Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/323830343a316535343a3a2f33322d3536203d3e203532373436.roa
File:                     323830343a316535343a3a2f33322d3536203d3e203532373436.roa (raw, json)
Hash identifier:          zi3f/Ql5sqEuD6EIb9wK7hzX12gt6EAFzO3Ws8xixp0=
Subject key identifier:   96:3A:1B:9E:0E:15:B8:94:D8:54:73:18:1D:92:9F:B8:CC:5B:9F:4A
Certificate issuer:       /CN=DFB1F3FA6F420DF0190552FC0972859AF45F368E
Certificate serial:       67AFE79536E975D69B147BC8C10147CB43EE489D
Authority key identifier: DF:B1:F3:FA:6F:42:0D:F0:19:05:52:FC:09:72:85:9A:F4:5F:36:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB1F3FA6F420DF0190552FC0972859AF45F368E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/323830343a316535343a3a2f33322d3536203d3e203532373436.roa
Signing time:             Sat 18 Apr 2026 01:56:41 +0000
ROA not before:           Sat 18 Apr 2026 01:51:41 +0000
ROA not after:            Sat 17 Apr 2027 01:56:41 +0000
asID:                     52746
IP address blocks:        2804:1e54::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.crl
                          rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB1F3FA6F420DF0190552FC0972859AF45F368E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 05:23:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:af:e7:95:36:e9:75:d6:9b:14:7b:c8:c1:01:47:cb:43:ee:48:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFB1F3FA6F420DF0190552FC0972859AF45F368E
        Validity
            Not Before: Apr 18 01:51:41 2026 GMT
            Not After : Apr 17 01:56:41 2027 GMT
        Subject: CN=963A1B9E0E15B894D85473181D929FB8CC5B9F4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6e:17:f2:97:00:13:33:cf:75:cc:9e:27:97:
                    a9:9e:2c:b2:f1:46:7d:f3:aa:1e:b2:8f:39:00:52:
                    7d:6f:a4:08:e6:63:54:a8:7f:61:c4:87:46:9e:df:
                    b1:32:cf:58:5a:5f:0e:f8:da:00:74:ba:4d:58:50:
                    95:9a:c9:84:6c:9b:a4:35:b9:b0:50:bb:ec:ee:b6:
                    68:fc:02:3c:31:23:27:56:65:85:e1:da:19:ec:fe:
                    59:a9:b4:da:6c:5b:ea:6d:4a:9b:cd:95:67:46:de:
                    83:43:3d:f4:8a:1c:66:c0:ee:fa:94:e6:c5:27:6f:
                    5d:36:94:0f:23:86:a8:cd:ba:b3:94:a1:aa:b6:3a:
                    fa:b2:f8:82:bf:ee:5f:92:9e:39:94:d0:08:02:e9:
                    da:9c:04:0c:28:87:06:77:51:ff:a0:1f:23:0d:b9:
                    e3:25:e8:02:2a:ff:ba:05:c0:d0:96:4d:07:08:87:
                    2e:d7:ab:82:76:4b:c3:4b:39:7a:f7:5f:6b:59:bc:
                    09:e0:0a:d9:45:84:a4:16:c6:7e:8b:be:72:6f:39:
                    f0:80:2e:f8:c5:39:9d:1f:65:56:57:ac:aa:a9:2c:
                    63:d0:10:82:65:54:a4:2e:1f:f9:ae:30:1f:d9:e1:
                    27:18:18:4c:b5:89:11:14:db:a4:8b:13:29:63:08:
                    bc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:3A:1B:9E:0E:15:B8:94:D8:54:73:18:1D:92:9F:B8:CC:5B:9F:4A
            X509v3 Authority Key Identifier:
                keyid:DF:B1:F3:FA:6F:42:0D:F0:19:05:52:FC:09:72:85:9A:F4:5F:36:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB1F3FA6F420DF0190552FC0972859AF45F368E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/323830343a316535343a3a2f33322d3536203d3e203532373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e54::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:a7:54:49:ab:d0:a9:10:f9:5c:59:eb:db:e3:46:32:d7:2a:
         39:aa:e0:00:07:41:9d:f3:a4:d8:15:90:d9:e8:45:88:c7:8b:
         6d:ad:2e:6f:b8:4a:b9:3e:46:92:17:07:59:38:0a:17:e9:c3:
         2d:51:a0:f1:18:3b:59:eb:54:7b:03:03:ac:a7:6c:c7:d8:ca:
         8e:fa:e4:f8:49:98:4a:6c:86:27:87:26:ae:32:7c:c0:db:46:
         4e:66:cc:fc:b4:f8:2c:81:7c:b9:77:b2:6d:a9:e3:de:69:f7:
         45:c3:57:3a:a7:b2:46:3d:a5:e6:4c:55:fc:c8:24:86:4b:ed:
         9c:ef:f9:be:a0:44:a4:cc:d7:bc:4a:a3:68:3a:8d:af:a9:bf:
         5f:22:05:2d:67:1e:52:12:f3:77:ae:66:22:04:c3:5c:f0:a6:
         bb:bf:e5:7b:da:9c:e1:2c:e4:38:e1:7d:e5:aa:01:49:4e:6a:
         62:f2:5c:e6:9d:98:fd:b3:38:3d:f8:0e:73:8a:96:02:22:a8:
         4f:fe:99:35:90:63:08:ae:ba:2d:17:e1:d7:9a:59:c3:c6:7c:
         54:3e:cd:10:e6:de:41:b7:85:5c:e3:34:91:62:71:3d:bc:f9:
         2d:28:95:08:8e:07:43:98:d3:ec:47:b9:7f:6a:95:f6:e2:ee:
         ea:dc:c6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:32:49 2026 by rpki-client