Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/323830343a346332343a3a2f33322d313238203d3e20323633313033.roa
File:                     323830343a346332343a3a2f33322d313238203d3e20323633313033.roa (raw, json)
Hash identifier:          GwvUoUTa+FXCDAdTtppakkhIDxUWTlh1oJ5X+mBWI1Y=
Subject key identifier:   7F:8C:BF:DD:E6:BC:6E:1F:E7:85:27:C2:8F:AC:CE:AF:0A:0E:43:AE
Certificate issuer:       /CN=D9B9AF3648E9F74A03FCE49A2C7E187F340B54DC
Certificate serial:       347CAD4BB92953AFDE5D50F9FC5BC0F7D87D2EDF
Authority key identifier: D9:B9:AF:36:48:E9:F7:4A:03:FC:E4:9A:2C:7E:18:7F:34:0B:54:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B9AF3648E9F74A03FCE49A2C7E187F340B54DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/323830343a346332343a3a2f33322d313238203d3e20323633313033.roa
Signing time:             Thu 19 Mar 2026 19:02:05 +0000
ROA not before:           Thu 19 Mar 2026 18:57:05 +0000
ROA not after:            Thu 18 Mar 2027 19:02:05 +0000
asID:                     263103
IP address blocks:        2804:4c24::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/D9B9AF3648E9F74A03FCE49A2C7E187F340B54DC.crl
                          rsync://rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/D9B9AF3648E9F74A03FCE49A2C7E187F340B54DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B9AF3648E9F74A03FCE49A2C7E187F340B54DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 12:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:7c:ad:4b:b9:29:53:af:de:5d:50:f9:fc:5b:c0:f7:d8:7d:2e:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9B9AF3648E9F74A03FCE49A2C7E187F340B54DC
        Validity
            Not Before: Mar 19 18:57:05 2026 GMT
            Not After : Mar 18 19:02:05 2027 GMT
        Subject: CN=7F8CBFDDE6BC6E1FE78527C28FACCEAF0A0E43AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:49:ad:ef:49:59:ce:52:94:a5:3a:5e:62:55:
                    57:54:5a:84:f1:83:1a:31:f4:da:0d:0f:7f:a0:90:
                    20:9b:71:e3:8a:12:45:27:b9:1d:ad:b0:8e:bf:48:
                    f3:f6:9c:54:fa:03:30:8c:23:98:9b:a1:99:f0:ca:
                    86:a4:23:37:f3:b5:db:c9:11:ed:56:13:4f:77:c1:
                    62:f1:3d:65:d8:58:58:c9:5c:f1:59:c6:e0:ae:90:
                    0f:c0:1a:62:f8:5a:d3:37:83:73:87:2d:43:52:c7:
                    f1:67:01:34:71:28:2c:46:b2:59:4c:e3:78:d2:c6:
                    08:5b:83:75:d8:e0:c8:11:7c:c4:27:af:36:3d:32:
                    11:95:70:21:64:db:1f:d1:b4:0a:cf:35:2b:eb:db:
                    b0:a9:0d:3e:1e:5a:f9:ce:9e:86:aa:43:dc:e1:e5:
                    be:71:fd:63:b7:9e:f5:98:61:a0:3a:52:36:45:b4:
                    65:6a:04:8b:6d:76:2f:88:47:8b:61:cf:6f:ad:ef:
                    5f:cf:21:89:0f:06:70:ea:ee:0b:26:67:a9:a6:51:
                    d7:85:aa:7f:41:b1:d2:00:d9:56:5b:d2:4d:8d:ca:
                    6f:dd:91:80:db:7c:d4:b9:e3:ab:2d:6e:9e:2c:ae:
                    94:f8:6a:37:2f:9c:3b:d4:ac:dd:a1:36:f8:eb:2f:
                    3c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:8C:BF:DD:E6:BC:6E:1F:E7:85:27:C2:8F:AC:CE:AF:0A:0E:43:AE
            X509v3 Authority Key Identifier:
                keyid:D9:B9:AF:36:48:E9:F7:4A:03:FC:E4:9A:2C:7E:18:7F:34:0B:54:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/D9B9AF3648E9F74A03FCE49A2C7E187F340B54DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B9AF3648E9F74A03FCE49A2C7E187F340B54DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/323830343a346332343a3a2f33322d313238203d3e20323633313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c24::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:b8:02:4e:bc:12:5d:b8:da:a7:cf:91:06:55:78:c5:ce:91:
         11:f0:b6:4f:e8:47:c4:93:0c:64:31:2f:6c:3c:2a:8b:09:af:
         5f:32:7d:3f:81:14:34:b9:0b:1b:e5:9c:4a:ce:b7:74:44:8f:
         15:9f:18:b8:88:85:16:73:82:c9:e2:4a:97:cb:93:8f:5d:b4:
         14:12:44:98:a1:be:84:91:cd:01:dd:13:57:4d:df:3a:71:55:
         67:54:0f:d3:9a:03:3e:b2:66:9c:ba:42:8c:90:4d:0a:94:fe:
         05:3d:79:ac:5c:d5:0c:9c:7e:4d:e4:9a:ea:07:72:6a:ab:52:
         4a:b5:32:a0:2f:d0:1d:da:09:5f:f6:1e:40:4d:41:8c:1c:e5:
         62:32:1e:aa:53:3f:3c:af:e7:c7:53:1e:48:85:85:75:97:a8:
         00:f8:62:3b:e4:bb:2e:7f:6f:28:14:66:3e:2e:dc:79:26:28:
         ff:40:a3:49:04:78:82:e4:87:0e:e9:d3:5a:49:a7:08:27:1f:
         5c:b0:e8:e8:7a:22:a5:7c:93:94:eb:64:e9:3d:f4:df:4c:a9:
         cf:86:4f:36:42:a3:a3:90:a0:f1:d2:98:b8:b8:6b:8a:86:93:
         4b:3c:ba:b3:c8:b6:be:1b:23:2b:76:71:ae:78:ca:fe:07:d1:
         f8:46:2e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:43:12 2026 by rpki-client