Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a3130303a3a2f34302d3430203d3e20323632343234.roa
File:                     323830343a363136343a3130303a3a2f34302d3430203d3e20323632343234.roa (raw, json)
Hash identifier:          aAFyzMDYbw3CtJ6PF/JTH3GDAHkSqAGFqipzSGkjYh4=
Subject key identifier:   B3:90:CB:F6:24:88:3B:30:25:84:16:30:26:D9:C9:61:0B:6D:26:FA
Certificate issuer:       /CN=BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0
Certificate serial:       024626188C7DFA1EE8C893E0A6DE08533C767313
Authority key identifier: BC:B9:95:CE:EA:05:AD:BF:EB:8D:71:B1:A0:0A:EB:D5:69:81:21:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a3130303a3a2f34302d3430203d3e20323632343234.roa
Signing time:             Mon 02 Mar 2026 22:30:55 +0000
ROA not before:           Mon 02 Mar 2026 22:25:55 +0000
ROA not after:            Mon 01 Mar 2027 22:30:55 +0000
asID:                     262424
IP address blocks:        2804:6164:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 12:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:46:26:18:8c:7d:fa:1e:e8:c8:93:e0:a6:de:08:53:3c:76:73:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0
        Validity
            Not Before: Mar  2 22:25:55 2026 GMT
            Not After : Mar  1 22:30:55 2027 GMT
        Subject: CN=B390CBF624883B302584163026D9C9610B6D26FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:86:95:f5:65:80:54:00:22:0e:c2:e1:af:4e:
                    ac:89:13:f5:dd:16:d7:ff:5c:95:d8:fc:d1:c6:27:
                    42:38:28:84:d0:04:f9:28:c9:36:1c:84:e9:f2:5f:
                    f0:4b:36:fd:fd:ed:7f:36:33:ef:40:13:ca:fe:c9:
                    6d:a0:25:e5:79:a8:d8:54:6f:06:60:cf:e6:e4:83:
                    90:76:55:8a:d4:ed:cb:09:ce:c2:58:68:aa:ab:4f:
                    43:8a:f8:a5:45:57:b0:59:b8:73:b4:04:d3:1e:85:
                    ee:8c:b6:66:03:7b:ef:0c:fe:cd:eb:dd:86:4a:31:
                    e5:ea:3e:ce:1b:dd:fc:1f:6e:1e:be:f7:19:0b:ab:
                    e9:56:67:9c:61:f1:66:37:43:ba:fc:fd:fb:39:b6:
                    ee:23:07:ea:43:be:3c:78:4a:8b:b6:85:f3:c9:a9:
                    bc:88:87:92:39:08:19:12:92:90:3f:c3:c4:36:a7:
                    a8:bd:e3:cd:65:6d:f6:7e:50:de:b2:b7:bd:1a:90:
                    36:24:25:4a:db:3c:07:2d:b5:ad:79:f8:ad:b1:da:
                    9f:14:df:b1:8b:a0:3c:eb:73:d8:fa:00:0c:da:9f:
                    1d:c9:99:d4:f7:7d:21:f8:d8:53:3c:4e:7a:5f:55:
                    5f:86:b5:4d:92:30:73:4f:8e:3e:5d:d4:8d:09:25:
                    a7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:90:CB:F6:24:88:3B:30:25:84:16:30:26:D9:C9:61:0B:6D:26:FA
            X509v3 Authority Key Identifier:
                keyid:BC:B9:95:CE:EA:05:AD:BF:EB:8D:71:B1:A0:0A:EB:D5:69:81:21:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a3130303a3a2f34302d3430203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6164:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         19:14:a7:e1:91:dd:b4:24:65:40:54:2b:a6:24:22:3b:37:33:
         70:bd:23:82:4f:b5:2a:c7:90:5d:06:6c:1e:78:a0:f2:82:90:
         c9:84:21:de:a3:d2:8c:27:50:7f:b0:c3:b5:b7:33:26:40:1b:
         a5:67:4d:b8:b7:f1:b1:ee:f9:fd:4a:21:87:53:f1:be:43:05:
         f6:0a:35:fe:fa:fa:30:08:d3:d1:3e:f1:26:e5:34:6a:07:49:
         11:db:24:6a:19:8e:6c:56:80:08:d1:eb:53:58:f1:84:a9:7e:
         e3:79:ac:64:bc:86:68:75:1f:ec:ee:16:db:a0:fa:81:a5:ce:
         78:cb:47:26:63:ce:61:c7:8a:78:46:bd:ca:12:da:b9:bf:2b:
         f4:c7:44:3a:42:9b:b8:55:8b:50:15:d8:36:97:1e:ff:69:f6:
         b9:f3:29:a7:c9:a7:7c:32:6d:09:03:36:54:f1:e9:c3:ca:0e:
         20:37:b5:9f:aa:d1:1d:b6:dd:f9:a4:29:a6:bd:c7:b7:9f:fc:
         e6:95:8d:aa:36:a1:00:45:ea:58:f2:fb:c5:90:47:81:89:4b:
         30:69:89:b4:06:43:d7:6a:df:a5:a1:8a:5f:94:90:c6:e9:b3:
         c1:6b:7e:34:de:fc:a1:4a:b5:e4:6f:3f:5a:86:50:4e:03:10:
         68:7d:34:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:01:53 2026 by rpki-client