Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a3a2f33352d3335203d3e20323632333933.roa
File:                     323830343a3863383a3a2f33352d3335203d3e20323632333933.roa (raw, json)
Hash identifier:          vFCJ9o5dYAeygw9PEm2vg70HrtdEHYQuQ/JfPj2uskQ=
Subject key identifier:   9C:54:2F:38:B8:4C:46:B2:3C:A0:FE:08:55:37:B4:1B:94:C8:90:A5
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       01D273C6A8F706F9D6D6BF85946826B2EE20B750
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a3a2f33352d3335203d3e20323632333933.roa
Signing time:             Sun 08 Mar 2026 22:48:33 +0000
ROA not before:           Sun 08 Mar 2026 22:43:33 +0000
ROA not after:            Sun 07 Mar 2027 22:48:33 +0000
asID:                     262393
IP address blocks:        2804:8c8::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
                          rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 09:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d2:73:c6:a8:f7:06:f9:d6:d6:bf:85:94:68:26:b2:ee:20:b7:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: Mar  8 22:43:33 2026 GMT
            Not After : Mar  7 22:48:33 2027 GMT
        Subject: CN=9C542F38B84C46B23CA0FE085537B41B94C890A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4a:10:87:cc:fb:c0:66:84:e5:37:53:58:f6:
                    55:34:ac:55:8c:4b:8a:18:a6:c2:1e:d4:c7:eb:f0:
                    7e:ac:cf:8f:60:7f:8f:59:b6:77:7b:c1:4b:00:ec:
                    c6:19:9d:a9:d0:24:1c:7f:20:87:9a:a2:d4:01:5b:
                    f6:cf:16:d7:38:c3:b8:3a:fd:0a:bd:4f:e5:5e:9f:
                    2e:ab:11:96:0f:33:ef:31:47:88:13:77:5d:90:65:
                    0a:97:18:d1:e9:97:27:c2:da:3d:09:7f:45:ad:23:
                    e0:59:58:3c:7e:00:76:8d:9c:0c:5e:a5:b7:61:63:
                    62:f9:29:01:30:5d:6e:19:2a:9a:96:cd:50:74:bc:
                    21:e9:fc:bf:c9:95:70:01:9b:da:73:54:33:ba:d8:
                    eb:e2:4c:2b:a6:9f:41:c8:02:9d:98:cd:bf:44:96:
                    2d:0a:08:06:21:ae:23:ba:e6:17:68:6c:d6:66:88:
                    6b:ab:18:81:ac:6d:fd:77:cb:64:02:e2:0b:36:a6:
                    9c:1d:56:f3:0d:71:6a:69:22:41:f8:74:fa:b0:68:
                    e1:e9:67:ab:29:18:23:5f:e2:0b:c8:f7:20:a0:0f:
                    ac:d3:89:6b:e4:9e:0f:3a:30:e9:3b:5a:b0:f7:bc:
                    6c:a1:47:50:42:71:0f:37:58:8b:d4:91:6c:ae:2b:
                    d9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:54:2F:38:B8:4C:46:B2:3C:A0:FE:08:55:37:B4:1B:94:C8:90:A5
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a3a2f33352d3335203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c8::/35

    Signature Algorithm: sha256WithRSAEncryption
         b4:f5:19:7a:0f:40:1a:5e:76:b6:93:37:88:5f:ee:53:b9:26:
         58:0b:eb:69:23:39:c9:64:63:05:1b:53:ac:b3:ea:dc:cd:49:
         d3:30:d0:f8:58:77:d3:98:8f:5a:32:66:3c:c6:c4:f4:9a:3f:
         b7:93:6b:4b:1f:a9:0e:41:72:c3:9e:2f:d4:4c:95:60:ec:02:
         3a:c8:a1:61:c2:73:ac:4b:1b:1a:ef:a9:71:4b:7b:b4:93:9a:
         c7:f5:53:ab:c6:da:69:cd:03:85:6e:cd:05:43:17:4e:9a:20:
         eb:13:b9:25:29:e0:f4:a7:60:46:cb:3f:bc:78:e6:ee:7f:97:
         66:d4:ed:4d:40:ce:82:2e:fd:fd:e4:1b:fc:ec:f1:eb:59:34:
         70:3f:c1:9d:60:ac:e6:dd:ca:1b:d2:75:d5:8f:21:ba:63:2f:
         50:80:ca:48:ea:38:4e:39:f4:e9:d5:07:6f:f7:42:14:32:2d:
         97:2e:5a:2e:49:1c:7c:12:c8:4f:c6:e9:04:09:02:b7:00:50:
         dd:7e:ce:16:8c:8c:34:26:21:c0:d1:f0:39:6a:2b:a2:59:3e:
         fa:db:4c:63:fb:eb:93:18:ee:4f:04:e7:dd:ed:4e:07:0d:b6:
         1a:42:47:63:c1:d9:02:ff:d8:53:7e:3d:3d:1c:3f:b4:55:32:
         70:d2:f8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:23:33 2026 by rpki-client