Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/323830343a346165383a3a2f33322d3438203d3e20323637323731.roa
File:                     323830343a346165383a3a2f33322d3438203d3e20323637323731.roa (raw, json)
Hash identifier:          lyeXkyC0AxXjl3THfGd74o0tlzTWVwHROjPg42IUXy8=
Subject key identifier:   4B:EC:E8:DB:67:CC:F2:B2:1E:44:F2:68:27:0B:3B:C5:14:00:50:21
Certificate issuer:       /CN=C6620B708EF3BD812FB9F630AE3D9F62BD82A660
Certificate serial:       7F690C8F489A118EDAAA8D3F4FE0C371D4471B79
Authority key identifier: C6:62:0B:70:8E:F3:BD:81:2F:B9:F6:30:AE:3D:9F:62:BD:82:A6:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6620B708EF3BD812FB9F630AE3D9F62BD82A660.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/323830343a346165383a3a2f33322d3438203d3e20323637323731.roa
Signing time:             Wed 08 Apr 2026 12:41:07 +0000
ROA not before:           Wed 08 Apr 2026 12:36:07 +0000
ROA not after:            Wed 07 Apr 2027 12:41:07 +0000
asID:                     267271
IP address blocks:        2804:4ae8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/C6620B708EF3BD812FB9F630AE3D9F62BD82A660.crl
                          rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/C6620B708EF3BD812FB9F630AE3D9F62BD82A660.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6620B708EF3BD812FB9F630AE3D9F62BD82A660.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 10:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:69:0c:8f:48:9a:11:8e:da:aa:8d:3f:4f:e0:c3:71:d4:47:1b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6620B708EF3BD812FB9F630AE3D9F62BD82A660
        Validity
            Not Before: Apr  8 12:36:07 2026 GMT
            Not After : Apr  7 12:41:07 2027 GMT
        Subject: CN=4BECE8DB67CCF2B21E44F268270B3BC514005021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:68:fb:f5:04:f7:3c:b3:69:f5:61:b5:3e:79:
                    42:fa:10:fa:fc:1c:f8:23:ed:d3:c2:22:84:46:2d:
                    28:e2:49:e0:8d:df:30:05:32:53:97:39:6a:6d:74:
                    a8:41:5a:50:a5:03:34:01:50:92:56:f2:45:e9:55:
                    05:28:6c:5b:39:8b:7c:08:eb:80:24:22:f2:87:13:
                    27:14:70:08:e7:20:d7:79:b7:44:f9:fd:94:af:9d:
                    0f:7f:5e:ce:13:32:a2:82:b3:53:72:1a:2c:ad:91:
                    2c:a7:2f:ef:f9:7e:7a:d8:14:eb:c3:cd:97:36:cf:
                    12:89:d3:e2:67:4a:bf:f1:43:25:93:6b:a1:2c:3d:
                    49:5f:ed:13:26:5c:5f:de:ea:06:06:83:5d:3f:a2:
                    39:28:aa:65:35:45:34:c6:fb:92:10:7f:df:3e:60:
                    73:fa:d4:02:ac:f0:49:5b:9b:30:89:29:fd:b3:a3:
                    21:c9:16:be:bf:df:b2:77:36:7b:e8:60:a2:4d:cd:
                    d1:42:ad:db:53:8e:bf:45:e8:06:82:e1:83:f5:07:
                    c0:91:ef:e1:4c:e3:4a:eb:87:9d:c6:ce:fe:12:05:
                    c4:66:82:b2:72:0e:13:4c:b4:5a:34:4e:4f:65:98:
                    65:1f:b6:0f:a0:3e:a1:2c:7c:c4:26:d2:5f:b7:50:
                    1c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:EC:E8:DB:67:CC:F2:B2:1E:44:F2:68:27:0B:3B:C5:14:00:50:21
            X509v3 Authority Key Identifier:
                keyid:C6:62:0B:70:8E:F3:BD:81:2F:B9:F6:30:AE:3D:9F:62:BD:82:A6:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/C6620B708EF3BD812FB9F630AE3D9F62BD82A660.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6620B708EF3BD812FB9F630AE3D9F62BD82A660.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/323830343a346165383a3a2f33322d3438203d3e20323637323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ae8::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:d3:9b:d6:d3:3b:90:c5:12:f0:17:71:86:89:4f:d6:62:8a:
         4b:28:69:12:2e:1a:85:58:02:76:42:0e:f1:56:01:01:42:03:
         8c:93:20:d1:90:d2:1b:67:c5:0a:ae:05:0a:a5:3e:4a:9f:52:
         0d:20:27:cf:3c:af:f9:5b:66:36:27:6e:fd:44:0d:d3:68:04:
         34:e8:62:9f:79:54:09:80:37:5e:c6:04:45:e1:f3:bc:59:0a:
         7c:a7:44:b2:c7:12:db:fb:0f:e9:84:5f:3f:c6:89:4e:2a:29:
         03:b4:68:68:8d:36:6c:1e:49:13:1b:52:b1:5b:9d:2b:c4:f8:
         71:0c:26:30:1e:11:63:b2:cd:d0:71:4f:13:9d:43:cf:d2:df:
         e0:a0:62:42:98:f9:de:03:6c:7d:6b:49:03:a1:88:2b:1c:25:
         dc:de:b0:e4:a9:92:df:e6:9b:9e:2f:1d:e5:6e:ef:ca:9e:76:
         7a:c7:53:f5:c0:aa:3d:6c:95:5a:00:90:71:5d:3e:19:ba:e3:
         84:ae:ec:8b:1e:b8:1a:9c:2c:43:2a:04:3c:8a:f2:30:e6:b4:
         f3:a4:0c:ae:36:71:a8:18:03:07:89:56:fe:eb:c5:2f:12:6f:
         91:9a:d9:f9:5b:7b:19:67:73:8f:67:38:92:c3:f2:22:e2:47:
         73:71:b4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:39:28 2026 by rpki-client