Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/323830343a363364633a3a2f33362d3336203d3e20323639333838.roa
File:                     323830343a363364633a3a2f33362d3336203d3e20323639333838.roa (raw, json)
Hash identifier:          7udJvFGnlYbZRFpEwlh/0Q123JnMsq/tctkh6WYkB3s=
Subject key identifier:   8F:25:B6:C7:84:93:1D:8C:2B:9D:D3:51:82:9F:C2:5C:FE:AB:41:23
Certificate issuer:       /CN=44E353DE84ED32E4B3AA90C51D0D657FE56A7F86
Certificate serial:       219B87DCD0BD4E4B4F1FACF1D668C009E1CF43C3
Authority key identifier: 44:E3:53:DE:84:ED:32:E4:B3:AA:90:C5:1D:0D:65:7F:E5:6A:7F:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44E353DE84ED32E4B3AA90C51D0D657FE56A7F86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/323830343a363364633a3a2f33362d3336203d3e20323639333838.roa
Signing time:             Thu 16 Apr 2026 11:54:00 +0000
ROA not before:           Thu 16 Apr 2026 11:49:00 +0000
ROA not after:            Thu 15 Apr 2027 11:54:00 +0000
asID:                     269388
IP address blocks:        2804:63dc::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/44E353DE84ED32E4B3AA90C51D0D657FE56A7F86.crl
                          rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/44E353DE84ED32E4B3AA90C51D0D657FE56A7F86.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44E353DE84ED32E4B3AA90C51D0D657FE56A7F86.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 01:38:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:9b:87:dc:d0:bd:4e:4b:4f:1f:ac:f1:d6:68:c0:09:e1:cf:43:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44E353DE84ED32E4B3AA90C51D0D657FE56A7F86
        Validity
            Not Before: Apr 16 11:49:00 2026 GMT
            Not After : Apr 15 11:54:00 2027 GMT
        Subject: CN=8F25B6C784931D8C2B9DD351829FC25CFEAB4123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ff:48:06:69:e4:e0:f7:8b:95:13:7b:0a:7e:
                    59:ce:3e:a3:81:c8:5e:b7:96:2a:01:21:8d:be:d2:
                    13:31:4f:01:f3:48:16:09:bd:e9:7d:4b:2b:f2:2e:
                    f0:83:c0:cb:65:de:67:bb:d0:49:73:2b:3f:a9:ff:
                    8d:57:2c:3a:8d:21:8d:b1:b4:4c:b3:d8:08:aa:23:
                    7f:8a:99:f4:ed:4e:6e:cd:65:b4:23:ed:5e:ca:10:
                    88:a2:e3:50:1c:d0:b0:42:ce:f2:9f:d7:38:44:ec:
                    29:f8:7d:1c:19:7b:60:ce:6d:77:4e:71:70:bc:ca:
                    89:c8:08:ed:4b:98:04:98:0f:49:20:74:e1:6f:7d:
                    1f:96:eb:79:7c:78:13:f1:f1:8d:bf:12:97:5c:43:
                    e6:ce:f5:30:6b:0a:7c:1f:d2:c8:00:cc:43:5b:b5:
                    de:ff:fe:12:08:aa:90:92:cd:77:c7:d3:9f:c0:ec:
                    2c:1c:fd:2e:21:1a:a0:ef:cb:49:61:91:09:74:00:
                    70:3b:24:ba:d4:cf:87:0a:ba:e3:c8:c3:57:34:b5:
                    92:ad:91:50:b7:e0:30:2a:6d:54:2a:a3:34:11:28:
                    1f:ba:d5:b1:55:9a:96:cc:60:49:dd:49:43:72:bf:
                    c9:0f:89:38:2b:5e:cc:df:cb:49:ad:75:81:ca:6f:
                    fd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:25:B6:C7:84:93:1D:8C:2B:9D:D3:51:82:9F:C2:5C:FE:AB:41:23
            X509v3 Authority Key Identifier:
                keyid:44:E3:53:DE:84:ED:32:E4:B3:AA:90:C5:1D:0D:65:7F:E5:6A:7F:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/44E353DE84ED32E4B3AA90C51D0D657FE56A7F86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44E353DE84ED32E4B3AA90C51D0D657FE56A7F86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FixtpDkLrEroP11XfaRgnoqRGWnobpT29mMmtBYhEQUg/0/323830343a363364633a3a2f33362d3336203d3e20323639333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63dc::/36

    Signature Algorithm: sha256WithRSAEncryption
         53:96:87:24:ab:f6:8e:23:f1:12:4a:13:ca:99:88:40:5e:c2:
         8e:49:be:fd:0f:f5:0c:c0:25:29:b9:e3:4e:44:e8:c0:14:1a:
         21:b7:b5:28:2d:2d:bc:f0:a1:d3:67:69:34:56:f3:c4:9f:3a:
         06:bc:5c:7c:cb:fa:b8:b6:67:c6:4f:4f:e7:87:37:ad:42:be:
         22:af:07:82:3a:21:3e:11:e8:c5:d3:0d:53:fa:2e:68:0e:9a:
         c1:03:7b:b3:2f:63:03:87:ad:a2:7b:05:18:01:ab:b1:b5:02:
         19:92:2c:23:95:cd:55:38:a9:7b:ff:17:d4:c4:78:7a:8b:b9:
         a8:b6:b6:92:ac:18:5c:ef:27:d6:52:90:32:8a:9b:1a:7e:40:
         57:33:8a:eb:eb:1c:8f:20:ef:ec:8f:3e:76:ec:d5:06:89:96:
         3a:c3:99:35:2f:31:f7:00:1b:19:78:f8:cc:83:57:d6:25:a1:
         6a:3e:2d:3d:71:06:74:13:38:bb:15:15:71:f3:50:cd:ca:9b:
         ea:8d:02:ee:c4:d9:77:25:de:61:e8:d6:26:b4:93:99:70:b9:
         fc:66:61:1d:98:f4:4f:bb:80:03:a8:77:bd:c9:4e:72:e6:76:
         db:ec:6e:db:c8:9d:de:d4:56:d4:99:94:b6:58:2e:46:79:42:
         a0:4d:e4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:54:01 2026 by rpki-client