Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/323830343a3462633a3a2f33322d3438203d3e20323632343632.roa
File:                     323830343a3462633a3a2f33322d3438203d3e20323632343632.roa (raw, json)
Hash identifier:          hTq5kYbe7EChfFPH0YoNTIhAVdA6/gu4xucbyFP6WNc=
Subject key identifier:   58:5D:C7:B5:05:55:4D:96:6A:00:70:E1:9C:17:28:55:84:8D:D5:16
Certificate issuer:       /CN=DD57F54CD0114823ABB5B5203F91EF5EEC26B06F
Certificate serial:       427BC5D7F3D880FBE848F6D4EC3158A5530E9428
Authority key identifier: DD:57:F5:4C:D0:11:48:23:AB:B5:B5:20:3F:91:EF:5E:EC:26:B0:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/323830343a3462633a3a2f33322d3438203d3e20323632343632.roa
Signing time:             Sun 08 Mar 2026 19:38:45 +0000
ROA not before:           Sun 08 Mar 2026 19:33:45 +0000
ROA not after:            Sun 07 Mar 2027 19:38:45 +0000
asID:                     262462
IP address blocks:        2804:4bc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.crl
                          rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 06:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:7b:c5:d7:f3:d8:80:fb:e8:48:f6:d4:ec:31:58:a5:53:0e:94:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD57F54CD0114823ABB5B5203F91EF5EEC26B06F
        Validity
            Not Before: Mar  8 19:33:45 2026 GMT
            Not After : Mar  7 19:38:45 2027 GMT
        Subject: CN=585DC7B505554D966A0070E19C172855848DD516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ad:ea:5b:ed:47:29:ae:20:b6:d4:5f:bf:b8:
                    6e:ab:48:f6:ba:fd:c4:76:b3:d8:54:13:48:bf:7f:
                    9b:73:55:26:12:0d:fc:1e:99:75:fa:4e:2a:8f:c0:
                    d7:1f:bc:2c:c4:4a:e7:b8:9a:82:5b:f6:49:a5:04:
                    52:b5:04:9f:66:d5:7c:10:a7:94:fd:0e:c3:93:fa:
                    eb:fd:95:5b:ea:28:e0:cf:d3:d4:0c:71:0d:1f:ec:
                    ba:7c:08:b9:e0:ea:9b:d3:9e:4f:58:98:47:c6:03:
                    73:90:81:f6:32:bc:d1:20:0d:ca:81:af:8f:51:85:
                    dc:e2:8d:c4:cb:da:1c:46:3d:01:a1:29:5f:f1:ed:
                    58:8a:b0:34:8d:61:d7:09:31:5e:e2:2a:e3:5e:17:
                    07:44:30:e1:96:ba:2b:0e:a6:f3:27:0b:14:95:a9:
                    26:3e:c2:c9:96:5f:5f:46:2c:18:67:08:e2:3c:12:
                    f4:b0:a0:f6:8d:8a:e5:6d:e2:5b:c4:ee:ca:f1:01:
                    22:d7:2e:d0:8c:9d:4c:60:c3:d3:d3:c9:91:1b:47:
                    d2:eb:f8:68:c9:63:a1:b6:49:b5:be:81:02:94:da:
                    d0:27:a4:10:e7:3c:b1:d0:f4:f9:48:9a:18:ba:ca:
                    98:d8:b6:c9:da:d9:06:ac:d2:75:a7:a4:bd:4c:16:
                    e5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5D:C7:B5:05:55:4D:96:6A:00:70:E1:9C:17:28:55:84:8D:D5:16
            X509v3 Authority Key Identifier:
                keyid:DD:57:F5:4C:D0:11:48:23:AB:B5:B5:20:3F:91:EF:5E:EC:26:B0:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/323830343a3462633a3a2f33322d3438203d3e20323632343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:38:8c:e3:54:85:2b:60:6f:54:4b:58:e2:66:a9:52:b5:73:
         a4:fc:de:b2:72:7f:cc:9e:c8:99:19:93:93:35:52:45:1a:cf:
         2b:77:4f:e2:d1:6c:f2:29:c6:f4:17:c2:18:06:08:6d:ad:3a:
         f5:ee:5e:58:5b:45:fc:77:84:6d:d9:40:b0:ab:69:fa:69:38:
         9e:2e:48:37:5d:96:e8:3e:c1:af:cf:17:a6:f5:bc:d2:4f:8f:
         c6:ba:d9:75:09:60:c0:83:d5:d6:87:9a:a0:46:83:e7:67:28:
         6a:2c:bb:d7:31:3d:cd:4c:1d:00:72:37:35:84:2f:23:4b:af:
         4f:2e:81:03:88:53:38:df:23:5e:65:ad:70:09:7e:74:4f:66:
         09:bd:d1:2f:cf:13:34:58:4a:cc:2b:e9:4c:37:86:84:df:26:
         f0:7c:14:c0:c9:75:3d:06:ad:32:4e:3e:f4:a4:70:71:86:1c:
         85:39:0c:6c:16:43:d1:37:c1:fa:a1:77:c4:29:ab:3f:1f:66:
         d0:18:6d:cf:ff:27:63:cf:11:45:a7:39:9e:ad:17:0c:ce:d7:
         15:08:30:45:9e:53:ca:9c:f5:ad:e9:e7:40:1f:02:28:58:36:
         44:56:92:f4:73:46:37:01:35:a9:77:58:0b:33:70:c8:34:e3:
         e0:7a:c2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:57:11 2026 by rpki-client