Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/323830343a326633633a3a2f33332d3333203d3e20323634383739.roa
File:                     323830343a326633633a3a2f33332d3333203d3e20323634383739.roa (raw, json)
Hash identifier:          3zSYenhvQ0wj3amRosqCZ0slnd3gwr3aW5jNnlJycrE=
Subject key identifier:   37:83:F8:66:CD:17:FD:1B:F4:EB:42:AB:92:8A:57:74:0A:CB:D9:C4
Certificate issuer:       /CN=85A56FCFE563FEF93845F3881ED32EEF82BEAD04
Certificate serial:       6CF65CC7935E0A0DD901FD1C7FCB486684EBDCBA
Authority key identifier: 85:A5:6F:CF:E5:63:FE:F9:38:45:F3:88:1E:D3:2E:EF:82:BE:AD:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85A56FCFE563FEF93845F3881ED32EEF82BEAD04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/323830343a326633633a3a2f33332d3333203d3e20323634383739.roa
Signing time:             Mon 23 Mar 2026 19:15:27 +0000
ROA not before:           Mon 23 Mar 2026 19:10:27 +0000
ROA not after:            Mon 22 Mar 2027 19:15:27 +0000
asID:                     264879
IP address blocks:        2804:2f3c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/85A56FCFE563FEF93845F3881ED32EEF82BEAD04.crl
                          rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/85A56FCFE563FEF93845F3881ED32EEF82BEAD04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85A56FCFE563FEF93845F3881ED32EEF82BEAD04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:40:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f6:5c:c7:93:5e:0a:0d:d9:01:fd:1c:7f:cb:48:66:84:eb:dc:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85A56FCFE563FEF93845F3881ED32EEF82BEAD04
        Validity
            Not Before: Mar 23 19:10:27 2026 GMT
            Not After : Mar 22 19:15:27 2027 GMT
        Subject: CN=3783F866CD17FD1BF4EB42AB928A57740ACBD9C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f0:92:46:25:bc:18:33:76:05:31:2f:81:d3:
                    0b:9c:a0:17:51:3d:78:2e:43:cf:fe:21:9e:7d:cb:
                    63:5e:27:73:18:8f:3d:e6:fe:4e:df:e4:a0:13:df:
                    ed:a2:1c:8e:c8:2e:e0:d5:28:0b:ad:c6:ba:41:e5:
                    88:97:64:5a:3d:b6:08:23:05:a3:4f:59:3e:5f:41:
                    44:cf:83:dc:8f:ae:bd:1a:aa:0f:ba:f5:80:f0:37:
                    b9:78:fe:46:01:e4:ac:0f:c1:0c:e2:d4:2f:5f:f6:
                    fc:42:89:af:22:92:e2:18:b5:d3:25:76:d3:77:9d:
                    05:c3:a7:20:ae:09:59:f3:98:e2:7a:b8:5b:91:32:
                    29:59:ed:7e:62:88:c1:a7:fc:37:f7:ff:71:17:05:
                    3e:1a:2e:b3:01:87:8e:4e:a2:52:ff:19:ee:9f:81:
                    f2:fc:9e:f6:4e:d4:fb:25:00:d7:d4:a3:70:96:05:
                    c4:2b:82:0c:84:5a:9f:45:e0:f0:56:bc:bf:2d:6a:
                    d3:28:35:8d:f2:30:55:b9:e2:3b:05:ff:97:9a:00:
                    f6:f1:59:07:c5:86:7c:77:fe:b2:63:0f:1b:24:bf:
                    31:82:bf:45:a4:38:b2:9b:07:72:7e:1e:48:a0:0b:
                    b0:bc:1e:8c:74:dd:07:a2:28:4e:72:fd:f3:4f:81:
                    01:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:83:F8:66:CD:17:FD:1B:F4:EB:42:AB:92:8A:57:74:0A:CB:D9:C4
            X509v3 Authority Key Identifier:
                keyid:85:A5:6F:CF:E5:63:FE:F9:38:45:F3:88:1E:D3:2E:EF:82:BE:AD:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/85A56FCFE563FEF93845F3881ED32EEF82BEAD04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85A56FCFE563FEF93845F3881ED32EEF82BEAD04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/323830343a326633633a3a2f33332d3333203d3e20323634383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f3c::/33

    Signature Algorithm: sha256WithRSAEncryption
         9c:fb:e0:63:08:87:8d:df:a1:51:66:f3:c4:d5:6b:03:01:47:
         af:9d:b0:cb:7a:88:66:69:08:15:e3:c0:ed:86:e1:15:76:6a:
         5b:45:d4:c8:75:26:b4:f1:de:c1:e5:b4:8f:19:bf:1d:0d:29:
         06:45:d2:4c:ff:f3:22:a3:6d:5d:bd:3b:e5:cf:f8:03:af:d0:
         d8:75:e9:14:3c:f7:90:f4:a4:cc:4b:0d:9f:35:58:83:5e:b9:
         44:98:c6:3a:de:60:68:5d:fa:ad:45:fc:bb:7c:19:0d:a9:47:
         09:ae:d9:18:b8:3f:a7:3f:15:6d:c9:db:81:47:33:9b:44:d8:
         29:c5:60:82:25:40:59:75:17:f0:d0:52:40:7b:9c:3b:a2:9e:
         03:90:e9:30:00:41:6a:79:0f:65:88:97:0a:e4:da:21:01:c0:
         34:f6:85:db:13:e2:da:58:07:01:93:db:c5:24:19:b8:d0:aa:
         0b:3f:50:68:9b:08:c4:47:0b:f3:26:17:3c:fe:a4:93:24:97:
         de:67:44:a2:af:30:6e:38:59:5d:cf:4d:aa:3c:32:70:02:7c:
         f9:09:65:ea:aa:4b:34:19:4f:05:e7:a1:65:e8:58:95:b3:88:
         51:6e:da:17:78:c2:75:c3:ad:9e:6f:01:1d:bf:70:ba:62:f4:
         c8:00:db:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:58:23 2026 by rpki-client