Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ReLAaV4xbkck6iW8RecStyxe3RA6N5h7hcDXABxYi5u/0/323830343a363431343a3a2f33322d313238203d3e20323639343033.roa
File:                     323830343a363431343a3a2f33322d313238203d3e20323639343033.roa (raw, json)
Hash identifier:          3od39eYAU9DIrD/2lzTY2HZ0NAWB+Ckll9tWXCfqQk4=
Subject key identifier:   54:3C:E3:9C:32:7E:BA:DA:E8:CF:AC:E3:63:79:3A:FF:D0:E6:17:77
Certificate issuer:       /CN=46E84850835B7708ECE5E3073FFEA7A8DF9BEA60
Certificate serial:       2FCB4FFE41CB1481CD7421E5B52F0077CDBCD844
Authority key identifier: 46:E8:48:50:83:5B:77:08:EC:E5:E3:07:3F:FE:A7:A8:DF:9B:EA:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46E84850835B7708ECE5E3073FFEA7A8DF9BEA60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ReLAaV4xbkck6iW8RecStyxe3RA6N5h7hcDXABxYi5u/0/323830343a363431343a3a2f33322d313238203d3e20323639343033.roa
Signing time:             Mon 13 Apr 2026 15:01:11 +0000
ROA not before:           Mon 13 Apr 2026 14:56:11 +0000
ROA not after:            Mon 12 Apr 2027 15:01:11 +0000
asID:                     269403
IP address blocks:        2804:6414::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ReLAaV4xbkck6iW8RecStyxe3RA6N5h7hcDXABxYi5u/0/46E84850835B7708ECE5E3073FFEA7A8DF9BEA60.crl
                          rsync://rpki-repo.registro.br/repo/ReLAaV4xbkck6iW8RecStyxe3RA6N5h7hcDXABxYi5u/0/46E84850835B7708ECE5E3073FFEA7A8DF9BEA60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46E84850835B7708ECE5E3073FFEA7A8DF9BEA60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 12:04:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:cb:4f:fe:41:cb:14:81:cd:74:21:e5:b5:2f:00:77:cd:bc:d8:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46E84850835B7708ECE5E3073FFEA7A8DF9BEA60
        Validity
            Not Before: Apr 13 14:56:11 2026 GMT
            Not After : Apr 12 15:01:11 2027 GMT
        Subject: CN=543CE39C327EBADAE8CFACE363793AFFD0E61777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3a:01:3a:3e:df:6b:d3:e9:e8:6f:e5:19:f1:
                    9d:f7:31:06:ef:ad:b8:e2:ba:60:8b:1c:53:d7:54:
                    b7:3e:85:2f:34:a1:3a:2a:d9:c3:3a:bc:52:cb:fa:
                    48:66:44:c4:d1:19:a6:ff:41:4d:76:e5:44:87:f5:
                    e4:bc:2b:6f:d7:bc:12:c3:76:65:6a:42:3f:cc:29:
                    1e:f5:7e:b5:b9:d2:0c:a3:22:4c:ff:f4:09:07:91:
                    6b:c3:13:d1:b0:ab:3f:d3:aa:fa:a0:8e:9c:67:37:
                    6c:58:74:e2:ac:2d:cc:d7:b7:b9:5e:8b:85:11:57:
                    35:db:70:71:0e:e3:d1:7b:ae:5f:b6:37:c6:9c:94:
                    5d:09:f3:82:24:5e:19:38:82:93:55:f9:81:50:50:
                    06:ef:aa:03:8c:5c:83:cb:b9:85:dd:df:a6:ce:4b:
                    52:23:01:18:32:09:16:3b:e7:fb:67:af:23:60:c2:
                    b0:d0:5b:16:c9:6f:a7:12:4f:5c:7c:5d:d8:ff:5e:
                    24:56:a0:87:80:a2:4f:7e:ca:d7:2c:00:f3:85:03:
                    c5:07:34:4b:ce:b0:2a:92:53:6c:f9:5f:2d:58:ca:
                    36:c7:d5:33:d5:51:be:91:ce:6d:be:c4:fe:b1:a6:
                    a9:de:3b:b6:c0:a6:5e:59:60:a4:25:a4:85:cf:ee:
                    83:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3C:E3:9C:32:7E:BA:DA:E8:CF:AC:E3:63:79:3A:FF:D0:E6:17:77
            X509v3 Authority Key Identifier:
                keyid:46:E8:48:50:83:5B:77:08:EC:E5:E3:07:3F:FE:A7:A8:DF:9B:EA:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ReLAaV4xbkck6iW8RecStyxe3RA6N5h7hcDXABxYi5u/0/46E84850835B7708ECE5E3073FFEA7A8DF9BEA60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46E84850835B7708ECE5E3073FFEA7A8DF9BEA60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ReLAaV4xbkck6iW8RecStyxe3RA6N5h7hcDXABxYi5u/0/323830343a363431343a3a2f33322d313238203d3e20323639343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6414::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:d3:1e:78:a0:26:a9:18:f3:dd:c1:ec:58:0f:7d:24:a0:06:
         a9:9d:57:8f:b1:fc:9b:b0:10:11:f6:32:08:38:45:2c:5f:04:
         43:b9:68:f2:ed:b1:b0:6c:be:b4:78:2c:4c:ff:92:e3:87:c0:
         0d:54:30:3d:e9:db:80:0f:f1:46:80:51:57:6c:42:f5:14:0d:
         15:4c:1d:66:64:af:10:b5:dd:22:92:4c:89:33:f4:98:f2:69:
         9f:90:5e:28:18:82:04:5a:e1:5f:97:cd:ec:7a:a6:fa:2d:f0:
         d8:24:0e:bf:1b:8e:df:a9:f9:e7:c9:f4:70:6a:d6:78:e1:2b:
         09:1d:ce:5f:4b:76:78:9e:d5:0b:21:28:9c:8b:6b:4b:1b:f3:
         cb:b2:6b:be:34:13:5b:27:46:79:5f:c7:9d:4c:95:b5:95:9f:
         2e:bc:d6:8e:c3:8e:c2:65:b0:de:de:07:fd:07:81:5f:7b:5e:
         85:a4:2b:63:e6:a9:85:06:a6:48:c0:7d:de:9a:cf:9d:21:bc:
         ec:c9:64:00:c0:7e:84:9e:af:b4:da:b0:0b:4d:bd:37:47:fd:
         aa:ae:b4:b3:28:c7:13:c4:71:c3:e9:42:22:26:f3:e6:4f:e2:
         79:8c:0d:0a:5f:32:7f:d4:09:80:b4:bc:34:c5:c4:00:9c:a8:
         4e:d8:ad:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:28:15 2026 by rpki-client