Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/323830343a343134633a3a2f33322d313238203d3e203238323034.roa
File:                     323830343a343134633a3a2f33322d313238203d3e203238323034.roa (raw, json)
Hash identifier:          YvC3eohyrDj8StvFzDSE2/eqB+Cyw8bHUil9o/x4OyM=
Subject key identifier:   66:69:9D:43:70:DD:E4:05:DC:CC:4B:3A:88:E9:34:F5:73:2C:39:FE
Certificate issuer:       /CN=09D503308004EB0AACDFA4EEF91239B1668B599A
Certificate serial:       2A0DE904E3889F370148B8DDF2D458A1749864A4
Authority key identifier: 09:D5:03:30:80:04:EB:0A:AC:DF:A4:EE:F9:12:39:B1:66:8B:59:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D503308004EB0AACDFA4EEF91239B1668B599A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/323830343a343134633a3a2f33322d313238203d3e203238323034.roa
Signing time:             Mon 23 Mar 2026 18:37:35 +0000
ROA not before:           Mon 23 Mar 2026 18:32:35 +0000
ROA not after:            Mon 22 Mar 2027 18:37:35 +0000
asID:                     28204
IP address blocks:        2804:414c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/09D503308004EB0AACDFA4EEF91239B1668B599A.crl
                          rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/09D503308004EB0AACDFA4EEF91239B1668B599A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D503308004EB0AACDFA4EEF91239B1668B599A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:58:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:0d:e9:04:e3:88:9f:37:01:48:b8:dd:f2:d4:58:a1:74:98:64:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09D503308004EB0AACDFA4EEF91239B1668B599A
        Validity
            Not Before: Mar 23 18:32:35 2026 GMT
            Not After : Mar 22 18:37:35 2027 GMT
        Subject: CN=66699D4370DDE405DCCC4B3A88E934F5732C39FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:79:88:0b:94:8c:ac:3c:3a:bc:aa:9c:2b:7f:
                    df:69:d6:0f:df:50:e1:92:3a:d6:37:43:12:ac:f9:
                    f0:71:5f:a3:46:4c:e8:bf:49:42:cb:79:94:e0:ad:
                    c8:14:b5:d1:5e:9d:8e:98:00:f9:51:e4:ab:46:25:
                    0b:a3:44:90:cc:38:4b:f9:62:77:06:79:de:6a:dd:
                    36:44:e8:2e:ef:97:48:fa:d9:95:cf:91:32:7d:5f:
                    a6:66:f0:d1:ee:24:e2:0a:03:bd:9f:b1:4c:61:70:
                    61:db:c7:3c:a9:8f:06:dc:33:45:0d:9b:93:fc:84:
                    e3:6e:70:10:a3:1a:c6:36:b4:b8:c0:b1:74:6e:58:
                    6e:37:f8:61:a3:8d:4b:ed:d3:65:ff:5a:22:c5:02:
                    d7:01:3a:a0:96:d0:c2:96:70:d4:aa:01:8f:8c:9e:
                    12:91:68:21:32:42:9b:9f:51:bb:2b:42:8a:67:50:
                    8e:95:9d:3c:10:4c:c8:05:f6:99:56:b0:16:6c:73:
                    de:31:fc:5d:d8:29:70:93:56:3a:f3:e9:07:b4:e8:
                    2c:d1:07:d6:b3:b0:8c:3a:aa:eb:ed:d7:d6:72:73:
                    37:49:4a:80:7c:b5:93:98:ea:f8:a5:e9:08:2f:9d:
                    3d:ae:c7:a7:7b:25:2f:17:fc:c7:a5:ed:8f:9b:cc:
                    9f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:69:9D:43:70:DD:E4:05:DC:CC:4B:3A:88:E9:34:F5:73:2C:39:FE
            X509v3 Authority Key Identifier:
                keyid:09:D5:03:30:80:04:EB:0A:AC:DF:A4:EE:F9:12:39:B1:66:8B:59:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/09D503308004EB0AACDFA4EEF91239B1668B599A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D503308004EB0AACDFA4EEF91239B1668B599A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/323830343a343134633a3a2f33322d313238203d3e203238323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:414c::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:3e:3a:ff:34:c2:72:01:ce:f4:2a:b0:53:3d:82:a8:34:08:
         80:0a:56:56:fb:20:33:ea:d9:a5:65:a5:51:1d:1f:99:5d:0e:
         60:6f:b2:d3:46:24:a5:97:ad:5b:82:0c:81:30:88:5d:a1:7c:
         ae:21:74:1f:45:b9:f6:57:9f:af:f3:31:8c:40:d8:d3:06:34:
         50:4a:fd:f7:b7:9c:36:c1:dd:b2:97:64:81:78:15:3a:6d:37:
         55:42:e3:55:17:14:8c:c0:94:ce:45:97:1f:97:a3:ca:84:70:
         62:20:e0:4d:9e:6c:0e:bf:04:db:9a:fb:c9:d6:3b:20:ec:75:
         b7:0c:fa:c4:5f:c5:18:2e:2f:a9:96:d6:d2:f8:2e:a9:2a:0f:
         e7:98:c5:2c:4c:90:d6:2a:0e:17:44:f9:ff:09:c1:60:42:e5:
         a0:a8:71:08:79:0e:7b:6e:2c:1c:c0:9c:87:ee:b6:f3:0d:bf:
         2e:4d:6b:1a:1c:cb:5e:8d:97:c1:6e:18:37:96:eb:10:fa:48:
         35:ce:b5:d2:a4:3f:4c:79:4f:d1:76:40:7a:01:f5:a4:da:f2:
         48:05:5e:7d:6b:33:bc:72:c7:78:d8:a1:29:b3:bb:e5:6e:8c:
         19:43:4e:61:9b:6b:d4:20:91:41:f9:be:94:9f:ea:51:0c:06:
         e3:89:de:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:51:35 2026 by rpki-client