Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a3a2f34342d3434203d3e20323634393336.roa
File:                     323830343a333033343a3a2f34342d3434203d3e20323634393336.roa (raw, json)
Hash identifier:          jOw9Tth/GkEt0uDiFNENRDgJTFMOfk6812HKOd9kYPw=
Subject key identifier:   F1:B1:A5:ED:0F:7F:02:C0:3A:25:9A:0F:47:57:58:CF:CA:89:12:52
Certificate issuer:       /CN=B3B8F62FD35AD75BED6DEBD323E8ED53C0990AE3
Certificate serial:       5250B48796681A5F65CD68C161866D80D3CF95C8
Authority key identifier: B3:B8:F6:2F:D3:5A:D7:5B:ED:6D:EB:D3:23:E8:ED:53:C0:99:0A:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3B8F62FD35AD75BED6DEBD323E8ED53C0990AE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a3a2f34342d3434203d3e20323634393336.roa
Signing time:             Tue 10 Mar 2026 11:03:45 +0000
ROA not before:           Tue 10 Mar 2026 10:58:45 +0000
ROA not after:            Tue 09 Mar 2027 11:03:45 +0000
asID:                     264936
IP address blocks:        2804:3034::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/B3B8F62FD35AD75BED6DEBD323E8ED53C0990AE3.crl
                          rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/B3B8F62FD35AD75BED6DEBD323E8ED53C0990AE3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3B8F62FD35AD75BED6DEBD323E8ED53C0990AE3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 09:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:50:b4:87:96:68:1a:5f:65:cd:68:c1:61:86:6d:80:d3:cf:95:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3B8F62FD35AD75BED6DEBD323E8ED53C0990AE3
        Validity
            Not Before: Mar 10 10:58:45 2026 GMT
            Not After : Mar  9 11:03:45 2027 GMT
        Subject: CN=F1B1A5ED0F7F02C03A259A0F475758CFCA891252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:79:03:46:81:b2:12:2c:9a:d8:de:ea:0c:ec:
                    8d:3d:2c:b8:b9:27:9f:34:1e:54:34:43:2c:ff:61:
                    59:0d:e7:93:ff:77:de:da:22:2f:4f:92:55:59:17:
                    66:81:32:94:f1:83:73:e4:8e:dd:59:7a:cf:70:94:
                    ac:30:71:02:7e:72:8c:a4:ec:27:ad:52:53:94:48:
                    27:36:d9:d7:e5:84:44:a0:79:c3:d3:4f:66:22:fa:
                    2c:e2:0e:99:a9:3b:d2:c2:fd:d8:99:d8:fe:1e:97:
                    89:40:d2:c9:ea:fe:f5:d7:02:ae:82:ee:0b:a0:f7:
                    bb:6f:37:f9:84:a5:24:94:6a:f4:a3:13:49:9d:94:
                    d7:11:6d:ec:46:d6:d3:94:14:3b:a3:40:4f:67:f1:
                    f9:49:3d:a7:3f:df:1a:e8:86:24:51:9b:71:c7:d2:
                    11:e5:8f:57:ab:cc:bc:0c:68:26:bc:20:27:d7:d0:
                    da:ca:f6:18:bc:02:6c:a9:28:ab:df:be:18:91:bc:
                    38:05:8f:5b:fb:54:0d:d4:e9:b4:d4:83:44:0e:79:
                    b8:6e:8f:fe:5a:ea:cb:80:ed:f0:1e:22:e3:e3:ab:
                    5a:00:31:5b:3d:6a:db:98:1a:8b:ea:31:a6:02:35:
                    48:62:28:a1:85:66:97:9c:e9:41:1e:0b:67:df:60:
                    36:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B1:A5:ED:0F:7F:02:C0:3A:25:9A:0F:47:57:58:CF:CA:89:12:52
            X509v3 Authority Key Identifier:
                keyid:B3:B8:F6:2F:D3:5A:D7:5B:ED:6D:EB:D3:23:E8:ED:53:C0:99:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/B3B8F62FD35AD75BED6DEBD323E8ED53C0990AE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3B8F62FD35AD75BED6DEBD323E8ED53C0990AE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a3a2f34342d3434203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034::/44

    Signature Algorithm: sha256WithRSAEncryption
         b5:2b:2c:50:c7:e6:22:53:00:ac:b1:11:72:89:e9:49:bd:6c:
         96:63:2c:db:5e:da:9c:57:1c:c6:26:35:a1:3c:44:38:f1:22:
         a5:f7:f3:34:62:a1:24:02:81:ae:0e:08:1c:00:3d:41:b8:ad:
         25:36:a7:54:a9:9a:18:90:b7:10:b8:b0:f5:7b:93:bc:87:27:
         72:cf:9b:6d:43:4d:4d:b0:a8:78:50:36:5b:c4:35:47:cd:b7:
         1a:17:0a:54:bc:98:45:3f:f6:7e:97:f2:cf:6f:74:4b:79:8c:
         8d:fa:d9:a3:c4:b0:d2:65:67:fa:26:18:38:ae:bf:45:4d:e3:
         30:67:ad:fe:9f:37:0d:9c:90:c6:46:bc:18:da:79:6b:ab:c0:
         4b:6f:ef:99:fb:b1:d2:09:2e:df:be:4f:9b:14:95:17:b0:d7:
         59:31:dc:b6:07:4d:cd:23:3f:fb:ac:4f:39:5c:41:47:8a:75:
         f4:6c:ae:b9:4a:a6:97:8d:5e:ee:33:db:31:c2:83:7f:f3:81:
         28:6a:4b:70:16:83:51:2e:95:97:d3:07:b6:11:ba:d0:69:af:
         f7:6c:d3:74:1a:e0:7f:24:17:6b:f0:20:3b:4b:77:ef:b1:83:
         36:49:3d:73:f6:a6:6c:9e:ee:d1:a6:0d:26:b3:7d:05:b1:27:
         d9:43:e7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:26:58 2026 by rpki-client