Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tZv6bNcboE6o25JiKyxRwd7zaPmM2RKrCmiqYEFnoXD/0/323830343a383939303a3a2f33322d3438203d3e20323733363132.roa
File:                     323830343a383939303a3a2f33322d3438203d3e20323733363132.roa (raw, json)
Hash identifier:          k9AjTaqn2hfxZfHYqrJw1jX18VnYCka8XY1dJe+Do5E=
Subject key identifier:   CE:53:0F:05:8D:5F:9B:0D:EB:9E:7A:39:01:46:2A:2A:E0:C2:0B:4B
Certificate issuer:       /CN=CAC1861D73EAD03007F4D16532DB191600DE2929
Certificate serial:       6C01BA749B1B9934C2F21DDBD0EDB677653D3997
Authority key identifier: CA:C1:86:1D:73:EA:D0:30:07:F4:D1:65:32:DB:19:16:00:DE:29:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAC1861D73EAD03007F4D16532DB191600DE2929.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tZv6bNcboE6o25JiKyxRwd7zaPmM2RKrCmiqYEFnoXD/0/323830343a383939303a3a2f33322d3438203d3e20323733363132.roa
Signing time:             Wed 18 Mar 2026 14:35:12 +0000
ROA not before:           Wed 18 Mar 2026 14:30:12 +0000
ROA not after:            Wed 17 Mar 2027 14:35:12 +0000
asID:                     273612
IP address blocks:        2804:8990::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3tZv6bNcboE6o25JiKyxRwd7zaPmM2RKrCmiqYEFnoXD/0/CAC1861D73EAD03007F4D16532DB191600DE2929.crl
                          rsync://rpki-repo.registro.br/repo/3tZv6bNcboE6o25JiKyxRwd7zaPmM2RKrCmiqYEFnoXD/0/CAC1861D73EAD03007F4D16532DB191600DE2929.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAC1861D73EAD03007F4D16532DB191600DE2929.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 14:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:01:ba:74:9b:1b:99:34:c2:f2:1d:db:d0:ed:b6:77:65:3d:39:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAC1861D73EAD03007F4D16532DB191600DE2929
        Validity
            Not Before: Mar 18 14:30:12 2026 GMT
            Not After : Mar 17 14:35:12 2027 GMT
        Subject: CN=3082010A0282010100F9F2D8CA654DD0A2ED2ABCBE76BA751A4E23269CDC63963EC40D2540BCFB3C9AEB4E502463C8A3521D00EC2A6CA0E0A196949126AA3AC457206900252CC73C520510D89399876F32D0DA0C2F7481A21BB78107984E09B3A793E0263C18C2FA80208325272C6F401DBB79F53414746BAB6B87A35848F7927644974936BA1C8873F6B9F61B3DDD584CA5A369B38FAC4400C3319BF2576BC0481C855D2B6C3C43C3F78AFEBA480FF28476B03FC630309BA2B9FAA7B221D9E7F7D09DA35DEFA8C2E63787FCC34677387EDCB5DCBF9C55399E994D55C38E7EB08B46B20AD7BBC2BDC426F4ED3B2C41734C2E061342C10E4EC491E6C74212BF3783271CF50B97F7AE7B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:f2:d8:ca:65:4d:d0:a2:ed:2a:bc:be:76:ba:
                    75:1a:4e:23:26:9c:dc:63:96:3e:c4:0d:25:40:bc:
                    fb:3c:9a:eb:4e:50:24:63:c8:a3:52:1d:00:ec:2a:
                    6c:a0:e0:a1:96:94:91:26:aa:3a:c4:57:20:69:00:
                    25:2c:c7:3c:52:05:10:d8:93:99:87:6f:32:d0:da:
                    0c:2f:74:81:a2:1b:b7:81:07:98:4e:09:b3:a7:93:
                    e0:26:3c:18:c2:fa:80:20:83:25:27:2c:6f:40:1d:
                    bb:79:f5:34:14:74:6b:ab:6b:87:a3:58:48:f7:92:
                    76:44:97:49:36:ba:1c:88:73:f6:b9:f6:1b:3d:dd:
                    58:4c:a5:a3:69:b3:8f:ac:44:00:c3:31:9b:f2:57:
                    6b:c0:48:1c:85:5d:2b:6c:3c:43:c3:f7:8a:fe:ba:
                    48:0f:f2:84:76:b0:3f:c6:30:30:9b:a2:b9:fa:a7:
                    b2:21:d9:e7:f7:d0:9d:a3:5d:ef:a8:c2:e6:37:87:
                    fc:c3:46:77:38:7e:dc:b5:dc:bf:9c:55:39:9e:99:
                    4d:55:c3:8e:7e:b0:8b:46:b2:0a:d7:bb:c2:bd:c4:
                    26:f4:ed:3b:2c:41:73:4c:2e:06:13:42:c1:0e:4e:
                    c4:91:e6:c7:42:12:bf:37:83:27:1c:f5:0b:97:f7:
                    ae:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:53:0F:05:8D:5F:9B:0D:EB:9E:7A:39:01:46:2A:2A:E0:C2:0B:4B
            X509v3 Authority Key Identifier:
                keyid:CA:C1:86:1D:73:EA:D0:30:07:F4:D1:65:32:DB:19:16:00:DE:29:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tZv6bNcboE6o25JiKyxRwd7zaPmM2RKrCmiqYEFnoXD/0/CAC1861D73EAD03007F4D16532DB191600DE2929.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAC1861D73EAD03007F4D16532DB191600DE2929.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tZv6bNcboE6o25JiKyxRwd7zaPmM2RKrCmiqYEFnoXD/0/323830343a383939303a3a2f33322d3438203d3e20323733363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8990::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:0a:f9:67:b0:01:01:c8:dc:1c:31:62:10:db:78:bc:01:b5:
         61:55:46:41:64:8f:cb:fd:f3:5f:d3:a6:c4:5a:4e:b6:3d:01:
         dc:f8:45:cd:ab:5d:18:20:f9:75:58:cc:ce:8c:a7:ac:51:ad:
         d0:0b:27:aa:b8:6c:2a:33:28:dd:14:63:c1:7a:68:b1:80:9f:
         54:5c:df:8b:0a:81:44:42:35:2f:91:47:16:06:23:f0:46:10:
         48:d5:f4:3c:a6:44:89:b5:7a:e1:15:06:ba:c5:31:7e:94:be:
         63:70:fc:2d:42:5a:45:6b:4d:6b:51:49:67:bf:e8:be:d8:c3:
         f3:dc:c8:ad:87:57:4d:39:8e:75:3b:fb:73:34:0f:7b:7a:f7:
         76:15:d1:2c:5e:b1:d2:35:5e:0e:c5:64:b9:0d:bf:7c:d2:57:
         d5:3e:92:44:92:c5:4a:1c:3d:90:b0:c2:df:81:06:21:b4:16:
         30:8e:25:0d:cc:90:41:2b:c4:a4:5c:28:62:75:19:7d:2d:82:
         32:12:20:6e:2b:f1:f3:a2:61:b7:01:d4:42:4c:50:1b:2d:50:
         34:25:2a:bf:b7:82:9a:03:0b:1f:3d:31:b3:88:60:a2:c6:f1:
         08:0a:30:42:d3:7f:b5:64:7a:50:d3:2d:66:95:ed:d0:84:1c:
         37:2c:93:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:41:34 2026 by rpki-client