Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/323830343a346161633a313830303a3a2f33382d3338203d3e20323637323536.roa
File:                     323830343a346161633a313830303a3a2f33382d3338203d3e20323637323536.roa (raw, json)
Hash identifier:          ZGmBKzdGR+gImjl42pFXCeASdmh5wAcYhEdnOk2a4ts=
Subject key identifier:   62:97:D6:F2:24:86:08:8A:1B:88:0B:60:2F:4B:E3:99:C2:85:E3:3F
Certificate issuer:       /CN=93B81388D9F01BB3ADD678C7DD82C64A03F69013
Certificate serial:       71C550DF1E514BCD89900FEDC172ED4DAAEC346F
Authority key identifier: 93:B8:13:88:D9:F0:1B:B3:AD:D6:78:C7:DD:82:C6:4A:03:F6:90:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93B81388D9F01BB3ADD678C7DD82C64A03F69013.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/323830343a346161633a313830303a3a2f33382d3338203d3e20323637323536.roa
Signing time:             Mon 16 Mar 2026 19:14:48 +0000
ROA not before:           Mon 16 Mar 2026 19:09:48 +0000
ROA not after:            Mon 15 Mar 2027 19:14:48 +0000
asID:                     267256
IP address blocks:        2804:4aac:1800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/93B81388D9F01BB3ADD678C7DD82C64A03F69013.crl
                          rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/93B81388D9F01BB3ADD678C7DD82C64A03F69013.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93B81388D9F01BB3ADD678C7DD82C64A03F69013.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 19:03:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c5:50:df:1e:51:4b:cd:89:90:0f:ed:c1:72:ed:4d:aa:ec:34:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93B81388D9F01BB3ADD678C7DD82C64A03F69013
        Validity
            Not Before: Mar 16 19:09:48 2026 GMT
            Not After : Mar 15 19:14:48 2027 GMT
        Subject: CN=6297D6F22486088A1B880B602F4BE399C285E33F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ca:83:74:1b:3f:73:00:9c:52:a3:88:a6:c9:
                    40:e5:5a:ad:d7:96:37:c9:a3:25:fa:2f:ad:b8:70:
                    4a:28:0b:ba:66:e9:33:64:23:3b:31:28:ea:df:3d:
                    61:98:0d:31:c2:97:00:2d:50:91:a1:67:c2:b8:a7:
                    26:79:08:c7:91:0f:43:61:e9:bc:31:8a:13:3d:98:
                    cc:49:e6:3d:01:38:3e:c9:3e:15:1a:d8:b0:53:46:
                    af:35:8e:b4:53:30:2f:7e:6e:30:a5:30:02:02:ad:
                    ff:d5:05:dd:9c:bc:9d:ef:4b:83:74:ae:2a:3e:08:
                    ad:77:df:b7:42:13:a2:f4:6b:70:89:74:c2:9e:1e:
                    15:45:1b:fe:07:01:08:7d:77:bd:af:46:5e:39:d1:
                    ee:c3:94:0d:46:12:eb:04:8d:dd:0c:31:5e:54:5f:
                    3b:c5:d6:e3:c6:9b:45:dd:16:d7:77:83:4b:e8:79:
                    64:f0:82:36:d0:e3:52:80:e9:3d:99:08:0f:34:88:
                    82:36:53:4c:50:88:ce:82:34:07:53:99:ee:5e:fd:
                    f3:07:df:a1:24:a1:6b:2e:6a:1c:15:7f:c6:69:e2:
                    43:11:e8:a8:c6:2b:c3:cf:96:c5:b3:e4:e8:16:93:
                    cd:36:72:6e:50:d3:14:be:be:fe:52:03:b9:30:00:
                    a9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:97:D6:F2:24:86:08:8A:1B:88:0B:60:2F:4B:E3:99:C2:85:E3:3F
            X509v3 Authority Key Identifier:
                keyid:93:B8:13:88:D9:F0:1B:B3:AD:D6:78:C7:DD:82:C6:4A:03:F6:90:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/93B81388D9F01BB3ADD678C7DD82C64A03F69013.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93B81388D9F01BB3ADD678C7DD82C64A03F69013.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/323830343a346161633a313830303a3a2f33382d3338203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4aac:1800::/38

    Signature Algorithm: sha256WithRSAEncryption
         4d:75:e5:d6:aa:5f:c4:eb:22:7a:72:90:64:8e:9f:a2:ab:0a:
         a8:56:a4:e3:ed:65:53:50:52:3a:e2:bb:66:00:66:e9:e3:70:
         91:d0:24:fd:e7:22:5f:f2:06:d9:d2:16:58:04:c0:7a:27:01:
         8e:3b:9f:bf:56:e1:d7:90:ab:79:f9:c7:00:01:1c:1e:03:07:
         b9:86:e8:24:fc:8e:f6:46:3f:d8:de:f5:55:b4:98:b2:96:dc:
         2b:c9:ee:84:61:bc:e8:e6:82:03:0c:79:03:7d:33:77:1a:c0:
         a2:04:71:b7:2f:2f:9f:f9:70:4d:4d:7e:bb:3f:49:eb:e8:13:
         27:ad:cb:d7:bb:07:ee:22:18:f3:1f:dd:50:17:70:51:d6:66:
         f2:d5:3b:70:44:26:b5:82:48:d9:77:bc:ad:0d:61:df:ea:28:
         a0:ba:ab:c1:50:66:1d:09:7e:7f:f4:07:ce:5a:c2:59:75:8e:
         26:7e:8e:47:ed:43:77:bc:10:c7:85:19:61:73:1c:bc:90:70:
         36:ba:f1:d4:48:d3:70:9b:60:a1:de:b0:35:3f:e9:f4:b1:c8:
         de:b9:59:24:09:05:a8:98:ac:c8:52:60:ce:9e:21:32:cc:39:
         3a:96:94:e5:8e:ef:30:8e:bf:60:30:4f:be:cd:20:90:2e:44:
         d4:67:3e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:46:16 2026 by rpki-client