Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LBWoVa3RBQ6AuYW8DQj4bDwRpUaxDqZ7jiXpxPZ8Ha5/0/323830343a383464383a3a2f33322d313238203d3e20323732323833.roa
File:                     323830343a383464383a3a2f33322d313238203d3e20323732323833.roa (raw, json)
Hash identifier:          ml6xCx4m4NpxSBMQ3bclpKTucEsV/JRRR3SsxxExlAA=
Subject key identifier:   2D:FB:C4:DB:A0:21:00:C7:75:BE:C9:91:61:68:3D:89:74:AA:EA:AF
Certificate issuer:       /CN=1BE056503E487E1B7AC53BEF59DD03AFACE73165
Certificate serial:       70050F36B4E29D19C9AB0283E54A772E79109B02
Authority key identifier: 1B:E0:56:50:3E:48:7E:1B:7A:C5:3B:EF:59:DD:03:AF:AC:E7:31:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE056503E487E1B7AC53BEF59DD03AFACE73165.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LBWoVa3RBQ6AuYW8DQj4bDwRpUaxDqZ7jiXpxPZ8Ha5/0/323830343a383464383a3a2f33322d313238203d3e20323732323833.roa
Signing time:             Tue 10 Mar 2026 17:12:09 +0000
ROA not before:           Tue 10 Mar 2026 17:07:09 +0000
ROA not after:            Tue 09 Mar 2027 17:12:09 +0000
asID:                     272283
IP address blocks:        2804:84d8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2LBWoVa3RBQ6AuYW8DQj4bDwRpUaxDqZ7jiXpxPZ8Ha5/0/1BE056503E487E1B7AC53BEF59DD03AFACE73165.crl
                          rsync://rpki-repo.registro.br/repo/2LBWoVa3RBQ6AuYW8DQj4bDwRpUaxDqZ7jiXpxPZ8Ha5/0/1BE056503E487E1B7AC53BEF59DD03AFACE73165.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE056503E487E1B7AC53BEF59DD03AFACE73165.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 23:26:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:05:0f:36:b4:e2:9d:19:c9:ab:02:83:e5:4a:77:2e:79:10:9b:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE056503E487E1B7AC53BEF59DD03AFACE73165
        Validity
            Not Before: Mar 10 17:07:09 2026 GMT
            Not After : Mar  9 17:12:09 2027 GMT
        Subject: CN=2DFBC4DBA02100C775BEC99161683D8974AAEAAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b0:c0:6c:ce:5e:c0:93:5e:b0:76:31:b3:29:
                    ba:10:33:0c:11:6c:df:65:ed:82:73:67:3e:af:bc:
                    db:95:91:71:6a:41:45:bb:d9:9d:a7:bc:75:dd:23:
                    3c:0f:82:c1:d2:c9:83:f1:4b:3e:b7:c9:24:a9:41:
                    40:0c:17:fb:15:ff:0b:1c:b4:4d:27:c1:2c:5f:3c:
                    e9:27:c1:33:88:16:b9:bb:de:d3:58:b6:6a:c3:7c:
                    cd:0a:62:7b:96:04:63:60:51:dc:f7:62:a3:e8:7e:
                    87:98:0e:25:7e:3f:b0:db:9d:e5:9e:a7:29:a5:fa:
                    75:10:3a:8f:f6:31:0f:e3:1a:0c:72:3b:67:85:77:
                    38:ff:89:f5:30:c1:b9:68:cc:db:cf:af:07:1f:95:
                    08:80:12:68:bf:1b:7d:2a:45:76:78:cb:34:65:49:
                    7e:12:d5:b0:ad:36:93:8c:5c:3e:a6:a2:3a:e1:19:
                    35:cd:a8:7f:14:ed:52:a8:a0:b8:bb:68:44:05:15:
                    1a:7d:38:9e:26:6a:76:94:eb:14:60:cd:9d:77:65:
                    23:d6:8f:0f:56:60:83:c6:cf:80:a7:26:62:05:03:
                    f8:ca:ca:89:2f:ac:fb:20:9b:f9:33:06:58:a7:ff:
                    52:ce:6c:2d:f0:f5:b3:95:1f:f5:da:f2:d1:66:22:
                    7f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:FB:C4:DB:A0:21:00:C7:75:BE:C9:91:61:68:3D:89:74:AA:EA:AF
            X509v3 Authority Key Identifier:
                keyid:1B:E0:56:50:3E:48:7E:1B:7A:C5:3B:EF:59:DD:03:AF:AC:E7:31:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LBWoVa3RBQ6AuYW8DQj4bDwRpUaxDqZ7jiXpxPZ8Ha5/0/1BE056503E487E1B7AC53BEF59DD03AFACE73165.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE056503E487E1B7AC53BEF59DD03AFACE73165.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LBWoVa3RBQ6AuYW8DQj4bDwRpUaxDqZ7jiXpxPZ8Ha5/0/323830343a383464383a3a2f33322d313238203d3e20323732323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:84d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:e3:f5:44:a7:d5:a8:60:99:4f:76:e3:1e:74:0f:52:d6:28:
         a3:98:6b:4e:4c:44:dc:39:52:cb:0b:83:c1:9e:46:19:bf:45:
         b8:d4:9a:97:32:f8:85:32:59:fb:a2:66:4d:e2:69:d4:09:32:
         f8:4b:8c:b7:00:46:0e:05:9e:7f:1e:f7:bf:ab:1b:71:75:9a:
         45:e6:65:af:9f:23:1c:33:4c:46:a3:13:e0:16:16:86:84:ac:
         2a:ee:73:32:7c:0a:2f:0b:ec:ec:fd:f5:f5:21:03:46:66:25:
         1f:02:96:c4:f0:d6:85:42:84:b2:7a:59:3a:5a:4a:06:63:47:
         42:d1:55:75:3a:e1:9c:d2:a4:11:bb:bc:a8:3e:53:f4:62:8c:
         09:d2:66:e9:23:e7:f1:24:bb:02:d4:55:5e:ee:a8:df:13:24:
         1e:0f:cb:a7:a5:97:ba:1d:67:38:87:de:de:ea:0e:61:a7:d3:
         1e:50:ea:74:82:44:e0:28:d7:fc:38:1c:b5:bc:6c:dd:1d:d4:
         18:23:c9:07:3b:a0:36:1b:c6:1d:35:db:ba:3f:18:24:f8:38:
         a1:1f:d6:ad:a9:0c:fd:44:a2:c9:b2:78:39:8c:6e:c9:e5:bd:
         73:1a:14:d0:3f:a4:05:91:c3:f7:20:b8:60:f3:de:b2:e3:55:
         86:d3:3e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:21:15 2026 by rpki-client