Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a623030303a3a2f33362d3336203d3e203631393233.roa
File:                     323830343a313833343a623030303a3a2f33362d3336203d3e203631393233.roa (raw, json)
Hash identifier:          Mr6cqlsAym4TrDWDf9/q2eDNthKb4TnQ0P1SN2d1spU=
Subject key identifier:   BE:E5:66:D6:83:D7:BD:68:D8:67:B7:24:E6:78:F5:D1:95:B9:EC:36
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       6CC3CB0051F6F8BC3829537E5EC4AB41778180FB
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a623030303a3a2f33362d3336203d3e203631393233.roa
Signing time:             Tue 17 Mar 2026 19:11:42 +0000
ROA not before:           Tue 17 Mar 2026 19:06:42 +0000
ROA not after:            Tue 16 Mar 2027 19:11:42 +0000
asID:                     61923
IP address blocks:        2804:1834:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 07:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c3:cb:00:51:f6:f8:bc:38:29:53:7e:5e:c4:ab:41:77:81:80:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Mar 17 19:06:42 2026 GMT
            Not After : Mar 16 19:11:42 2027 GMT
        Subject: CN=BEE566D683D7BD68D867B724E678F5D195B9EC36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d9:e4:4f:4f:b1:07:21:74:b5:59:30:04:ec:
                    49:27:a7:a3:95:e8:e8:d1:d0:d5:d8:5f:d0:e4:7d:
                    74:e0:5e:a9:97:6a:6e:b2:66:38:2a:74:39:05:85:
                    85:d1:b7:b6:64:6c:55:15:dd:fd:fe:c2:a3:2a:72:
                    ef:e1:79:8d:7d:f8:cd:76:09:9d:8a:65:13:9e:eb:
                    e7:fb:b6:b1:62:14:ac:ac:75:f0:33:91:d5:94:56:
                    33:6e:49:4c:d4:07:12:07:09:bc:1b:3e:2d:db:c0:
                    5e:8a:d3:44:30:54:f3:a6:73:a7:9b:fd:64:88:e9:
                    51:9c:05:85:f3:e0:1b:12:6e:0d:56:6d:0b:4b:86:
                    ee:06:72:12:f6:5a:62:cd:ec:21:d7:ee:04:18:6b:
                    36:b7:b9:49:0c:a7:0f:72:cf:32:7e:8d:e0:c1:6a:
                    17:7e:bc:ad:15:4f:af:07:bd:d0:05:f1:1d:dc:a6:
                    1c:0c:50:c7:fa:9f:fa:73:92:c5:a1:9d:86:91:32:
                    1a:52:bb:5b:75:e4:95:cb:00:a7:73:14:c2:35:2e:
                    7c:9b:e6:f6:27:8f:12:45:9e:47:da:2f:1a:72:78:
                    89:75:74:94:38:02:54:c1:65:fc:ff:c7:df:0c:62:
                    05:27:06:cb:7d:50:88:14:f7:fd:0b:41:20:4f:58:
                    a1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E5:66:D6:83:D7:BD:68:D8:67:B7:24:E6:78:F5:D1:95:B9:EC:36
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a623030303a3a2f33362d3336203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1834:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         61:ad:fd:23:10:16:79:71:8b:cb:a6:08:37:ef:51:b7:1c:71:
         ee:53:ec:33:ec:85:61:db:8a:8f:92:04:40:49:e7:31:63:3d:
         f6:58:39:c3:65:d9:ee:3a:fa:84:3c:ac:27:c9:a6:13:25:02:
         08:b6:0f:70:49:c6:b8:44:99:42:9e:61:39:a2:3b:4e:40:f0:
         0a:b0:24:78:c1:90:c0:aa:ff:6b:b1:cd:6d:51:54:f2:c6:5e:
         93:9a:6b:78:08:a7:a3:c6:fd:bc:a0:d6:ed:70:6b:67:d0:29:
         cf:cb:b8:a2:6a:d7:05:18:a8:6c:46:fc:a9:e0:14:ea:52:7d:
         91:42:16:e5:b8:f1:83:0f:17:86:5f:1f:b5:a0:41:6a:6f:42:
         c4:a3:aa:9d:64:3f:7b:f2:9b:21:73:65:2b:f6:82:13:cc:2d:
         18:c0:dd:d6:87:78:36:65:c8:e6:24:69:aa:00:d2:cc:3e:bc:
         a4:ea:a5:c8:d8:82:4e:1d:ff:d5:36:02:30:e4:fb:2c:ee:f9:
         7b:08:6c:85:c4:93:6f:b0:75:a8:6c:df:ad:68:72:80:0d:27:
         14:8b:17:c6:f7:bf:8a:51:e4:2b:75:3b:e0:00:18:b0:1d:bd:
         e4:96:ae:a9:31:3b:ef:90:fa:1e:97:19:09:1b:6f:c8:a7:eb:
         93:13:67:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:54:19 2026 by rpki-client