Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/323830343a386566303a313430303a3a2f34302d3430203d3e20323733343537.roa
File:                     323830343a386566303a313430303a3a2f34302d3430203d3e20323733343537.roa (raw, json)
Hash identifier:          u/8M2mkWMfnfJoaDcvE/bE5w9BM7WWe/ZyugfeDRNeY=
Subject key identifier:   63:30:D3:6B:21:59:3A:F5:A2:AB:3C:9B:E8:E5:95:8F:51:C6:18:AA
Certificate issuer:       /CN=406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3
Certificate serial:       795EA42AABA0CA795498FDB44AA540B7B603BDC8
Authority key identifier: 40:6B:00:D5:B6:60:F6:EE:C5:C8:41:4F:A0:F0:B7:FF:3E:C5:76:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/323830343a386566303a313430303a3a2f34302d3430203d3e20323733343537.roa
Signing time:             Fri 06 Mar 2026 10:58:57 +0000
ROA not before:           Fri 06 Mar 2026 10:53:57 +0000
ROA not after:            Fri 05 Mar 2027 10:58:57 +0000
asID:                     273457
IP address blocks:        2804:8ef0:1400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.crl
                          rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 18:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:5e:a4:2a:ab:a0:ca:79:54:98:fd:b4:4a:a5:40:b7:b6:03:bd:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3
        Validity
            Not Before: Mar  6 10:53:57 2026 GMT
            Not After : Mar  5 10:58:57 2027 GMT
        Subject: CN=6330D36B21593AF5A2AB3C9BE8E5958F51C618AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3e:b4:ca:b3:fe:e9:a4:e8:8c:6f:1d:1f:c5:
                    fa:79:8b:c6:87:c8:6f:7e:f5:56:6c:aa:91:e2:ab:
                    4c:55:b5:e0:b2:d3:46:9f:68:ea:fc:ca:9a:7e:a3:
                    6b:6b:ed:31:73:b0:91:03:50:40:43:72:13:b0:6d:
                    58:46:62:34:f0:e7:1f:ba:95:3e:10:b2:d5:01:07:
                    99:03:0d:42:f9:a1:e0:48:bd:d0:35:d1:93:53:fb:
                    f4:a9:dc:ee:c1:36:42:ec:80:04:7a:8e:3a:7c:31:
                    64:f4:af:84:5c:9f:1c:19:f1:84:10:c4:25:3e:56:
                    b3:d3:c0:b4:9c:8a:9a:1f:85:73:bc:14:78:bd:1e:
                    21:8b:e6:29:ed:f7:72:d4:68:63:ec:2b:20:50:81:
                    97:b8:48:81:10:5d:b3:c7:6b:ff:29:f6:f2:df:8a:
                    b9:d8:1b:3c:2c:9d:84:95:d0:b8:fd:ae:60:e0:9f:
                    8b:86:0d:d1:d9:17:a5:9b:05:0c:b0:bd:a0:9e:0f:
                    72:92:61:e9:eb:a5:1e:c4:e2:ef:01:98:25:11:1a:
                    af:1f:e9:6e:ec:00:9a:83:b8:79:72:c9:87:98:32:
                    27:e8:49:79:ec:de:a4:48:94:8c:0e:02:8a:12:3a:
                    59:62:1a:9d:b8:11:b9:94:f8:e9:53:6a:ec:fe:a6:
                    d8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:30:D3:6B:21:59:3A:F5:A2:AB:3C:9B:E8:E5:95:8F:51:C6:18:AA
            X509v3 Authority Key Identifier:
                keyid:40:6B:00:D5:B6:60:F6:EE:C5:C8:41:4F:A0:F0:B7:FF:3E:C5:76:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/323830343a386566303a313430303a3a2f34302d3430203d3e20323733343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ef0:1400::/40

    Signature Algorithm: sha256WithRSAEncryption
         f6:56:2c:a6:0b:e2:90:2b:76:cc:2c:71:d3:be:d1:40:81:39:
         f9:d6:1f:53:b3:8d:12:1e:9a:26:12:d4:fa:5d:e0:3b:ec:49:
         67:13:55:0d:ef:4d:72:70:df:7e:5e:54:46:00:0c:80:24:69:
         f9:1f:19:c5:ce:18:79:9d:0c:1f:ca:74:99:12:de:1c:b1:7c:
         07:52:49:9e:36:32:d5:44:10:aa:b9:30:2d:44:0c:0a:08:49:
         91:4b:be:e6:4f:50:be:7c:09:e2:34:17:3c:e9:39:49:54:6f:
         f4:36:96:45:98:0f:61:08:c6:80:59:c5:59:fd:ec:16:fb:8d:
         85:84:51:58:5d:06:89:d1:14:1d:b5:12:6d:c1:95:80:15:f1:
         59:64:4b:7d:72:bb:e8:e7:3c:64:4a:6e:30:ef:5b:02:ba:fc:
         0f:fc:b3:81:2b:69:56:c4:bd:9f:20:94:80:0c:34:54:e0:f1:
         74:3e:02:00:46:d9:35:ca:ec:cc:11:d0:5a:e0:a0:97:69:58:
         e8:84:d7:68:91:da:0e:11:52:db:7c:03:2b:6b:69:93:1f:5f:
         58:0e:b5:17:ac:3e:8c:4b:7d:a7:9a:c3:c2:90:f5:44:7d:71:
         27:aa:77:cb:68:5c:b6:b3:fe:f6:8c:fa:48:51:0d:ee:37:d2:
         da:98:ec:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:49:11 2026 by rpki-client