Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Y6q7P9jyxptAqcYdskSTtr14JceZkGU3aFAV47JfksF/0/323830343a333061633a3a2f33322d313238203d3e20323634393638.roa
File:                     323830343a333061633a3a2f33322d313238203d3e20323634393638.roa (raw, json)
Hash identifier:          4nreUspluRzxKRpZrxrtcpRMeMyVpbTC1j9TpswK0rs=
Subject key identifier:   50:0A:58:46:0D:59:07:11:C8:8B:6E:31:10:9B:69:E7:A1:FF:96:BE
Certificate issuer:       /CN=62216C11971D25A79D655649CB8436FC80631F08
Certificate serial:       62AC125B93437585A836E9404D157457F176DF94
Authority key identifier: 62:21:6C:11:97:1D:25:A7:9D:65:56:49:CB:84:36:FC:80:63:1F:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62216C11971D25A79D655649CB8436FC80631F08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Y6q7P9jyxptAqcYdskSTtr14JceZkGU3aFAV47JfksF/0/323830343a333061633a3a2f33322d313238203d3e20323634393638.roa
Signing time:             Mon 23 Mar 2026 12:56:27 +0000
ROA not before:           Mon 23 Mar 2026 12:51:27 +0000
ROA not after:            Mon 22 Mar 2027 12:56:27 +0000
asID:                     264968
IP address blocks:        2804:30ac::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Y6q7P9jyxptAqcYdskSTtr14JceZkGU3aFAV47JfksF/0/62216C11971D25A79D655649CB8436FC80631F08.crl
                          rsync://rpki-repo.registro.br/repo/4Y6q7P9jyxptAqcYdskSTtr14JceZkGU3aFAV47JfksF/0/62216C11971D25A79D655649CB8436FC80631F08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62216C11971D25A79D655649CB8436FC80631F08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 15:14:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ac:12:5b:93:43:75:85:a8:36:e9:40:4d:15:74:57:f1:76:df:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62216C11971D25A79D655649CB8436FC80631F08
        Validity
            Not Before: Mar 23 12:51:27 2026 GMT
            Not After : Mar 22 12:56:27 2027 GMT
        Subject: CN=500A58460D590711C88B6E31109B69E7A1FF96BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bc:e0:35:7c:ef:76:f5:12:a9:e8:08:17:b5:
                    4b:f7:b4:1f:55:27:18:e4:f4:b8:93:24:c2:2d:7e:
                    47:b6:92:a2:3d:d8:12:4a:7a:e2:ee:8a:2a:f8:14:
                    a1:ff:05:5d:3b:5d:c3:a7:57:57:84:d0:2e:59:25:
                    bb:0c:97:0d:16:99:cb:d4:14:6e:10:41:5b:e1:43:
                    55:36:87:56:20:04:de:2e:6a:d7:a7:5a:ed:cc:04:
                    90:2b:d7:d0:7c:cd:07:39:ee:d7:83:5e:8a:bf:9b:
                    7d:27:20:7c:cb:fd:01:6d:d3:fb:c0:59:8d:4d:1d:
                    7e:55:76:d2:bb:b6:f5:e7:61:8f:10:ce:0c:d9:01:
                    d5:6d:88:bf:7e:9a:b5:30:df:bb:ad:85:40:77:23:
                    ce:cf:f3:89:d3:b4:e1:40:d2:99:ca:b8:06:44:f0:
                    ed:c3:3c:20:8b:6a:83:0f:bb:59:9d:f3:8b:a5:b6:
                    63:23:1e:94:b8:c1:a1:a6:74:f3:9c:f8:59:77:6f:
                    55:43:0f:f3:c9:9f:a9:04:3b:b2:63:28:43:cb:f7:
                    17:21:b2:08:31:06:1c:a9:49:2b:5e:fe:dc:b2:2f:
                    ba:0d:50:04:a0:f1:5f:3f:da:33:4e:1c:e1:52:f4:
                    29:aa:47:31:f3:39:6d:60:4f:20:bc:52:99:ee:07:
                    73:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0A:58:46:0D:59:07:11:C8:8B:6E:31:10:9B:69:E7:A1:FF:96:BE
            X509v3 Authority Key Identifier:
                keyid:62:21:6C:11:97:1D:25:A7:9D:65:56:49:CB:84:36:FC:80:63:1F:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Y6q7P9jyxptAqcYdskSTtr14JceZkGU3aFAV47JfksF/0/62216C11971D25A79D655649CB8436FC80631F08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62216C11971D25A79D655649CB8436FC80631F08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Y6q7P9jyxptAqcYdskSTtr14JceZkGU3aFAV47JfksF/0/323830343a333061633a3a2f33322d313238203d3e20323634393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:30ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:83:f3:20:d1:49:ac:ab:61:b6:8d:d5:bb:fd:db:ed:79:b9:
         50:bd:d3:76:6e:ed:64:60:c9:95:83:1d:c2:41:40:57:ea:2a:
         95:76:2d:b9:96:59:48:02:cf:5c:0a:c5:05:5b:15:01:64:c5:
         d7:c4:c0:2b:dc:ba:84:a7:ee:37:bb:77:3f:26:3a:fe:73:c9:
         7e:ea:cd:32:ca:bb:21:87:c2:d5:e7:75:a6:47:a7:5a:4f:93:
         f9:e8:8f:96:4d:77:c2:52:01:b6:e2:a7:23:52:3b:01:75:cf:
         bb:25:ca:f1:b7:a8:4f:8e:0c:87:5d:4b:c8:46:89:e0:b1:47:
         fc:13:2d:0c:5d:b9:b5:07:70:c0:4a:b3:5e:4a:32:cb:d8:9f:
         55:e1:41:18:ed:67:48:a0:e1:99:90:bb:be:38:d9:00:55:a9:
         fa:01:86:c0:5c:25:d2:ac:e9:11:f3:98:0f:e3:91:a8:89:da:
         24:43:06:99:e0:58:7a:1b:4d:e4:68:a6:48:f8:20:04:85:da:
         4d:d6:97:fa:b7:01:14:32:e3:04:73:81:60:cf:c2:36:57:57:
         44:da:e4:6f:4c:63:c1:71:69:47:00:46:0e:a6:7e:25:04:70:
         0c:a4:72:21:1e:bd:1e:29:0f:d8:d6:da:8e:a8:be:9a:89:43:
         d2:bb:21:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:22:49 2026 by rpki-client