Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ahfmuU5TwZ197yWUAVoVJzXAj6kSe4nEMTAAHrvVQm1/0/323830343a363030383a3a2f33322d313238203d3e20323639313431.roa
File:                     323830343a363030383a3a2f33322d313238203d3e20323639313431.roa (raw, json)
Hash identifier:          Arc6ScGjZ1b90VNJaPJcuybWQuqJm7GjxB0GGVHfeXI=
Subject key identifier:   75:48:61:B6:01:17:1A:B3:2B:3E:57:52:4B:5B:BE:BC:A2:A8:21:9F
Certificate issuer:       /CN=5ABD4D30CED7F06138EB70C07EE10B823658B5BE
Certificate serial:       0413EE37567BEFAD1BF131FD0B623246582512C8
Authority key identifier: 5A:BD:4D:30:CE:D7:F0:61:38:EB:70:C0:7E:E1:0B:82:36:58:B5:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5ABD4D30CED7F06138EB70C07EE10B823658B5BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ahfmuU5TwZ197yWUAVoVJzXAj6kSe4nEMTAAHrvVQm1/0/323830343a363030383a3a2f33322d313238203d3e20323639313431.roa
Signing time:             Thu 19 Mar 2026 14:33:07 +0000
ROA not before:           Thu 19 Mar 2026 14:28:07 +0000
ROA not after:            Thu 18 Mar 2027 14:33:07 +0000
asID:                     269141
IP address blocks:        2804:6008::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ahfmuU5TwZ197yWUAVoVJzXAj6kSe4nEMTAAHrvVQm1/0/5ABD4D30CED7F06138EB70C07EE10B823658B5BE.crl
                          rsync://rpki-repo.registro.br/repo/6ahfmuU5TwZ197yWUAVoVJzXAj6kSe4nEMTAAHrvVQm1/0/5ABD4D30CED7F06138EB70C07EE10B823658B5BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5ABD4D30CED7F06138EB70C07EE10B823658B5BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:12:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:13:ee:37:56:7b:ef:ad:1b:f1:31:fd:0b:62:32:46:58:25:12:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ABD4D30CED7F06138EB70C07EE10B823658B5BE
        Validity
            Not Before: Mar 19 14:28:07 2026 GMT
            Not After : Mar 18 14:33:07 2027 GMT
        Subject: CN=754861B601171AB32B3E57524B5BBEBCA2A8219F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3a:10:42:cc:cf:e7:d4:6f:a2:dc:5b:3e:41:
                    2d:6d:6b:2b:24:20:74:a3:15:ee:78:87:07:29:89:
                    de:ef:73:48:28:3f:5f:23:24:f6:23:b9:ba:63:27:
                    0e:bb:cf:88:8a:3a:62:f1:fc:27:f8:08:8a:58:69:
                    67:d3:9a:b8:66:d0:dc:8f:69:89:e3:4a:1c:77:6f:
                    98:21:ee:3f:b5:d0:42:01:49:8f:b8:55:9c:e0:59:
                    83:0d:38:01:23:55:d1:92:9d:60:a0:2e:80:6d:ac:
                    6e:23:2b:73:b5:ac:61:6e:29:93:05:2e:e9:11:ec:
                    f5:5e:21:5a:ad:01:eb:27:87:76:e8:d7:70:bf:12:
                    ae:3b:dc:97:3c:2f:f8:e6:b6:5d:3f:d6:43:10:0b:
                    e0:a9:fc:de:e8:d4:c3:a8:d0:56:a7:e0:35:3e:81:
                    90:a3:d3:ff:12:6d:54:53:58:3d:83:28:21:f5:df:
                    44:05:59:73:37:d6:c4:2c:c7:42:52:18:73:73:ee:
                    4d:43:d0:6c:a4:1a:7e:66:bb:27:ba:b9:73:63:4a:
                    50:49:73:f0:ba:36:06:69:50:1b:e5:84:5c:0b:3b:
                    54:8a:a8:fa:68:b4:cc:db:70:7d:5a:37:a3:dd:b5:
                    53:67:c0:3f:a9:d2:39:4f:28:6a:ee:a8:51:97:df:
                    23:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:48:61:B6:01:17:1A:B3:2B:3E:57:52:4B:5B:BE:BC:A2:A8:21:9F
            X509v3 Authority Key Identifier:
                keyid:5A:BD:4D:30:CE:D7:F0:61:38:EB:70:C0:7E:E1:0B:82:36:58:B5:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ahfmuU5TwZ197yWUAVoVJzXAj6kSe4nEMTAAHrvVQm1/0/5ABD4D30CED7F06138EB70C07EE10B823658B5BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5ABD4D30CED7F06138EB70C07EE10B823658B5BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ahfmuU5TwZ197yWUAVoVJzXAj6kSe4nEMTAAHrvVQm1/0/323830343a363030383a3a2f33322d313238203d3e20323639313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6008::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:53:c1:34:98:b3:a1:57:89:0a:45:5b:eb:ff:4d:3d:43:ac:
         d6:14:0e:12:86:85:a7:77:bd:2a:98:60:97:bb:84:cd:67:d4:
         71:77:81:0e:ae:b5:57:16:e1:f3:88:e5:0e:6f:68:51:74:3b:
         47:e0:49:79:f6:00:50:d0:12:5e:7f:dd:4f:ec:be:fd:65:a9:
         40:48:81:d3:a1:3e:3e:16:c1:74:b1:c5:26:53:9c:68:f1:49:
         47:c1:8e:df:82:69:20:47:cd:24:c4:65:fe:16:26:0a:15:3e:
         5d:ef:4c:e4:52:c1:7d:63:1e:c2:d3:5d:88:c8:21:8c:da:69:
         50:d3:2a:51:6a:d4:c5:a4:bc:a3:1c:09:a9:d3:3a:a1:68:02:
         89:3d:f4:73:02:b9:33:a5:49:c5:0c:41:bf:67:1c:3f:e0:ca:
         cd:b5:d2:dc:14:a1:18:44:b8:49:79:ae:39:bb:bc:ec:29:0f:
         76:91:fa:ee:36:c5:d0:ac:0d:61:e1:dd:81:db:80:27:67:3f:
         35:68:22:c4:af:07:de:1e:4c:46:fb:cd:ba:f7:45:dd:6f:00:
         4a:00:25:38:d5:36:ae:1a:95:67:52:f3:89:fd:45:30:01:c0:
         d7:72:da:c8:48:84:4e:af:31:03:92:bd:5a:17:80:48:54:96:
         5c:d7:3f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:16:54 2026 by rpki-client