Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/323830343a333137633a3a2f33322d3634203d3e20323635303138.roa
File:                     323830343a333137633a3a2f33322d3634203d3e20323635303138.roa (raw, json)
Hash identifier:          kz6RYgCSL1VOPiJnKAs92Cz7NWoQxWfmGVztOtlyUxg=
Subject key identifier:   21:56:6C:75:0C:7A:12:5C:F1:04:1C:96:85:E2:40:DB:F8:3E:32:52
Certificate issuer:       /CN=1E60FA7690519A93DF69DB8EACC9EDB0380B2B14
Certificate serial:       653E91DA67610F679A58D865707750776CB2FF99
Authority key identifier: 1E:60:FA:76:90:51:9A:93:DF:69:DB:8E:AC:C9:ED:B0:38:0B:2B:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/323830343a333137633a3a2f33322d3634203d3e20323635303138.roa
Signing time:             Wed 18 Mar 2026 11:04:38 +0000
ROA not before:           Wed 18 Mar 2026 10:59:38 +0000
ROA not after:            Wed 17 Mar 2027 11:04:38 +0000
asID:                     265018
IP address blocks:        2804:317c::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.crl
                          rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 06:47:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:3e:91:da:67:61:0f:67:9a:58:d8:65:70:77:50:77:6c:b2:ff:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E60FA7690519A93DF69DB8EACC9EDB0380B2B14
        Validity
            Not Before: Mar 18 10:59:38 2026 GMT
            Not After : Mar 17 11:04:38 2027 GMT
        Subject: CN=21566C750C7A125CF1041C9685E240DBF83E3252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:27:38:84:9f:b5:e1:30:cb:ea:03:f5:3e:b0:
                    80:5b:92:35:46:78:4f:c7:59:83:b2:06:d1:fe:ce:
                    40:f0:07:59:4e:b7:ec:07:be:65:a9:51:a4:47:5c:
                    ce:14:af:a0:6d:ae:e5:d9:b5:71:e8:76:65:be:df:
                    06:74:fb:85:ad:b5:8e:a5:a8:15:b1:1a:91:80:bf:
                    ed:da:4f:f8:9b:b0:20:8f:88:84:39:14:96:0b:ea:
                    24:a2:9e:a3:ec:45:cf:c5:42:dd:16:a3:e0:18:44:
                    e7:09:97:57:4e:c2:08:34:38:d0:0e:5f:8b:9e:1a:
                    48:f6:28:1c:93:0a:6a:d1:5c:ed:3e:ef:40:b0:1e:
                    87:01:d8:a4:a0:3f:e3:2a:2d:87:3b:75:41:99:3e:
                    e8:b7:ec:7c:4b:ac:70:6b:d0:43:bb:f1:c9:d0:a8:
                    af:ca:47:2c:32:12:f1:5d:3d:bb:8b:b1:3a:f8:7d:
                    9f:2d:02:3d:8f:04:07:2f:8d:ef:69:9b:0b:21:49:
                    90:8e:35:f7:0e:0d:9c:9e:77:32:3f:e8:5c:64:2f:
                    c6:de:58:fb:88:f5:9e:e5:7c:2e:1b:7d:d7:4c:52:
                    e1:a6:f8:dc:1c:37:35:34:48:f5:c5:7c:62:7c:58:
                    f2:ec:fd:9f:0a:25:92:f4:55:f7:82:dd:aa:5d:ca:
                    75:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:56:6C:75:0C:7A:12:5C:F1:04:1C:96:85:E2:40:DB:F8:3E:32:52
            X509v3 Authority Key Identifier:
                keyid:1E:60:FA:76:90:51:9A:93:DF:69:DB:8E:AC:C9:ED:B0:38:0B:2B:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/323830343a333137633a3a2f33322d3634203d3e20323635303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:317c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:4a:32:ba:77:5f:80:3d:30:7c:94:13:12:2b:25:43:0d:10:
         53:bd:93:84:f8:b4:b7:3b:26:66:1a:c4:56:f8:ca:59:c1:1e:
         c1:ec:c8:b0:6e:f5:74:33:af:d2:3e:ea:95:04:93:67:9f:66:
         4f:7a:34:a9:22:07:34:7a:47:0a:df:a5:6e:ce:2a:24:a0:02:
         6c:22:c9:88:e8:79:7a:63:f1:0d:94:e7:96:ba:e9:c2:05:42:
         9c:e4:7d:5c:59:0b:dc:53:87:50:e4:2b:f7:3e:ae:8c:4e:77:
         03:56:76:56:aa:e0:f2:b8:38:c5:1f:1f:c0:ca:63:eb:50:3f:
         8d:3a:45:ea:14:e1:7b:c3:9b:2f:8c:d5:1b:6d:29:2a:ab:8b:
         6b:34:6c:26:bc:d3:10:94:4c:7c:44:98:9d:76:1f:2c:dd:c4:
         b6:3f:8e:a6:60:8a:9b:b4:d6:16:12:17:51:85:ff:d8:84:3b:
         46:e1:dc:21:68:2a:c3:57:c7:3f:dc:51:70:25:06:55:73:28:
         de:f5:c3:dc:99:26:8a:37:07:33:d3:96:0e:05:cb:87:22:52:
         55:8e:17:08:fe:b7:94:17:69:0e:55:c4:71:40:b3:3e:e8:04:
         02:0c:81:60:b9:1d:72:a1:7b:80:f3:70:b6:15:0b:1f:b5:18:
         83:e3:96:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:31:03 2026 by rpki-client