Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/323830343a333031633a323a3a2f34382d3438203d3e20323634393330.roa
File:                     323830343a333031633a323a3a2f34382d3438203d3e20323634393330.roa (raw, json)
Hash identifier:          cKiT1vINKoZM62TzOSGARzBcyZRIanBo02tbFFoqH+8=
Subject key identifier:   E1:E7:8F:CA:5B:69:78:77:95:DE:12:D9:7B:F5:A9:2F:A5:46:CA:E6
Certificate issuer:       /CN=39E1F5197664D9A2E3133424783F9B2651CB8874
Certificate serial:       364D1D9505A7CD03D0586858D07ABBDC8326134B
Authority key identifier: 39:E1:F5:19:76:64:D9:A2:E3:13:34:24:78:3F:9B:26:51:CB:88:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E1F5197664D9A2E3133424783F9B2651CB8874.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/323830343a333031633a323a3a2f34382d3438203d3e20323634393330.roa
Signing time:             Tue 14 Apr 2026 17:05:24 +0000
ROA not before:           Tue 14 Apr 2026 17:00:24 +0000
ROA not after:            Tue 13 Apr 2027 17:05:24 +0000
asID:                     264930
IP address blocks:        2804:301c:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/39E1F5197664D9A2E3133424783F9B2651CB8874.crl
                          rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/39E1F5197664D9A2E3133424783F9B2651CB8874.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E1F5197664D9A2E3133424783F9B2651CB8874.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 18:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:4d:1d:95:05:a7:cd:03:d0:58:68:58:d0:7a:bb:dc:83:26:13:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39E1F5197664D9A2E3133424783F9B2651CB8874
        Validity
            Not Before: Apr 14 17:00:24 2026 GMT
            Not After : Apr 13 17:05:24 2027 GMT
        Subject: CN=E1E78FCA5B69787795DE12D97BF5A92FA546CAE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:17:4b:b4:c6:fe:fa:05:fc:97:02:19:5f:c0:
                    c9:d5:82:fa:0d:ed:7e:81:a3:d1:a7:b0:07:28:10:
                    45:f9:2f:ea:1a:3b:86:a5:8c:0d:29:df:d7:ba:19:
                    dd:69:27:a7:6b:8a:01:cd:a1:47:e8:b9:51:84:59:
                    ae:67:8d:35:84:17:84:b9:58:c2:9c:21:94:cf:c9:
                    23:16:8b:72:cf:5b:a4:5d:5e:b7:24:74:e0:f7:9c:
                    ec:dd:22:4d:79:8b:4e:06:29:a4:ee:cb:c5:09:ca:
                    73:f8:af:a0:3f:50:8f:8b:4b:16:08:88:12:ce:e5:
                    43:a6:be:56:b7:ef:cd:64:ac:2f:da:07:a2:24:18:
                    dc:c6:88:36:37:77:f7:67:b8:1f:65:41:00:b9:aa:
                    c4:20:64:84:8f:3f:70:ce:75:e6:9d:87:53:f7:cd:
                    20:b7:34:11:a2:7c:6a:58:ef:44:fe:61:9b:74:06:
                    ca:aa:1d:6b:88:94:54:4d:82:14:1c:8d:26:a1:3a:
                    13:8f:e0:f9:35:d2:67:fb:48:ca:cc:c4:3c:cd:1e:
                    a5:54:d4:61:0d:e6:00:74:cf:29:c7:d0:3e:22:93:
                    74:8e:f2:61:74:12:62:81:e6:57:94:37:e2:9a:91:
                    71:d6:a4:4f:3d:6b:e9:61:c1:d5:64:ab:96:fe:0f:
                    42:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E7:8F:CA:5B:69:78:77:95:DE:12:D9:7B:F5:A9:2F:A5:46:CA:E6
            X509v3 Authority Key Identifier:
                keyid:39:E1:F5:19:76:64:D9:A2:E3:13:34:24:78:3F:9B:26:51:CB:88:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/39E1F5197664D9A2E3133424783F9B2651CB8874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E1F5197664D9A2E3133424783F9B2651CB8874.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/323830343a333031633a323a3a2f34382d3438203d3e20323634393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:301c:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:72:fb:6c:47:ed:ad:8e:bf:b5:ac:de:02:b6:d3:15:5a:40:
         3c:56:39:8d:1d:1b:cc:c8:39:24:72:d5:0a:c7:cf:36:fc:2e:
         71:0f:80:b8:7a:3a:ce:b8:5c:bf:83:b6:67:ab:9c:43:44:f9:
         9c:d1:b1:83:16:ea:86:ef:44:39:ee:1f:14:38:98:64:02:62:
         eb:f6:a9:3a:93:be:31:a5:4f:ff:51:d5:18:e7:b5:fb:d0:b2:
         6a:00:50:8d:bb:54:6e:97:45:09:21:37:14:fa:d6:18:f1:98:
         e8:e4:d7:63:36:33:41:e9:67:de:80:e4:d0:86:79:e2:04:c9:
         d0:a6:89:29:01:39:2b:15:72:d9:98:f1:de:12:a0:10:9d:dd:
         e5:8b:56:b8:7c:6c:af:cc:e2:a2:61:ff:88:8c:ec:19:50:d6:
         16:c0:8b:12:d9:75:af:19:8d:dd:4f:09:10:cb:43:4d:c0:0c:
         7d:aa:c6:2a:70:dd:06:e8:68:ec:b5:dd:6c:b5:a2:c6:5a:b9:
         72:1e:7c:64:d5:17:1c:b5:16:64:8d:b8:a9:fd:c1:77:e6:6f:
         87:bb:2c:ae:1c:10:be:18:16:c3:f9:0f:e4:53:81:05:aa:43:
         c7:89:40:76:59:ed:cf:e1:d4:9a:53:28:54:2b:07:18:77:9d:
         37:12:6c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:33:00 2026 by rpki-client