Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a343030303a3a2f33352d3335203d3e20323632333933.roa
File:                     323830343a3863383a343030303a3a2f33352d3335203d3e20323632333933.roa (raw, json)
Hash identifier:          rP6y+YwwJ/ZGy6eA7oQcH+qPx54c6++wQsdeVxaSu+c=
Subject key identifier:   71:91:1D:88:8C:E3:95:AF:73:16:AD:AD:0D:61:33:62:F5:24:67:10
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       5B90C78875B149876F1B5BECC83EEA2FA0625F5A
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a343030303a3a2f33352d3335203d3e20323632333933.roa
Signing time:             Sun 08 Mar 2026 22:48:33 +0000
ROA not before:           Sun 08 Mar 2026 22:43:33 +0000
ROA not after:            Sun 07 Mar 2027 22:48:33 +0000
asID:                     262393
IP address blocks:        2804:8c8:4000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
                          rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 09:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:90:c7:88:75:b1:49:87:6f:1b:5b:ec:c8:3e:ea:2f:a0:62:5f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: Mar  8 22:43:33 2026 GMT
            Not After : Mar  7 22:48:33 2027 GMT
        Subject: CN=71911D888CE395AF7316ADAD0D613362F5246710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3f:9b:91:4e:05:3f:11:83:37:60:b5:13:34:
                    88:6d:61:a4:b9:1a:e6:d5:2f:62:ee:64:27:23:1b:
                    76:5b:54:c6:11:af:49:43:f4:ee:e3:9c:0c:88:c2:
                    31:e9:95:b4:24:ca:bd:d3:1e:92:46:2a:a4:2b:de:
                    7c:e5:33:9f:63:61:e1:97:70:7f:a8:29:09:b8:0f:
                    67:01:d7:87:91:8b:b4:ef:74:e9:ea:c4:fa:b5:e2:
                    ec:1a:9b:94:cd:df:c2:bd:93:c2:8c:2b:09:40:f6:
                    7f:81:02:7d:d0:f7:05:49:15:1a:90:9c:48:09:6b:
                    70:fc:88:8a:0e:c2:e6:f6:48:f7:76:95:81:e7:24:
                    aa:a0:5a:9e:b8:15:16:39:ef:54:be:c0:2b:83:8e:
                    99:5f:f2:e0:bd:04:5f:70:48:b6:42:42:fb:b0:5c:
                    61:97:08:b9:0b:f1:91:fc:08:b3:6c:15:fe:fe:ef:
                    c1:11:cf:29:fe:00:dc:53:51:35:7e:5a:9b:3f:86:
                    8f:9a:6f:6e:58:4f:2b:c6:1a:b9:8e:b8:3a:56:f3:
                    86:7a:45:ca:11:b6:02:a9:57:4c:22:8f:e9:ab:16:
                    68:d6:6a:29:d6:99:e2:a0:91:cf:4a:8a:94:54:72:
                    b0:30:27:fa:b0:d1:f2:ea:ba:94:87:9a:bc:c5:c5:
                    80:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:91:1D:88:8C:E3:95:AF:73:16:AD:AD:0D:61:33:62:F5:24:67:10
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a343030303a3a2f33352d3335203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c8:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         9f:fa:3e:d7:34:2b:46:77:ce:da:ba:60:e6:11:0a:52:50:1e:
         df:59:43:38:b1:dd:ec:18:88:80:36:21:a8:fb:16:a6:4d:1e:
         9e:9d:b9:58:81:7c:2e:eb:ec:6e:25:86:be:be:31:a6:28:eb:
         6a:20:97:e4:f0:14:a8:db:e6:e3:ef:40:33:ce:fb:e2:8f:d8:
         dd:cf:58:c8:0f:af:13:5c:b3:20:f7:13:c3:32:9b:72:cf:fb:
         e5:0b:69:86:7f:56:6e:3d:da:cf:d7:69:d8:34:50:17:fb:ff:
         9f:c4:2e:e3:8a:64:e0:16:d0:d6:03:06:99:41:5f:c2:cc:fe:
         bf:02:ce:30:bc:00:8c:d4:c7:4e:93:9e:38:09:af:27:bb:fa:
         4b:25:68:cc:76:8f:1a:89:8c:23:2a:4a:ba:25:9a:e7:71:3c:
         81:d5:ff:c2:14:1b:52:eb:dd:c9:bb:c3:55:b9:aa:a9:de:62:
         6d:c5:81:16:fe:03:6e:bb:6b:4b:ec:04:4a:90:f1:81:51:f0:
         ba:c7:84:6d:b4:31:cc:52:d9:f6:2b:76:31:49:df:f3:6f:95:
         c7:a4:de:15:bc:cf:c9:43:91:8d:7c:34:85:91:79:d2:a1:35:
         da:bd:61:35:d6:08:94:cf:db:21:ea:40:98:42:45:77:5d:39:
         dd:7e:3e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:31:08 2026 by rpki-client