Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/323830343a376533633a3a2f33322d313238203d3e20323731363131.roa
File:                     323830343a376533633a3a2f33322d313238203d3e20323731363131.roa (raw, json)
Hash identifier:          LnrfsWgQ+DvdS5zJDEpV2f1WuoEUwUNZVmqDy7pxTok=
Subject key identifier:   76:97:2F:53:28:48:2E:77:F8:A4:02:6D:D0:B2:99:08:BB:B2:71:24
Certificate issuer:       /CN=C2C711199028B119AC8F2C0AC66D07BF403C78FE
Certificate serial:       4A2FAB95031C495CE87C745D52DDC6BF1F76BA06
Authority key identifier: C2:C7:11:19:90:28:B1:19:AC:8F:2C:0A:C6:6D:07:BF:40:3C:78:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2C711199028B119AC8F2C0AC66D07BF403C78FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/323830343a376533633a3a2f33322d313238203d3e20323731363131.roa
Signing time:             Thu 19 Mar 2026 19:26:41 +0000
ROA not before:           Thu 19 Mar 2026 19:21:41 +0000
ROA not after:            Thu 18 Mar 2027 19:26:41 +0000
asID:                     271611
IP address blocks:        2804:7e3c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/C2C711199028B119AC8F2C0AC66D07BF403C78FE.crl
                          rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/C2C711199028B119AC8F2C0AC66D07BF403C78FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2C711199028B119AC8F2C0AC66D07BF403C78FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 15:42:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:2f:ab:95:03:1c:49:5c:e8:7c:74:5d:52:dd:c6:bf:1f:76:ba:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2C711199028B119AC8F2C0AC66D07BF403C78FE
        Validity
            Not Before: Mar 19 19:21:41 2026 GMT
            Not After : Mar 18 19:26:41 2027 GMT
        Subject: CN=76972F5328482E77F8A4026DD0B29908BBB27124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:61:66:c4:9e:b8:5c:34:93:14:e5:da:e4:70:
                    a6:db:98:64:ef:29:21:8e:69:4f:7e:a5:1a:0d:b6:
                    b1:26:2a:39:b0:0f:5c:31:59:db:ff:b9:3d:b9:c3:
                    b1:c8:c3:c0:ae:cf:aa:7e:88:5d:8c:f5:e4:24:b7:
                    ad:b3:89:c7:e9:42:7f:e8:31:ec:9c:60:b5:5c:90:
                    00:33:8b:bd:26:61:4a:7d:18:d3:1c:46:4b:59:92:
                    66:c2:3d:58:12:46:17:d5:41:c8:62:b6:83:63:e0:
                    7e:aa:91:86:88:29:fc:c3:a5:0a:d7:b0:fe:31:c3:
                    ec:e7:3d:a4:29:fa:2c:9c:8e:6e:e5:b5:ca:3a:0b:
                    ae:23:58:38:65:6e:35:b3:cd:b1:30:4c:4d:3f:59:
                    b9:4a:6e:85:91:22:2b:5c:f3:26:c9:2d:a0:7e:00:
                    1a:19:f2:45:ff:d3:f2:81:f4:ce:5d:17:13:32:b9:
                    a7:1b:00:c9:18:2d:26:19:0e:6c:04:30:94:cb:1d:
                    b1:22:a2:b2:84:d9:d0:dd:1b:65:18:94:51:0a:48:
                    fa:68:e5:d0:62:e5:1b:a9:16:de:f5:6c:eb:8c:03:
                    96:b8:19:70:ab:5f:40:bb:d7:10:be:0a:e3:25:08:
                    7e:5a:eb:2c:9e:29:ad:b3:a4:1f:26:78:81:1a:b1:
                    f3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:97:2F:53:28:48:2E:77:F8:A4:02:6D:D0:B2:99:08:BB:B2:71:24
            X509v3 Authority Key Identifier:
                keyid:C2:C7:11:19:90:28:B1:19:AC:8F:2C:0A:C6:6D:07:BF:40:3C:78:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/C2C711199028B119AC8F2C0AC66D07BF403C78FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2C711199028B119AC8F2C0AC66D07BF403C78FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/323830343a376533633a3a2f33322d313238203d3e20323731363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:a2:28:b9:49:37:e8:a8:8e:a8:61:fd:a3:34:14:62:7e:38:
         80:06:e7:0e:31:09:1f:4d:99:e2:1e:2b:15:26:44:90:75:12:
         fe:69:2c:ec:a9:0c:8e:92:ca:34:75:ee:ed:9f:bc:d2:80:0d:
         5f:86:c6:9d:8a:cf:bf:87:54:a7:00:04:60:df:23:81:9b:71:
         3d:b8:bb:61:65:e1:8f:6d:be:e4:a5:a4:15:6c:18:29:fc:16:
         ff:53:52:42:ef:23:6b:eb:c5:39:ad:77:63:e2:9a:3d:9a:87:
         07:a4:8c:d3:c6:4b:a5:15:49:e6:ea:ef:4b:93:6f:6b:2e:d0:
         68:62:c7:f8:ea:12:97:06:c7:78:22:fc:9a:b2:86:c5:21:ca:
         fb:44:0e:99:91:d6:75:69:3b:62:8e:12:eb:44:15:e8:0b:6d:
         d2:c3:a6:9e:54:cd:1f:8b:25:01:73:f0:5f:14:60:66:f1:7a:
         cd:d2:4d:bc:b1:ef:14:41:8f:eb:ed:93:53:65:4f:b9:c9:e5:
         30:0e:6d:c0:0b:4e:7a:88:35:9b:46:12:0f:2d:f2:73:1c:d1:
         28:28:ad:b6:78:19:06:69:9c:e8:b4:26:38:d0:f4:da:1e:2d:
         6e:78:71:9e:d8:f4:6e:7d:4e:4b:3e:81:8e:8d:88:a9:e0:c5:
         57:3a:a0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:18:50 2026 by rpki-client