Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/323830343a393434383a3a2f33322d3332203d3e20323734383333.roa
File:                     323830343a393434383a3a2f33322d3332203d3e20323734383333.roa (raw, json)
Hash identifier:          3+OUWvJ2paVgdIryDuKrx561qJe0osctthIg1n2by6E=
Subject key identifier:   11:19:FB:30:0D:4C:78:E5:F5:94:38:AD:2E:54:D1:96:59:8D:3B:4D
Certificate issuer:       /CN=28D273356F90D13FC143833120BC59A454646F71
Certificate serial:       45EF60B2162EDE0B9D6FADF425F664891483FA83
Authority key identifier: 28:D2:73:35:6F:90:D1:3F:C1:43:83:31:20:BC:59:A4:54:64:6F:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D273356F90D13FC143833120BC59A454646F71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/323830343a393434383a3a2f33322d3332203d3e20323734383333.roa
Signing time:             Thu 19 Mar 2026 19:08:28 +0000
ROA not before:           Thu 19 Mar 2026 19:03:28 +0000
ROA not after:            Thu 18 Mar 2027 19:08:28 +0000
asID:                     274833
IP address blocks:        2804:9448::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/28D273356F90D13FC143833120BC59A454646F71.crl
                          rsync://rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/28D273356F90D13FC143833120BC59A454646F71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D273356F90D13FC143833120BC59A454646F71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 01:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:ef:60:b2:16:2e:de:0b:9d:6f:ad:f4:25:f6:64:89:14:83:fa:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28D273356F90D13FC143833120BC59A454646F71
        Validity
            Not Before: Mar 19 19:03:28 2026 GMT
            Not After : Mar 18 19:08:28 2027 GMT
        Subject: CN=1119FB300D4C78E5F59438AD2E54D196598D3B4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7f:87:02:17:59:20:f9:82:5b:51:2c:b2:7d:
                    7d:8e:9b:9d:bd:2d:d1:63:ae:aa:c5:46:1b:de:cd:
                    08:98:63:39:6e:c9:c4:61:df:12:d9:5f:b0:eb:09:
                    b6:ab:ae:91:82:be:17:a0:a7:aa:a0:b4:47:d5:0d:
                    58:b3:5c:0e:3d:10:6e:43:20:8c:54:1b:47:86:44:
                    9e:8b:9d:c0:1b:51:bf:e1:f4:17:a3:25:db:b2:a7:
                    3d:38:c4:be:c6:c4:8b:5a:21:80:48:41:cd:d2:29:
                    25:47:17:55:5b:18:f9:0a:88:9a:b8:67:a3:54:33:
                    42:e9:9c:ce:c0:79:04:c4:67:c6:46:61:30:fe:21:
                    0e:c1:3c:76:c1:00:ab:c4:c2:5c:bb:30:84:22:b9:
                    59:43:df:6e:3c:36:1b:6a:76:bb:90:db:77:f9:59:
                    20:ee:53:e2:5f:b3:3b:d2:ce:c4:bd:c4:66:a1:7d:
                    c9:97:0f:66:89:77:53:1e:3b:70:f6:19:11:4b:6b:
                    ec:5b:6c:0a:17:71:a6:3c:a6:1d:77:ce:70:f2:46:
                    04:1b:43:4d:b2:0f:d2:d2:67:00:9e:7d:50:f9:53:
                    be:27:2f:01:8b:ab:5f:c7:db:ab:48:6d:c7:68:16:
                    37:a2:97:05:18:80:37:39:a9:e2:70:9f:cf:79:f5:
                    df:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:19:FB:30:0D:4C:78:E5:F5:94:38:AD:2E:54:D1:96:59:8D:3B:4D
            X509v3 Authority Key Identifier:
                keyid:28:D2:73:35:6F:90:D1:3F:C1:43:83:31:20:BC:59:A4:54:64:6F:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/28D273356F90D13FC143833120BC59A454646F71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D273356F90D13FC143833120BC59A454646F71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/323830343a393434383a3a2f33322d3332203d3e20323734383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9448::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:0e:4a:db:72:30:e5:38:cc:de:ad:80:41:94:2f:67:26:a4:
         8f:cf:f4:9f:03:37:48:a8:87:8d:ea:a8:24:9f:e0:8e:5e:6a:
         0b:c6:db:c6:b7:36:a4:77:b6:05:e4:df:ff:18:30:57:8a:59:
         e1:55:ce:75:3f:f0:2d:71:70:9e:ea:4f:5a:68:64:8c:23:8b:
         c0:be:63:61:79:07:2c:37:95:c7:79:28:d4:4a:73:0e:3f:e9:
         07:d5:89:d2:8d:ee:14:43:ce:13:4c:fb:27:3a:3c:be:5c:86:
         d0:4a:79:71:cc:6d:23:61:12:c2:93:17:88:9b:ee:80:17:aa:
         20:7d:06:6d:a1:16:46:b8:fd:f5:19:6d:7c:7c:f0:78:11:b5:
         a3:9d:a6:4a:f8:3d:fe:70:7e:83:bb:dc:a1:66:2d:9d:ea:83:
         a5:f9:06:d6:ae:71:3c:e9:5a:fa:d8:4c:74:ab:6a:de:93:ba:
         bd:11:67:5e:40:de:95:ef:07:3d:0b:8f:2c:cc:3e:8f:a2:d6:
         50:8f:e6:b8:95:1a:c6:f2:55:9a:ef:7e:d7:a5:7a:8c:5e:7c:
         6b:f3:2b:de:ab:68:f7:21:25:83:58:4f:54:ef:ae:73:39:b5:
         94:a3:d4:2d:5d:8f:bf:f6:41:88:0b:88:c0:54:81:1f:9b:33:
         60:c3:15:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:59:26 2026 by rpki-client