b:ce:ed:db:72:90:
         70:b4:02:3a:b5:c9:c2:8a:5f:5e:66:aa:ae:0e:1a:a4:c7:f6:
         4e:2a:4b:3b:17:e7:27:e9:cc:db:90:ef:6e:a6:08:39:27:14:
         d9:e7:04:38:b9:23:40:43:5b:6d:e8:b4:6d:e7:1a:66:7c:aa:
         9a:f2:44:07:6c:4a:a8:dd:74:24:e5:5a:4d:0f:67:1e:2a:6a:
         b8:d6:12:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:58:07 2026 by rpki-client