Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/323830343a326633633a383030303a3a2f33332d3333203d3e20323634383739.roa
File:                     323830343a326633633a383030303a3a2f33332d3333203d3e20323634383739.roa (raw, json)
Hash identifier:          KiYwjKAkTx4TW/nukWqnXRKMKiIMrCrwnBe+l6+AiUk=
Subject key identifier:   D1:D3:1E:64:90:EF:BC:C6:6B:EF:00:54:26:E7:ED:8E:CE:45:31:6F
Certificate issuer:       /CN=85A56FCFE563FEF93845F3881ED32EEF82BEAD04
Certificate serial:       5AAD73BEFA1DD5577A0EFF7920323E91A9D6B6AA
Authority key identifier: 85:A5:6F:CF:E5:63:FE:F9:38:45:F3:88:1E:D3:2E:EF:82:BE:AD:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85A56FCFE563FEF93845F3881ED32EEF82BEAD04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/323830343a326633633a383030303a3a2f33332d3333203d3e20323634383739.roa
Signing time:             Mon 23 Mar 2026 19:15:27 +0000
ROA not before:           Mon 23 Mar 2026 19:10:27 +0000
ROA not after:            Mon 22 Mar 2027 19:15:27 +0000
asID:                     264879
IP address blocks:        2804:2f3c:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/85A56FCFE563FEF93845F3881ED32EEF82BEAD04.crl
                          rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/85A56FCFE563FEF93845F3881ED32EEF82BEAD04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85A56FCFE563FEF93845F3881ED32EEF82BEAD04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:40:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ad:73:be:fa:1d:d5:57:7a:0e:ff:79:20:32:3e:91:a9:d6:b6:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85A56FCFE563FEF93845F3881ED32EEF82BEAD04
        Validity
            Not Before: Mar 23 19:10:27 2026 GMT
            Not After : Mar 22 19:15:27 2027 GMT
        Subject: CN=D1D31E6490EFBCC66BEF005426E7ED8ECE45316F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b5:6d:6c:dd:12:ea:36:60:29:ee:cc:c4:6f:
                    f6:1d:f0:2a:54:bc:2f:6c:59:2d:41:21:e9:fc:b4:
                    cb:51:a4:58:6a:dc:72:d4:bc:99:ee:90:ea:98:5c:
                    13:a1:49:d5:62:df:ad:72:59:06:7d:8f:9d:a2:c9:
                    1f:fb:1b:00:10:b4:e7:03:c0:04:33:2e:27:6f:38:
                    a3:e5:47:26:bb:26:9c:89:ba:0a:56:a4:82:50:f4:
                    48:8b:c0:4b:56:9a:96:b6:ea:ca:dc:58:6a:a6:21:
                    b4:46:8a:d6:e4:53:08:ea:7e:e4:2c:ff:f7:b7:89:
                    79:7f:52:5b:23:be:8d:c2:6f:2c:45:a8:c9:da:2d:
                    b4:08:5a:96:fc:f3:51:09:da:8e:61:5c:a0:87:a6:
                    97:a9:fb:9c:12:12:6e:73:f7:bd:bf:27:2e:90:de:
                    6e:94:6d:fc:7f:4c:14:17:c5:2e:a1:c0:0e:5c:32:
                    e1:0a:0e:5f:a2:8c:c1:60:65:dd:fb:0f:88:ac:2a:
                    8f:38:4e:10:bc:4f:ff:08:08:e8:ff:a4:45:12:e6:
                    5c:81:bd:f3:67:74:c2:df:09:d6:ab:f1:5c:22:5a:
                    d5:41:5e:5c:14:8b:87:c8:ee:95:56:28:67:4b:d2:
                    f8:aa:00:bd:2b:20:26:4d:21:fb:64:9e:f9:2a:69:
                    c7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D3:1E:64:90:EF:BC:C6:6B:EF:00:54:26:E7:ED:8E:CE:45:31:6F
            X509v3 Authority Key Identifier:
                keyid:85:A5:6F:CF:E5:63:FE:F9:38:45:F3:88:1E:D3:2E:EF:82:BE:AD:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/85A56FCFE563FEF93845F3881ED32EEF82BEAD04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85A56FCFE563FEF93845F3881ED32EEF82BEAD04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/323830343a326633633a383030303a3a2f33332d3333203d3e20323634383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f3c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         61:8e:13:89:f7:9a:44:44:05:0a:ad:f2:ad:56:15:7d:f4:bb:
         7a:9b:5c:34:30:28:0b:ba:6d:be:5d:02:08:03:ca:0c:06:c0:
         9d:ed:a8:c3:9c:4e:b4:c3:28:23:6a:5a:5c:81:94:a4:73:eb:
         3f:d4:0f:5c:23:89:67:65:bb:d2:6b:30:6d:9a:2d:c4:3a:19:
         40:30:cb:c0:7f:d2:d8:d3:b7:15:5a:cd:34:1c:72:9b:27:d0:
         ad:59:f5:d6:51:df:8d:ef:f6:d3:f9:16:29:51:64:91:bd:1a:
         44:46:1c:f8:4f:4e:5a:1f:77:bf:bf:12:f8:58:2f:f2:eb:3d:
         f9:97:88:6f:0b:b5:97:9c:fc:87:dc:84:68:47:c9:44:55:83:
         57:59:9e:68:c3:f8:cc:31:6f:3d:02:2a:9f:14:ef:d7:3b:f0:
         6b:f3:bb:90:f3:b4:be:ce:2e:c9:9e:6c:85:3d:63:8b:9e:18:
         04:4d:f3:b0:8f:e4:a6:40:5e:82:6f:a5:a4:09:74:d7:59:ef:
         06:6d:7e:e2:01:a5:84:60:57:ac:d8:50:e0:2d:74:3b:5e:83:
         97:68:c5:40:8a:38:83:3c:fd:b1:02:82:31:0e:c1:66:86:4a:
         62:07:26:74:06:00:43:b3:0b:db:c0:3d:95:20:9f:91:d0:d6:
         86:7d:f7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:59:52 2026 by rpki-client