Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Thu8oTXQfktGRdAWJUTHxn9T29knWwR73mDBy1zFvAL/0/323830343a383632343a3a2f33332d3333203d3e20323732363234.roa
File:                     323830343a383632343a3a2f33332d3333203d3e20323732363234.roa (raw, json)
Hash identifier:          G8OHtjKlGta0senU3apGGGe+lTmuz5owbT4wSfbKb1w=
Subject key identifier:   15:70:02:65:B8:E4:BB:10:64:04:BC:9F:97:20:94:E1:4F:89:0F:F2
Certificate issuer:       /CN=40C2FF62F032F24C2FABB19B4D4F5EFB49181526
Certificate serial:       543E6F7A0B257A3D2F47872B3B165D78216D0718
Authority key identifier: 40:C2:FF:62:F0:32:F2:4C:2F:AB:B1:9B:4D:4F:5E:FB:49:18:15:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C2FF62F032F24C2FABB19B4D4F5EFB49181526.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Thu8oTXQfktGRdAWJUTHxn9T29knWwR73mDBy1zFvAL/0/323830343a383632343a3a2f33332d3333203d3e20323732363234.roa
Signing time:             Thu 05 Mar 2026 11:35:48 +0000
ROA not before:           Thu 05 Mar 2026 11:30:48 +0000
ROA not after:            Thu 04 Mar 2027 11:35:48 +0000
asID:                     272624
IP address blocks:        2804:8624::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Thu8oTXQfktGRdAWJUTHxn9T29knWwR73mDBy1zFvAL/0/40C2FF62F032F24C2FABB19B4D4F5EFB49181526.crl
                          rsync://rpki-repo.registro.br/repo/6Thu8oTXQfktGRdAWJUTHxn9T29knWwR73mDBy1zFvAL/0/40C2FF62F032F24C2FABB19B4D4F5EFB49181526.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C2FF62F032F24C2FABB19B4D4F5EFB49181526.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 12:47:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:3e:6f:7a:0b:25:7a:3d:2f:47:87:2b:3b:16:5d:78:21:6d:07:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C2FF62F032F24C2FABB19B4D4F5EFB49181526
        Validity
            Not Before: Mar  5 11:30:48 2026 GMT
            Not After : Mar  4 11:35:48 2027 GMT
        Subject: CN=15700265B8E4BB106404BC9F972094E14F890FF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8c:0d:c6:86:24:8f:8b:eb:cf:bf:4c:c2:61:
                    1f:9a:cd:b9:a9:c4:03:10:01:7b:37:45:78:00:bc:
                    2b:6c:97:24:1c:e4:e2:46:21:f6:98:1c:81:63:26:
                    53:3a:0b:2d:b2:c6:c6:8b:03:fe:56:f4:8c:68:ba:
                    94:27:06:65:0a:dd:39:36:2b:cf:1c:00:5f:38:35:
                    9d:75:c5:6b:2f:d8:eb:63:4c:ec:0c:f0:3b:c1:8d:
                    78:a2:48:60:19:16:e7:91:63:e3:65:1b:cb:3f:45:
                    37:32:4e:6a:93:10:98:5d:d2:fa:d0:24:e2:d2:01:
                    8f:af:01:20:81:1a:c6:4e:85:b9:41:f9:13:a0:32:
                    1c:2d:cc:94:7d:b3:94:0e:57:51:fa:89:fa:7d:04:
                    47:20:47:83:78:ad:79:77:d2:10:1f:c6:6f:db:45:
                    53:0e:b3:85:de:b2:26:2b:a6:23:1b:b0:cb:24:65:
                    42:00:5d:b3:87:be:85:e8:17:b3:a0:0f:df:1c:f3:
                    06:90:59:11:37:0d:d2:5e:5f:f3:c3:19:07:e1:be:
                    64:f7:28:35:49:4b:01:50:81:e8:53:4f:ce:97:f0:
                    0a:dd:8d:97:88:e4:72:1c:3c:06:7f:37:2d:fd:44:
                    91:47:a0:c6:61:3c:6c:14:e8:30:35:47:26:a2:bb:
                    d6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:70:02:65:B8:E4:BB:10:64:04:BC:9F:97:20:94:E1:4F:89:0F:F2
            X509v3 Authority Key Identifier:
                keyid:40:C2:FF:62:F0:32:F2:4C:2F:AB:B1:9B:4D:4F:5E:FB:49:18:15:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Thu8oTXQfktGRdAWJUTHxn9T29knWwR73mDBy1zFvAL/0/40C2FF62F032F24C2FABB19B4D4F5EFB49181526.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C2FF62F032F24C2FABB19B4D4F5EFB49181526.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Thu8oTXQfktGRdAWJUTHxn9T29knWwR73mDBy1zFvAL/0/323830343a383632343a3a2f33332d3333203d3e20323732363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8624::/33

    Signature Algorithm: sha256WithRSAEncryption
         29:bd:9d:f0:e9:62:0e:e7:1d:09:17:07:e1:98:fa:25:2b:7c:
         31:03:3a:94:35:7d:08:a0:ef:31:6e:78:e8:65:db:3a:58:10:
         db:b4:5b:51:7f:10:28:58:3f:8e:a3:04:c4:93:30:30:43:fe:
         db:95:3d:40:0b:1f:32:24:4f:bc:db:85:05:03:db:57:82:59:
         9c:5c:e8:dc:27:7f:44:3c:9e:56:58:ab:75:34:e3:9c:cc:94:
         c1:ea:8c:e1:c0:f6:70:eb:70:22:6b:71:d0:6e:5a:03:95:2c:
         69:94:29:b2:4b:ac:50:72:29:20:dd:47:96:f2:41:98:d3:e8:
         6c:7a:52:bd:12:21:be:2a:79:8d:e3:c7:8e:04:2f:06:fc:0a:
         ca:c2:14:09:83:c2:81:c4:72:28:7c:87:db:6d:0b:36:47:56:
         c6:ea:45:53:74:bd:ea:00:6a:0d:61:37:99:c9:30:b7:61:98:
         0e:12:39:c8:d2:a0:79:16:1c:aa:81:f6:19:60:a4:38:e6:4d:
         94:80:28:19:fc:42:f6:83:b6:88:fe:d9:da:e2:28:a1:73:44:
         99:32:83:b3:76:92:ad:31:2a:2a:0a:49:59:64:8d:c8:af:f8:
         84:b8:ce:c2:88:7e:9d:7e:5c:d0:de:93:33:1a:25:23:14:d8:
         5e:6b:22:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:35:25 2026 by rpki-client