Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a363030303a3a2f33362d3336203d3e203631393233.roa
File:                     323830343a313833343a363030303a3a2f33362d3336203d3e203631393233.roa (raw, json)
Hash identifier:          s1g0K2W7zbZfKeDeefWg6xTaQ7F6dq0HeI3/nolonsM=
Subject key identifier:   5F:4E:1E:51:FE:2B:5A:3B:35:C8:E7:CD:3C:21:DC:30:1D:FC:C0:2C
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       69F98C77EC47E21E4FDBB675D3D7255A5306B8D4
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a363030303a3a2f33362d3336203d3e203631393233.roa
Signing time:             Tue 17 Mar 2026 19:11:45 +0000
ROA not before:           Tue 17 Mar 2026 19:06:45 +0000
ROA not after:            Tue 16 Mar 2027 19:11:45 +0000
asID:                     61923
IP address blocks:        2804:1834:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 07:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:f9:8c:77:ec:47:e2:1e:4f:db:b6:75:d3:d7:25:5a:53:06:b8:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Mar 17 19:06:45 2026 GMT
            Not After : Mar 16 19:11:45 2027 GMT
        Subject: CN=5F4E1E51FE2B5A3B35C8E7CD3C21DC301DFCC02C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4b:b8:d1:27:4a:e7:68:75:ef:61:78:3a:cf:
                    b8:81:2c:98:03:6f:7e:20:4d:c7:2e:c0:2b:9b:c5:
                    19:54:46:8e:bd:db:d1:e7:7f:b8:e7:b4:f5:ad:ef:
                    5c:08:6b:08:e9:9a:17:87:ca:13:df:a8:73:da:af:
                    55:20:30:b5:0f:e8:79:ca:f8:6e:ce:69:47:c1:da:
                    ad:39:46:8f:67:37:6a:c2:9a:92:20:30:e9:9a:42:
                    75:96:37:a5:d6:99:d3:cf:3d:81:82:c0:54:ab:d0:
                    ae:6b:24:34:5c:92:52:da:a9:43:9e:1f:ea:1f:d8:
                    55:f9:78:bc:50:73:53:d6:31:bf:b6:ff:40:10:76:
                    42:f7:b9:e6:cc:f0:11:1d:c0:cc:d0:0f:5e:3d:6f:
                    c8:66:1c:42:49:88:8d:28:df:54:a7:2a:bb:b1:8e:
                    2c:5f:88:b8:f9:b2:cb:61:cd:2c:f8:fa:96:4c:5b:
                    2c:3c:bc:de:ec:fe:82:ab:99:56:e1:8f:b6:69:12:
                    7d:e8:35:e8:b2:f8:79:6f:73:c6:7d:5e:33:b3:a9:
                    85:2c:c0:2d:1d:84:59:30:15:ed:4c:2e:95:7b:ce:
                    1b:87:bf:aa:54:2a:4a:81:d2:5e:54:c0:d4:aa:d5:
                    9d:1d:b8:0a:3e:20:6b:5d:ef:07:8b:47:e3:dc:0a:
                    52:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4E:1E:51:FE:2B:5A:3B:35:C8:E7:CD:3C:21:DC:30:1D:FC:C0:2C
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a363030303a3a2f33362d3336203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1834:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1d:67:67:25:19:ea:24:f3:22:fa:e9:86:89:c2:60:fe:52:5a:
         71:e5:45:f4:a2:c0:7c:e7:00:16:ad:53:5a:e3:25:c0:81:98:
         a1:cd:23:59:a5:cf:18:83:63:90:80:3c:8a:f4:57:65:c1:c2:
         4e:6b:1b:0f:9a:0a:11:2f:ad:66:03:bb:76:25:18:26:ee:ac:
         fa:e9:e1:19:93:37:d2:95:b6:cd:12:2d:a9:2f:23:bf:5b:b6:
         64:29:a8:ec:16:80:e7:49:19:81:fb:ca:5a:c4:55:73:2e:71:
         1a:f5:d7:99:5d:45:a8:4e:bd:a5:ac:31:da:7b:90:62:e3:71:
         19:c7:4e:bb:70:f8:67:86:de:bb:29:6e:b6:43:4a:49:3a:b9:
         7b:85:40:d1:ca:cd:c1:82:35:d9:0b:04:0b:4b:c2:7e:36:e7:
         2d:38:5f:67:a3:55:79:85:74:43:07:31:d9:00:72:3c:f7:a3:
         28:4c:8c:08:b9:70:83:68:f5:2f:43:b8:df:8a:f5:9a:91:20:
         43:70:72:20:32:d2:ef:c4:4e:b4:09:22:f4:9e:56:96:14:1c:
         75:3e:95:c0:37:ab:b0:65:d5:c1:ca:d6:86:82:ec:76:e4:fb:
         1e:37:5f:7e:92:a2:d8:34:62:e6:65:85:03:03:db:56:d9:41:
         94:18:2a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:54:27 2026 by rpki-client