Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a343034303a3a2f34322d3432203d3e20323632343234.roa
File:                     323830343a363136343a343034303a3a2f34322d3432203d3e20323632343234.roa (raw, json)
Hash identifier:          Kdq0XT7mYIxlgsO7tcfqWaGnIxJIFhk0BxX/a711k1U=
Subject key identifier:   AB:9D:3C:00:26:FD:10:86:2C:93:49:1D:9A:8B:A8:BF:07:26:00:7D
Certificate issuer:       /CN=BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0
Certificate serial:       6F26252FB379DCDEB3DF88F3A75AB98AE00BF5F5
Authority key identifier: BC:B9:95:CE:EA:05:AD:BF:EB:8D:71:B1:A0:0A:EB:D5:69:81:21:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a343034303a3a2f34322d3432203d3e20323632343234.roa
Signing time:             Mon 02 Mar 2026 22:31:16 +0000
ROA not before:           Mon 02 Mar 2026 22:26:16 +0000
ROA not after:            Mon 01 Mar 2027 22:31:16 +0000
asID:                     262424
IP address blocks:        2804:6164:4040::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 12:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:26:25:2f:b3:79:dc:de:b3:df:88:f3:a7:5a:b9:8a:e0:0b:f5:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0
        Validity
            Not Before: Mar  2 22:26:16 2026 GMT
            Not After : Mar  1 22:31:16 2027 GMT
        Subject: CN=AB9D3C0026FD10862C93491D9A8BA8BF0726007D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b1:1e:bb:03:39:23:cf:8c:e8:7e:1d:39:b5:
                    0a:3d:0f:61:3c:c6:ab:02:00:df:ab:e7:0f:df:24:
                    42:91:3d:31:71:5d:04:dd:fa:90:e9:fe:17:0f:b2:
                    20:f4:c2:87:5c:42:6f:94:19:a6:57:24:b8:c6:43:
                    03:73:4e:5a:ce:43:17:07:01:e1:a1:f8:bf:63:e7:
                    d1:7e:ae:c0:d4:54:00:c4:2e:56:f9:80:37:9b:e1:
                    5b:7e:4f:ea:68:26:79:96:b1:e6:f3:a6:6d:ed:f8:
                    41:ac:fb:93:76:b6:e1:85:76:8b:cc:b9:4f:70:8b:
                    ac:83:33:fb:9f:9b:b9:79:2c:4c:9d:05:b3:b7:3b:
                    38:df:25:79:53:4f:74:a8:ea:aa:36:0a:f7:b3:90:
                    08:57:e2:6a:69:1b:d9:a8:e8:b2:21:b8:4a:36:f3:
                    40:dc:7b:88:68:41:b9:1e:00:f6:79:6e:50:10:d3:
                    b2:07:25:d2:8f:c2:0c:56:53:fd:de:f3:bc:4c:d8:
                    05:1a:11:40:8e:29:38:64:82:c9:0c:ca:97:c2:a3:
                    e0:58:12:94:07:6d:b8:5f:ca:5d:dc:75:e2:cc:a0:
                    8c:84:c9:a4:77:f1:de:40:f8:89:76:cc:74:0a:a5:
                    d0:af:a5:b3:be:10:6e:e7:4f:a6:ad:7e:04:17:af:
                    65:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:9D:3C:00:26:FD:10:86:2C:93:49:1D:9A:8B:A8:BF:07:26:00:7D
            X509v3 Authority Key Identifier:
                keyid:BC:B9:95:CE:EA:05:AD:BF:EB:8D:71:B1:A0:0A:EB:D5:69:81:21:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a343034303a3a2f34322d3432203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6164:4040::/42

    Signature Algorithm: sha256WithRSAEncryption
         4a:f7:f2:32:9d:be:b2:78:95:3f:6f:ba:8d:87:19:e8:79:3d:
         75:21:80:c3:cd:e0:02:9f:9a:60:fc:38:17:5d:81:3c:71:b6:
         75:b4:c2:e5:5d:af:06:5e:29:22:c1:60:5e:33:1c:73:de:f5:
         ea:23:24:9d:c1:97:b7:99:32:38:f5:19:29:5c:ae:8c:63:c9:
         df:5d:a0:64:bf:b6:71:b3:9f:cb:5c:a1:98:9b:9c:e2:57:13:
         fa:4a:08:52:1b:f9:19:06:18:d9:e0:f6:05:82:cf:01:4c:cf:
         ee:80:24:30:e8:e2:cd:92:c2:e4:7a:4d:03:c4:cb:1b:46:bf:
         97:99:1f:ae:e8:f0:05:5e:99:9d:cc:d7:5b:45:57:8f:bb:9e:
         ef:5f:d5:a6:48:fb:69:40:14:de:00:2b:3e:eb:53:30:1e:1d:
         5a:78:6c:63:b9:15:f9:a7:f5:7e:8f:59:00:af:ea:2b:21:0a:
         03:3e:c2:fa:e5:ba:0f:30:56:bd:d1:2d:29:1d:4b:f4:c0:4b:
         62:09:86:80:b4:9d:e7:47:5c:d0:26:b3:ab:cf:55:f8:91:a9:
         81:de:0a:05:80:15:03:4a:e2:60:ca:29:7c:ed:90:6c:b2:1d:
         c5:b7:67:80:48:71:f0:b0:d6:dc:91:d7:85:e8:9d:95:16:7c:
         a6:0f:6c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:01:50 2026 by rpki-client