Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/323830343a336462303a3a2f33322d3336203d3e20323636353437.roa
File:                     323830343a336462303a3a2f33322d3336203d3e20323636353437.roa (raw, json)
Hash identifier:          GsdhZu2PbyOxb/zZUiJjwODRzdixOSsZ/JfiYi8AlJU=
Subject key identifier:   AE:3D:22:C2:A8:EC:95:ED:83:E9:E5:52:91:9D:55:17:59:01:0B:43
Certificate issuer:       /CN=2FA895A323CDE6686379D8ED8C43170C6BA8C85B
Certificate serial:       202EA8E8CF7F85F574B9EC5BB887A22890088570
Authority key identifier: 2F:A8:95:A3:23:CD:E6:68:63:79:D8:ED:8C:43:17:0C:6B:A8:C8:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FA895A323CDE6686379D8ED8C43170C6BA8C85B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/323830343a336462303a3a2f33322d3336203d3e20323636353437.roa
Signing time:             Wed 04 Mar 2026 16:37:09 +0000
ROA not before:           Wed 04 Mar 2026 16:32:09 +0000
ROA not after:            Wed 03 Mar 2027 16:37:09 +0000
asID:                     266547
IP address blocks:        2804:3db0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/2FA895A323CDE6686379D8ED8C43170C6BA8C85B.crl
                          rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/2FA895A323CDE6686379D8ED8C43170C6BA8C85B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FA895A323CDE6686379D8ED8C43170C6BA8C85B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 14:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:2e:a8:e8:cf:7f:85:f5:74:b9:ec:5b:b8:87:a2:28:90:08:85:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FA895A323CDE6686379D8ED8C43170C6BA8C85B
        Validity
            Not Before: Mar  4 16:32:09 2026 GMT
            Not After : Mar  3 16:37:09 2027 GMT
        Subject: CN=AE3D22C2A8EC95ED83E9E552919D551759010B43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:bd:c7:db:e4:3d:7f:b9:9b:83:2a:5f:78:3b:
                    39:c1:cd:9c:db:1a:e6:09:40:58:c1:42:4e:24:18:
                    8a:1d:8d:ef:d7:e6:63:a0:1d:bc:09:a5:e1:1f:7a:
                    10:bd:37:28:f3:b2:60:70:40:a8:d4:fa:75:4d:77:
                    1f:35:4a:cb:20:a4:ce:04:33:34:85:50:79:5f:88:
                    ba:13:62:60:34:8d:5f:03:30:b0:00:f6:00:2d:91:
                    7a:c9:e6:02:bf:6d:da:76:46:9a:63:7c:a8:fe:4e:
                    7c:e4:22:3c:43:34:f6:b2:9b:4b:d4:ed:b5:0b:f4:
                    a3:1b:47:51:94:dc:c1:38:ee:bd:f4:43:b9:2d:40:
                    8f:fb:5b:e8:f5:35:dc:51:04:aa:00:50:31:38:3d:
                    49:9f:d7:65:69:3e:f8:30:d2:7c:00:a3:f2:66:13:
                    71:7f:eb:6c:93:3b:e6:86:34:14:04:33:ab:6a:8c:
                    2e:43:55:b0:ba:f8:2e:23:46:b7:aa:2d:29:03:44:
                    bb:7f:5b:6d:68:18:ff:84:2e:65:09:0e:df:6c:71:
                    81:31:72:fb:5b:f3:c6:b9:67:06:c9:2f:63:45:d9:
                    7a:3f:fd:96:e4:f4:2c:85:e7:f5:95:67:76:35:4e:
                    94:39:42:7b:d9:4b:82:ae:d7:55:14:82:5a:35:e9:
                    9b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:3D:22:C2:A8:EC:95:ED:83:E9:E5:52:91:9D:55:17:59:01:0B:43
            X509v3 Authority Key Identifier:
                keyid:2F:A8:95:A3:23:CD:E6:68:63:79:D8:ED:8C:43:17:0C:6B:A8:C8:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/2FA895A323CDE6686379D8ED8C43170C6BA8C85B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FA895A323CDE6686379D8ED8C43170C6BA8C85B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/323830343a336462303a3a2f33322d3336203d3e20323636353437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3db0::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:2e:a9:16:3c:9d:b9:01:fb:30:e0:50:59:dd:a1:71:9b:59:
         51:9b:2b:8a:68:2e:f5:c6:2a:71:ec:d1:95:9b:05:67:95:fd:
         59:7d:96:d3:dc:88:85:04:36:4d:f0:14:e6:5c:03:68:f5:5f:
         a1:ab:87:e2:5b:59:cb:ec:e7:32:78:68:dc:42:7d:89:bb:14:
         76:fd:8c:01:dc:ca:5d:40:15:91:d5:f9:44:57:ba:b9:2d:e5:
         9f:b0:d6:7e:25:44:62:78:26:92:3e:b6:be:ad:ad:31:f9:5c:
         77:71:3e:76:b6:71:c4:c5:58:d3:cb:50:65:39:9e:da:de:93:
         3f:c8:ae:91:7a:95:4d:bb:a4:43:4c:b5:60:f4:e5:27:b6:32:
         d4:23:67:59:4d:28:32:fa:a1:93:ed:d6:ed:3a:09:eb:cb:74:
         a0:ff:9b:77:59:6e:a3:11:60:21:d4:03:a4:d0:99:41:63:ff:
         71:a5:df:6d:1a:20:77:60:ca:34:91:44:c8:5b:98:37:cf:92:
         73:9e:97:e1:67:d0:b1:4a:f4:25:1d:05:ed:35:57:5a:a6:8b:
         fc:df:00:3b:e5:b4:8b:3b:85:4b:de:47:a9:b3:b3:e6:e4:74:
         b9:67:4b:94:94:40:6d:72:f3:9a:49:3a:15:b7:cf:64:9f:45:
         c8:f6:b6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:52:42 2026 by rpki-client