Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/323830343a313864633a3a2f33322d3332203d3e203532373930.roa
File:                     323830343a313864633a3a2f33322d3332203d3e203532373930.roa (raw, json)
Hash identifier:          Va1ykQwq9SXNy9xyUj3EbqsX1CW6GmdDqMqHz3KQZ3Y=
Subject key identifier:   4F:FF:3F:0F:5B:09:E4:FF:29:88:CC:15:29:54:25:0D:5F:D7:47:E7
Certificate issuer:       /CN=B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD
Certificate serial:       6B27E4DF14F84F46F4EE51399A8B971B6125A8B7
Authority key identifier: B8:C4:22:F4:E7:DE:B2:2B:F8:44:9A:48:96:DA:5B:60:58:DF:65:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/323830343a313864633a3a2f33322d3332203d3e203532373930.roa
Signing time:             Thu 26 Mar 2026 02:46:55 +0000
ROA not before:           Thu 26 Mar 2026 02:41:55 +0000
ROA not after:            Thu 25 Mar 2027 02:46:55 +0000
asID:                     52790
IP address blocks:        2804:18dc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.crl
                          rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 06:12:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:27:e4:df:14:f8:4f:46:f4:ee:51:39:9a:8b:97:1b:61:25:a8:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD
        Validity
            Not Before: Mar 26 02:41:55 2026 GMT
            Not After : Mar 25 02:46:55 2027 GMT
        Subject: CN=4FFF3F0F5B09E4FF2988CC152954250D5FD747E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b6:1a:aa:c6:ca:cf:0d:f4:f7:a5:11:e5:ce:
                    e6:de:67:5c:70:6a:9b:6e:1c:8e:f8:8f:67:13:67:
                    87:fa:0c:19:ae:0a:e4:ef:37:fa:6f:38:4f:c7:25:
                    0a:12:c9:b1:61:c5:48:86:53:bb:66:24:0f:d0:db:
                    8a:e4:3b:ab:e5:94:e3:30:6f:6c:26:ab:de:3f:be:
                    68:5a:dd:3d:03:3d:78:fb:dc:c2:db:39:3e:3e:1c:
                    e5:ea:8e:02:24:77:37:d1:93:9e:9e:94:42:aa:8c:
                    64:6d:21:4b:c7:0d:c1:99:0a:ee:8f:41:96:4e:8c:
                    10:3c:85:4e:d5:08:ce:93:28:4e:c5:75:56:e4:5e:
                    99:3e:c3:7b:ea:62:25:55:fb:b2:e0:49:7d:58:ce:
                    f0:05:53:67:69:ab:6d:61:0e:62:98:8c:12:3b:61:
                    64:a8:a0:c5:de:3a:55:0a:2a:7c:15:29:c5:6e:3a:
                    3b:c3:94:bb:c2:96:97:0b:c2:c4:9c:c1:af:79:2c:
                    6d:1d:f3:5b:12:c4:1c:7d:5f:55:e6:e9:16:0c:42:
                    a2:46:89:bf:8b:51:5f:5f:03:5e:b0:67:94:61:38:
                    ff:da:5d:c2:5e:1f:48:a1:73:84:1b:a4:96:31:a4:
                    bb:63:9f:51:ee:21:fc:b3:a7:97:55:25:91:d5:9c:
                    ec:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:FF:3F:0F:5B:09:E4:FF:29:88:CC:15:29:54:25:0D:5F:D7:47:E7
            X509v3 Authority Key Identifier:
                keyid:B8:C4:22:F4:E7:DE:B2:2B:F8:44:9A:48:96:DA:5B:60:58:DF:65:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/323830343a313864633a3a2f33322d3332203d3e203532373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:18dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:bb:48:72:93:1d:00:ad:78:c3:13:e8:fd:b7:8e:8d:d9:36:
         4e:e3:83:27:26:eb:bc:68:74:ac:3a:9f:68:07:fd:3f:48:02:
         5f:cb:73:1a:da:0e:2c:5e:87:2e:34:f3:ab:e6:35:42:41:92:
         5c:b8:b0:fb:45:f5:07:9f:a9:82:74:78:9d:cc:1e:47:6d:c5:
         28:7e:e3:90:92:03:21:71:52:ab:54:4f:24:6f:fa:1f:98:fe:
         50:0e:2d:de:0c:c0:e7:ee:b5:b2:a6:bd:1b:a6:28:82:87:e0:
         91:37:84:e0:69:ed:fd:1f:19:69:9a:f5:e3:1c:be:59:7a:c4:
         b5:27:0b:3f:42:1c:05:21:ae:0e:8b:15:95:e8:2d:1c:a2:95:
         19:fe:2c:42:45:ba:a9:1c:93:3f:cb:7d:ee:9f:ac:59:15:69:
         86:4b:86:eb:46:e1:98:1d:85:cb:e4:ce:18:43:96:c3:25:5f:
         0e:ec:75:7a:0f:e7:a9:71:09:04:60:b3:be:d3:3b:08:68:05:
         dd:48:b0:11:27:4d:1c:e4:4e:45:3e:5f:82:7b:78:21:b7:bc:
         8f:31:48:d5:6c:3c:55:31:f8:78:8b:51:38:1e:b0:39:16:68:
         49:a2:03:89:c4:b7:70:81:c0:fb:fd:74:5c:9e:54:eb:9b:7b:
         60:43:f1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:57:18 2026 by rpki-client