Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/323830343a6630383a3a2f33332d3333203d3e20323633353633.roa
File:                     323830343a6630383a3a2f33332d3333203d3e20323633353633.roa (raw, json)
Hash identifier:          +Pc3RrEOXdNMH2AjgrwCjoHyU3KrAz4i+IUZ6CzFxMk=
Subject key identifier:   58:12:74:44:A3:15:C2:1A:CB:42:EF:51:7A:36:26:AD:5D:F6:A1:D4
Certificate issuer:       /CN=8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7
Certificate serial:       560ED3C559C375F884910700E9D05D8ED467E35D
Authority key identifier: 8E:AE:8D:1A:E6:A6:86:9C:FE:54:E3:74:20:1A:54:F2:E0:93:4E:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/323830343a6630383a3a2f33332d3333203d3e20323633353633.roa
Signing time:             Fri 13 Mar 2026 15:23:22 +0000
ROA not before:           Fri 13 Mar 2026 15:18:22 +0000
ROA not after:            Fri 12 Mar 2027 15:23:22 +0000
asID:                     263563
IP address blocks:        2804:f08::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.crl
                          rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 13:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:0e:d3:c5:59:c3:75:f8:84:91:07:00:e9:d0:5d:8e:d4:67:e3:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7
        Validity
            Not Before: Mar 13 15:18:22 2026 GMT
            Not After : Mar 12 15:23:22 2027 GMT
        Subject: CN=58127444A315C21ACB42EF517A3626AD5DF6A1D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d0:83:aa:d6:99:94:f8:8d:56:f8:4f:f5:c6:
                    e2:22:0b:cd:ae:ff:39:17:54:1c:79:a8:99:66:9a:
                    e5:7e:66:7e:d0:5c:22:f2:a4:a9:b8:c4:ea:a7:30:
                    3a:5c:c8:a9:38:70:e1:7d:11:47:43:1f:84:62:a7:
                    c6:6f:bf:94:d9:9f:ad:8f:d1:8e:d8:04:72:6e:88:
                    f6:36:f2:60:2b:da:dc:ca:3e:f9:c8:d9:e6:7b:20:
                    5f:ae:d0:51:78:ea:a9:2a:a9:cf:d2:f0:7c:71:e0:
                    33:d7:a1:a1:37:19:a1:3a:1f:aa:ab:9b:93:e2:e1:
                    a6:e0:8a:2f:05:8a:6b:b7:00:c2:e7:c6:54:cf:02:
                    e5:00:cc:10:10:e7:4f:06:2b:f4:8a:1b:f5:b3:9e:
                    8c:e8:8e:34:e7:63:3e:de:5d:25:ce:10:57:fd:13:
                    e6:9a:17:03:52:fc:c5:62:45:e7:83:8f:d1:b9:32:
                    ed:3d:41:1c:70:62:2d:0c:f6:7b:9d:a5:e9:d4:4f:
                    82:c0:ec:2d:13:c2:b9:da:57:4c:31:1c:15:4c:82:
                    48:fd:64:de:34:c1:a6:ca:b4:d4:17:40:57:dc:42:
                    22:a7:6c:7e:f5:44:26:46:96:3a:c9:fc:75:dd:3e:
                    56:f7:95:b9:08:8b:a5:01:8a:1e:d4:60:15:8d:d2:
                    48:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:12:74:44:A3:15:C2:1A:CB:42:EF:51:7A:36:26:AD:5D:F6:A1:D4
            X509v3 Authority Key Identifier:
                keyid:8E:AE:8D:1A:E6:A6:86:9C:FE:54:E3:74:20:1A:54:F2:E0:93:4E:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/323830343a6630383a3a2f33332d3333203d3e20323633353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f08::/33

    Signature Algorithm: sha256WithRSAEncryption
         1c:e1:a6:ed:c4:d9:4a:ad:73:04:21:20:15:53:be:39:a5:86:
         88:50:cb:1d:d2:2e:a0:93:91:90:9e:a7:08:a8:e4:0a:a8:21:
         18:b1:56:e4:00:ba:2c:a4:14:9a:51:bd:16:67:1a:d6:f3:d8:
         f0:9d:38:9f:1e:1a:72:2d:58:a5:bd:1b:3f:68:d5:8d:72:5c:
         b9:d2:cb:23:d3:b0:93:09:4d:b2:c0:17:5b:17:f7:f3:4c:ce:
         ab:66:9c:2e:88:9f:a3:1a:3e:63:2d:c2:ef:d5:2b:07:70:ac:
         63:fd:c7:01:7c:3d:3f:07:3a:cb:d9:a7:14:22:42:2a:27:5a:
         56:89:2a:85:fa:40:32:aa:76:6a:cf:08:22:e0:0e:46:cd:c2:
         6b:1d:fd:25:ba:60:25:af:d6:3c:69:6e:73:ec:06:77:8e:72:
         dc:c8:3e:1b:f8:ac:de:85:19:81:11:3a:b2:ba:31:94:7f:bf:
         5f:3a:e7:0b:5e:bf:fb:70:97:0e:66:b8:20:8f:47:2e:b1:46:
         23:1a:04:93:04:0a:49:0b:c1:7f:5b:b5:8d:48:2d:51:7c:ed:
         24:9e:72:b2:54:a6:da:4f:ff:c4:70:42:42:4e:06:f9:b5:20:
         f3:b6:b2:45:5c:6f:01:45:c8:7f:f8:60:7c:03:be:74:8e:61:
         ba:69:e4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:59:21 2026 by rpki-client