Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ZVsvD2oq3MF22vSFDH6PRfXkcwXMQXndYPxD7BQUVm2/0/323830343a326461633a3a2f33352d3335203d3e20323635323936.roa
File:                     323830343a326461633a3a2f33352d3335203d3e20323635323936.roa (raw, json)
Hash identifier:          5K12mxTq6WD/PBsTiwxgP28d7O7YsMcnvIOd8tr/S9k=
Subject key identifier:   D7:8D:09:49:4F:75:B0:47:08:2B:2F:AC:DE:B3:9D:E1:74:0A:EC:D2
Certificate issuer:       /CN=4558F98135571FEE633FDB904DA7FA506AF85CEA
Certificate serial:       2A21A74FAACBE4D7D6B923512FAD24AC536CA39B
Authority key identifier: 45:58:F9:81:35:57:1F:EE:63:3F:DB:90:4D:A7:FA:50:6A:F8:5C:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4558F98135571FEE633FDB904DA7FA506AF85CEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZVsvD2oq3MF22vSFDH6PRfXkcwXMQXndYPxD7BQUVm2/0/323830343a326461633a3a2f33352d3335203d3e20323635323936.roa
Signing time:             Tue 03 Mar 2026 13:17:35 +0000
ROA not before:           Tue 03 Mar 2026 13:12:35 +0000
ROA not after:            Tue 02 Mar 2027 13:17:35 +0000
asID:                     265296
IP address blocks:        2804:2dac::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ZVsvD2oq3MF22vSFDH6PRfXkcwXMQXndYPxD7BQUVm2/0/4558F98135571FEE633FDB904DA7FA506AF85CEA.crl
                          rsync://rpki-repo.registro.br/repo/2ZVsvD2oq3MF22vSFDH6PRfXkcwXMQXndYPxD7BQUVm2/0/4558F98135571FEE633FDB904DA7FA506AF85CEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4558F98135571FEE633FDB904DA7FA506AF85CEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 05:45:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:21:a7:4f:aa:cb:e4:d7:d6:b9:23:51:2f:ad:24:ac:53:6c:a3:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4558F98135571FEE633FDB904DA7FA506AF85CEA
        Validity
            Not Before: Mar  3 13:12:35 2026 GMT
            Not After : Mar  2 13:17:35 2027 GMT
        Subject: CN=D78D09494F75B047082B2FACDEB39DE1740AECD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:04:fd:5d:3a:80:98:4d:46:28:a7:3f:5e:d3:
                    d5:44:d7:69:32:a4:1b:4b:f7:4e:c3:c1:a5:a3:60:
                    e6:e4:f2:c9:c7:b4:0d:63:46:21:d4:98:23:8c:3e:
                    1d:57:24:07:ed:0e:be:e7:a4:f3:18:e9:78:c9:69:
                    09:8c:62:a6:01:c9:62:38:04:fb:3b:57:05:91:f3:
                    08:3b:c7:86:1c:bb:dd:d5:13:75:36:0c:8e:9d:21:
                    7a:f5:7c:86:37:ab:70:12:7f:bb:b6:77:56:46:5c:
                    ff:ef:ee:87:1c:ab:fa:f0:ed:22:f8:99:a8:18:e2:
                    c1:a0:b6:ae:c8:8c:f8:2f:0b:54:d6:81:b1:2c:14:
                    87:e4:a0:4d:5a:60:a6:e4:97:1c:82:7c:db:ef:8b:
                    4e:8a:5d:6a:06:d8:36:0a:68:7e:4d:54:8c:a5:87:
                    3f:5d:97:88:a2:6b:ce:08:1d:11:8b:ba:a7:5f:14:
                    8b:de:91:62:25:7e:63:90:bc:ff:1a:ff:a5:eb:a0:
                    e5:7b:40:fd:03:3f:f0:09:82:16:96:40:fc:5b:f7:
                    db:dc:c8:15:8d:e0:e2:da:f5:1d:2a:df:70:96:ac:
                    7e:e1:41:84:33:d5:f2:c4:d7:ca:eb:f2:40:59:35:
                    42:6f:ce:58:ce:7d:ea:cb:0a:bc:cf:fb:fd:a5:a3:
                    bc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8D:09:49:4F:75:B0:47:08:2B:2F:AC:DE:B3:9D:E1:74:0A:EC:D2
            X509v3 Authority Key Identifier:
                keyid:45:58:F9:81:35:57:1F:EE:63:3F:DB:90:4D:A7:FA:50:6A:F8:5C:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZVsvD2oq3MF22vSFDH6PRfXkcwXMQXndYPxD7BQUVm2/0/4558F98135571FEE633FDB904DA7FA506AF85CEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4558F98135571FEE633FDB904DA7FA506AF85CEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZVsvD2oq3MF22vSFDH6PRfXkcwXMQXndYPxD7BQUVm2/0/323830343a326461633a3a2f33352d3335203d3e20323635323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2dac::/35

    Signature Algorithm: sha256WithRSAEncryption
         96:a8:57:17:fc:9e:fc:b3:42:f4:b0:5c:bb:a6:2a:4a:a0:7c:
         12:7a:26:06:01:a8:b6:c1:ca:a3:b0:13:fc:4b:0e:e1:78:3a:
         1d:70:f8:4d:b2:55:41:58:59:92:2c:d7:cc:9f:d5:48:17:d0:
         fc:43:54:17:9f:59:1c:4c:d3:64:52:69:ab:b2:66:85:a8:1d:
         f0:44:e4:85:a2:be:7d:cb:41:92:2b:b7:d4:d4:d4:6f:e8:95:
         ee:91:2a:c6:c9:8d:06:ea:3b:e3:e1:01:2f:2d:24:2c:8e:34:
         62:da:99:96:ff:2f:36:d2:48:49:a3:2b:94:3a:87:87:dd:0b:
         c7:b3:26:2d:7c:18:2e:b3:63:03:11:33:8e:e8:aa:a7:fa:cf:
         17:e3:21:86:6f:38:67:df:21:4f:3e:76:a6:e1:82:dc:58:e9:
         47:1f:a0:1c:be:69:0b:a6:5f:a1:5f:67:d6:a2:f9:a7:06:c8:
         5b:a9:76:b0:c0:bc:53:26:42:cb:6c:54:2a:99:9a:57:e4:e0:
         ed:f4:02:b2:b6:c3:de:64:a1:02:b8:21:b0:eb:58:fb:e1:37:
         e8:04:ff:5c:62:a7:e9:5d:dd:d5:bd:d9:12:84:7a:19:6a:f4:
         16:42:f4:55:2e:8d:78:80:fa:67:c3:53:67:04:92:6e:72:e1:
         71:19:82:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:34:12 2026 by rpki-client