Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/323830343a386566383a343030303a3a2f33342d3334203d3e20323733343539.roa
File:                     323830343a386566383a343030303a3a2f33342d3334203d3e20323733343539.roa (raw, json)
Hash identifier:          JKwDpZ2hYg3Qpjw4a5spZeKB70ZBBiccngaPCyL7lYo=
Subject key identifier:   90:21:3A:2C:CB:3F:AF:D9:5C:9A:45:9D:DA:21:56:FB:92:0C:B6:A4
Certificate issuer:       /CN=047440DF40D4D04F7AE139641FA3E434EAF26718
Certificate serial:       07A17D95586207DBC9A8EDBDF4C44AAAB2EBFE2C
Authority key identifier: 04:74:40:DF:40:D4:D0:4F:7A:E1:39:64:1F:A3:E4:34:EA:F2:67:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/047440DF40D4D04F7AE139641FA3E434EAF26718.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/323830343a386566383a343030303a3a2f33342d3334203d3e20323733343539.roa
Signing time:             Tue 24 Feb 2026 23:10:59 +0000
ROA not before:           Tue 24 Feb 2026 23:05:59 +0000
ROA not after:            Tue 23 Feb 2027 23:10:59 +0000
asID:                     273459
IP address blocks:        2804:8ef8:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/047440DF40D4D04F7AE139641FA3E434EAF26718.crl
                          rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/047440DF40D4D04F7AE139641FA3E434EAF26718.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/047440DF40D4D04F7AE139641FA3E434EAF26718.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 17:29:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a1:7d:95:58:62:07:db:c9:a8:ed:bd:f4:c4:4a:aa:b2:eb:fe:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=047440DF40D4D04F7AE139641FA3E434EAF26718
        Validity
            Not Before: Feb 24 23:05:59 2026 GMT
            Not After : Feb 23 23:10:59 2027 GMT
        Subject: CN=90213A2CCB3FAFD95C9A459DDA2156FB920CB6A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4c:55:91:38:9e:09:16:eb:ab:16:0b:7b:f2:
                    8c:ae:b1:7a:23:23:48:9e:73:27:5a:3c:87:58:97:
                    6f:96:b6:75:5e:01:59:5e:88:9e:38:65:7b:6f:d4:
                    00:5c:0e:db:91:64:2b:34:aa:f4:6e:6e:23:4e:8a:
                    06:cf:97:f1:75:9c:62:58:3e:3e:48:e4:6f:d9:77:
                    6b:71:ff:90:25:ef:5c:2f:41:19:eb:8c:4b:65:de:
                    94:78:a0:b9:d7:c2:48:8e:83:3e:13:c3:03:ac:7a:
                    f3:37:8a:e6:ba:49:87:ee:77:c0:74:1c:92:bb:40:
                    dd:bd:5f:1a:e4:6b:d8:a6:4b:b5:cc:1e:e7:be:7c:
                    18:e6:ee:46:d3:08:37:9c:7b:6a:d7:e6:e6:fc:32:
                    f0:e3:85:ad:0f:d1:4e:5f:5a:b7:d3:52:94:f2:b3:
                    10:bb:e2:d3:ba:f3:14:ff:52:7a:33:2e:5d:22:1a:
                    b4:e7:ed:cb:33:b6:f6:36:21:c3:46:d6:ff:5b:01:
                    67:d9:12:6a:96:d8:0b:33:53:5c:a7:24:73:e8:b3:
                    49:dd:d6:96:68:d7:d8:ff:59:02:de:f3:87:ed:0a:
                    c0:6f:ef:d9:54:04:cc:e4:31:01:ed:fa:ff:7a:f0:
                    6f:d9:ab:dc:b7:00:1c:b2:fa:c5:bd:ff:cb:54:96:
                    bc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:21:3A:2C:CB:3F:AF:D9:5C:9A:45:9D:DA:21:56:FB:92:0C:B6:A4
            X509v3 Authority Key Identifier:
                keyid:04:74:40:DF:40:D4:D0:4F:7A:E1:39:64:1F:A3:E4:34:EA:F2:67:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/047440DF40D4D04F7AE139641FA3E434EAF26718.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/047440DF40D4D04F7AE139641FA3E434EAF26718.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/323830343a386566383a343030303a3a2f33342d3334203d3e20323733343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ef8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8f:9a:c1:fa:28:f6:64:a0:31:a2:96:cb:80:2a:43:78:b4:51:
         53:79:f6:86:57:fb:17:34:27:de:5b:5e:3a:2f:45:ed:06:61:
         79:16:35:92:0e:a5:6e:19:57:ec:1f:c5:72:9b:25:a3:0f:02:
         cd:d4:7c:09:c9:e2:aa:ad:f8:ad:7c:b0:21:77:a5:de:f2:4c:
         11:f9:b8:b4:3e:61:68:bb:a8:5e:e2:7e:f5:d7:4e:52:03:24:
         cd:15:10:8c:56:37:d3:b8:09:4d:a0:34:bf:01:33:8c:48:19:
         cc:4c:25:a3:0f:43:7c:ec:b0:d2:48:d4:9f:80:5e:cb:30:32:
         ea:c5:c5:65:68:de:c5:97:b1:4b:a9:50:ad:4b:ad:c4:79:ce:
         06:f9:2e:74:f1:6f:d6:6b:26:0c:be:bb:08:cb:a4:00:98:e5:
         93:fc:12:2d:d7:75:f7:07:2b:f0:83:5f:52:3e:68:05:52:1f:
         e9:2a:3b:b1:50:76:21:b5:eb:1b:d4:15:07:09:46:ed:54:13:
         49:85:5b:90:b2:81:68:19:e6:52:da:67:fa:db:7d:06:c6:a2:
         98:19:6f:69:64:ac:6a:6c:2a:45:15:ed:07:ff:ee:c9:fe:aa:
         0c:64:b9:dd:0d:07:2b:69:d2:d4:12:34:f0:57:d0:34:8c:cc:
         a9:80:1d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:33:04 2026 by rpki-client