Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6FFhxBJ55Jr7xJSkra3sTtjzFBspWkqxG6LAtPyyK4go/0/323830343a3638633a3a2f33322d313238203d3e20323632353934.roa
File:                     323830343a3638633a3a2f33322d313238203d3e20323632353934.roa (raw, json)
Hash identifier:          jmdd9uTTDkuedhyrQ0xucAuMJILAAG9ieYUjX/2pXuA=
Subject key identifier:   47:71:23:2B:D6:27:ED:F2:72:8D:5B:EE:80:AE:82:39:35:D5:F0:87
Certificate issuer:       /CN=07053F341797B440E2F5E390A793D5B0CBAD5D7E
Certificate serial:       5BF302B45328680CF30238D2F9A9DBCD615EACC7
Authority key identifier: 07:05:3F:34:17:97:B4:40:E2:F5:E3:90:A7:93:D5:B0:CB:AD:5D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07053F341797B440E2F5E390A793D5B0CBAD5D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FFhxBJ55Jr7xJSkra3sTtjzFBspWkqxG6LAtPyyK4go/0/323830343a3638633a3a2f33322d313238203d3e20323632353934.roa
Signing time:             Tue 17 Mar 2026 17:27:03 +0000
ROA not before:           Tue 17 Mar 2026 17:22:03 +0000
ROA not after:            Tue 16 Mar 2027 17:27:03 +0000
asID:                     262594
IP address blocks:        2804:68c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6FFhxBJ55Jr7xJSkra3sTtjzFBspWkqxG6LAtPyyK4go/0/07053F341797B440E2F5E390A793D5B0CBAD5D7E.crl
                          rsync://rpki-repo.registro.br/repo/6FFhxBJ55Jr7xJSkra3sTtjzFBspWkqxG6LAtPyyK4go/0/07053F341797B440E2F5E390A793D5B0CBAD5D7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07053F341797B440E2F5E390A793D5B0CBAD5D7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 23:35:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:f3:02:b4:53:28:68:0c:f3:02:38:d2:f9:a9:db:cd:61:5e:ac:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07053F341797B440E2F5E390A793D5B0CBAD5D7E
        Validity
            Not Before: Mar 17 17:22:03 2026 GMT
            Not After : Mar 16 17:27:03 2027 GMT
        Subject: CN=4771232BD627EDF2728D5BEE80AE823935D5F087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:19:1b:66:eb:f2:e3:2b:35:7e:1c:9d:9e:25:
                    1a:dd:76:10:0f:7a:7f:73:d9:f9:85:8f:f1:a3:38:
                    9e:79:33:7a:ac:ec:14:5c:9f:fa:59:dc:27:09:72:
                    49:dc:8d:74:aa:2f:42:14:9c:79:d0:52:97:c0:73:
                    57:be:a4:99:dc:5c:23:26:fa:ab:b6:e5:16:cc:6f:
                    c8:66:3b:d7:45:51:77:c5:dd:87:e1:86:c1:a1:79:
                    b1:e4:dd:e3:6d:d5:ae:ca:e5:90:6d:05:fe:5f:dd:
                    d9:e4:18:b7:5b:3d:ac:14:51:4c:b8:06:7a:3a:72:
                    da:83:46:ff:26:4c:30:5d:54:9b:81:59:06:de:dd:
                    cc:96:bc:9f:a7:5f:8e:ea:02:84:6c:ac:f3:25:e9:
                    a4:b5:b6:66:5f:91:f3:1f:fe:6b:1e:ff:c1:0b:0c:
                    17:e5:31:03:f3:ed:4d:40:67:ec:44:18:ec:26:da:
                    75:4c:43:91:7e:49:98:1f:f9:65:a5:96:95:00:d8:
                    bb:b7:2f:dd:f0:e3:2d:01:cf:0f:71:7a:6b:39:97:
                    6d:24:43:50:75:75:ca:75:ed:84:f5:74:72:b6:1c:
                    29:46:04:40:f5:d2:1f:4d:28:4e:6b:cb:eb:6d:8c:
                    1b:ca:d1:9e:74:1e:2e:cb:59:29:0d:de:15:b3:41:
                    60:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:71:23:2B:D6:27:ED:F2:72:8D:5B:EE:80:AE:82:39:35:D5:F0:87
            X509v3 Authority Key Identifier:
                keyid:07:05:3F:34:17:97:B4:40:E2:F5:E3:90:A7:93:D5:B0:CB:AD:5D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FFhxBJ55Jr7xJSkra3sTtjzFBspWkqxG6LAtPyyK4go/0/07053F341797B440E2F5E390A793D5B0CBAD5D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07053F341797B440E2F5E390A793D5B0CBAD5D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FFhxBJ55Jr7xJSkra3sTtjzFBspWkqxG6LAtPyyK4go/0/323830343a3638633a3a2f33322d313238203d3e20323632353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:68c::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:08:06:23:c7:0a:38:a0:50:a8:09:14:7b:8d:ea:25:ed:32:
         9c:fe:d2:86:78:13:66:0e:35:c1:a3:85:c9:c8:e1:06:8c:bd:
         04:14:16:d3:8f:a9:c6:d7:4b:dd:4b:6c:4d:a2:41:8a:50:d4:
         77:83:5c:a5:bb:41:44:95:25:65:47:b3:59:3b:0e:15:50:0a:
         78:cb:ae:f4:39:b3:6d:09:e0:f0:76:a0:2d:c4:2b:a9:c9:7f:
         ee:4b:45:5e:76:77:f7:e4:71:4f:8d:22:25:f0:c8:c8:67:0f:
         6f:ca:00:d5:4b:61:94:25:3c:ce:b9:6b:05:2d:e7:72:51:92:
         e1:ae:43:dc:9d:1f:20:c1:6c:f3:d0:3f:18:e0:a2:8e:3b:ad:
         20:b6:59:86:55:1a:2c:e5:04:5a:3b:93:69:a5:8f:53:94:38:
         e0:ff:cf:69:71:a7:13:ca:f0:bc:8d:45:14:51:65:d0:a4:ee:
         57:3c:40:54:dc:5c:12:2c:9b:a7:f6:7e:57:e8:51:af:20:01:
         42:2f:23:6c:f7:f5:8f:8f:8c:51:bf:95:d8:c8:1c:33:89:6f:
         6e:36:67:22:5a:52:c6:1a:63:53:4b:58:20:6d:46:62:89:e4:
         fd:41:b2:c9:e4:b8:b7:e6:88:3e:de:3e:ef:58:1f:7e:8a:73:
         cc:82:bd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:52:39 2026 by rpki-client