Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a38303a3a2f34322d3432203d3e20323632343234.roa
File:                     323830343a363136343a38303a3a2f34322d3432203d3e20323632343234.roa (raw, json)
Hash identifier:          FRxIGeUDPfivJQ+WJW2f2uZw7c9Rp9AfK20stI0XVsk=
Subject key identifier:   36:DF:1F:DD:D6:CF:48:56:10:D1:1E:B1:10:67:93:9D:75:E3:E7:CB
Certificate issuer:       /CN=BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0
Certificate serial:       7ED622FE22471DC47300984CCE3D765D515F7D48
Authority key identifier: BC:B9:95:CE:EA:05:AD:BF:EB:8D:71:B1:A0:0A:EB:D5:69:81:21:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a38303a3a2f34322d3432203d3e20323632343234.roa
Signing time:             Mon 02 Mar 2026 22:30:48 +0000
ROA not before:           Mon 02 Mar 2026 22:25:48 +0000
ROA not after:            Mon 01 Mar 2027 22:30:48 +0000
asID:                     262424
IP address blocks:        2804:6164:80::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 12:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d6:22:fe:22:47:1d:c4:73:00:98:4c:ce:3d:76:5d:51:5f:7d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0
        Validity
            Not Before: Mar  2 22:25:48 2026 GMT
            Not After : Mar  1 22:30:48 2027 GMT
        Subject: CN=36DF1FDDD6CF485610D11EB11067939D75E3E7CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:94:43:aa:6d:4c:85:84:2a:f8:74:ca:ff:df:
                    64:b0:43:68:15:80:2c:d3:fd:57:7d:83:aa:97:2c:
                    f5:e5:86:fa:ef:de:cd:3c:f0:a5:8a:da:fc:a9:f5:
                    5c:ef:50:12:f2:fd:6b:50:6f:b0:67:70:5e:45:92:
                    d8:9a:16:04:67:04:4d:1c:20:78:ff:32:de:6e:75:
                    73:47:83:85:27:ef:79:a7:1f:88:f1:ad:ce:7d:c0:
                    17:33:12:38:70:42:bb:83:f9:dc:bb:1a:ca:18:e2:
                    fc:24:1b:b5:b7:47:f5:83:55:26:55:c6:c3:b4:23:
                    f6:a6:22:2b:53:3b:3c:88:14:7b:f6:e0:ac:8c:7f:
                    25:6e:17:4c:9c:47:60:ed:80:4d:7a:bd:a2:6f:11:
                    75:35:cc:9b:0f:d1:e2:01:f5:04:32:f2:35:67:f1:
                    a0:cb:d8:2f:c2:52:12:27:54:22:35:2d:73:db:dd:
                    9e:b1:bd:fe:03:11:75:ef:f7:78:0f:cf:20:0b:d8:
                    59:e5:fb:db:c2:70:a3:ab:cf:af:b9:de:d2:4a:18:
                    84:0b:8c:78:0a:ca:9f:87:4e:17:5d:66:1c:10:aa:
                    cc:8e:5d:62:a1:10:e4:2e:40:b2:27:3d:28:30:5c:
                    2e:e1:e8:f3:ab:b4:69:28:35:ce:b4:1e:ab:db:30:
                    a7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:DF:1F:DD:D6:CF:48:56:10:D1:1E:B1:10:67:93:9D:75:E3:E7:CB
            X509v3 Authority Key Identifier:
                keyid:BC:B9:95:CE:EA:05:AD:BF:EB:8D:71:B1:A0:0A:EB:D5:69:81:21:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a38303a3a2f34322d3432203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6164:80::/42

    Signature Algorithm: sha256WithRSAEncryption
         14:b4:7e:a4:cb:8d:0a:c6:b5:6e:aa:e9:04:73:67:f7:9d:ea:
         93:56:a7:e8:9a:27:8d:23:9a:bb:6e:b9:93:c6:3d:5b:6d:d9:
         7e:da:01:0f:68:5b:85:ca:32:39:13:ca:60:6d:ee:93:3c:da:
         86:8c:7c:0f:fa:75:a7:f2:76:b1:9b:93:53:36:54:e7:b0:d1:
         11:97:1a:f5:2d:e6:5c:3a:4a:de:3d:11:42:d9:55:a8:7f:fb:
         a6:6a:6b:97:a8:2d:48:2a:56:0b:ac:90:18:52:1e:22:75:df:
         4e:23:58:34:95:67:90:fb:63:4a:8d:50:4f:d2:5e:93:0a:ae:
         60:dc:c0:7b:fa:22:bf:c2:f9:e2:75:c9:58:5c:ba:e7:48:23:
         1a:57:94:2f:bd:20:86:1f:19:4c:a1:7e:75:5d:e9:12:aa:cb:
         a4:f2:77:51:bb:ac:b0:c3:21:0c:ad:28:ea:98:3a:a8:9c:30:
         22:ca:14:bd:6b:01:29:ff:52:cc:93:3f:64:a1:d2:01:22:41:
         72:4c:9c:8c:9f:0f:75:1c:90:d5:00:5c:f6:2f:21:98:5b:6b:
         a1:fe:0d:e9:5b:a7:bf:0a:96:5f:11:e7:7c:d7:67:5c:6c:61:
         d3:51:a4:b4:cc:f0:5d:00:30:3a:8e:ff:d3:5b:e5:07:1d:5f:
         b2:0e:53:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:01:52 2026 by rpki-client