Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/323830343a373433633a3a2f33332d3333203d3e20323730393638.roa
File:                     323830343a373433633a3a2f33332d3333203d3e20323730393638.roa (raw, json)
Hash identifier:          do2lhTPDbZdM9S8OwZhyP5VQMdypmYSTBXrdTFiK+GM=
Subject key identifier:   BD:4E:F3:15:3E:0E:90:BB:B0:EA:09:6E:30:A3:7C:85:AE:67:C0:EE
Certificate issuer:       /CN=BD729FD9CBD5A0A9946D6068C63DEC839E9765EF
Certificate serial:       7BE33958C87F74327735E017EE6B1FCC597F5B1A
Authority key identifier: BD:72:9F:D9:CB:D5:A0:A9:94:6D:60:68:C6:3D:EC:83:9E:97:65:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/323830343a373433633a3a2f33332d3333203d3e20323730393638.roa
Signing time:             Mon 16 Mar 2026 22:03:03 +0000
ROA not before:           Mon 16 Mar 2026 21:58:03 +0000
ROA not after:            Mon 15 Mar 2027 22:03:03 +0000
asID:                     270968
IP address blocks:        2804:743c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.crl
                          rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e3:39:58:c8:7f:74:32:77:35:e0:17:ee:6b:1f:cc:59:7f:5b:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD729FD9CBD5A0A9946D6068C63DEC839E9765EF
        Validity
            Not Before: Mar 16 21:58:03 2026 GMT
            Not After : Mar 15 22:03:03 2027 GMT
        Subject: CN=BD4EF3153E0E90BBB0EA096E30A37C85AE67C0EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1d:81:77:69:1b:66:f4:ef:a8:52:52:d8:c3:
                    ed:cd:f2:5f:11:e0:cb:18:33:c8:2a:4f:d6:86:b6:
                    77:93:3b:ce:ff:c3:b9:97:fe:b5:d2:1f:13:ec:f8:
                    11:e9:e3:99:dc:24:01:eb:7c:5c:72:74:3b:1b:d0:
                    2f:02:94:9d:f6:33:b2:55:a0:c2:82:36:91:fa:e7:
                    45:ca:4b:a6:f4:8c:bf:56:1e:d9:c2:fa:3c:42:55:
                    11:4a:73:99:3a:05:28:ff:ce:c4:48:c2:2a:cf:9e:
                    25:db:f0:15:35:63:a4:e8:30:c1:a1:9c:3a:f0:c5:
                    cc:38:08:e2:71:08:af:e1:d1:b6:bb:95:11:6c:90:
                    2c:02:26:f5:f0:bc:d8:6a:a1:4c:ee:76:ff:f9:d9:
                    12:8b:b0:43:52:db:f7:80:4b:b7:84:f8:15:4a:32:
                    65:5a:bb:46:b0:a2:14:91:d4:58:b9:bf:ce:b1:d6:
                    10:5b:9f:b2:1d:ce:7f:04:cd:35:94:03:e1:8e:cb:
                    06:4b:d5:ca:a7:ae:c4:79:bd:84:02:87:38:93:24:
                    77:7e:17:e0:49:f5:72:34:bd:29:79:3a:14:1e:37:
                    6e:e1:19:73:b1:8c:fe:ec:b9:53:37:9b:1d:6c:1e:
                    fc:63:a4:9f:e4:93:bf:78:3d:34:2f:15:0a:34:63:
                    96:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:4E:F3:15:3E:0E:90:BB:B0:EA:09:6E:30:A3:7C:85:AE:67:C0:EE
            X509v3 Authority Key Identifier:
                keyid:BD:72:9F:D9:CB:D5:A0:A9:94:6D:60:68:C6:3D:EC:83:9E:97:65:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/323830343a373433633a3a2f33332d3333203d3e20323730393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:743c::/33

    Signature Algorithm: sha256WithRSAEncryption
         0e:b3:e6:e7:8f:68:4f:a0:3e:a6:8b:89:7b:19:08:25:2e:c1:
         81:c1:45:70:d0:03:8f:33:f7:a7:f5:98:aa:b6:30:c5:18:2e:
         6b:ee:bf:13:df:f2:4a:dc:67:59:3e:86:a4:b7:5f:d8:92:f8:
         b5:1b:22:00:d8:a9:4a:d3:63:ff:28:e8:12:4b:a1:e6:a7:d9:
         2e:9a:c9:82:a8:0a:30:ad:a4:e6:92:57:3f:42:9d:8e:6c:72:
         c7:fc:d1:4e:bd:c7:4c:d3:e1:d7:14:c3:ff:8b:5e:63:65:ac:
         d9:c5:b1:96:3b:28:61:62:4c:28:05:24:c0:59:37:ba:68:ba:
         34:0f:fe:21:1d:f2:c6:a7:23:f6:2f:6b:9d:9e:f3:5b:a3:12:
         77:4a:c4:25:0b:38:fd:5a:f0:8b:a2:1f:b5:0b:27:36:f8:8d:
         8a:c2:2e:d1:f8:12:f3:a6:92:63:db:08:c6:48:c5:12:13:cd:
         7d:9b:3a:09:f9:c0:d0:2c:aa:7f:fe:ac:3f:30:c7:d6:46:f2:
         25:b9:fa:40:78:aa:2b:4c:d2:e0:d4:e5:cc:7f:96:80:fb:bb:
         b0:89:d2:0b:7c:66:b7:b4:15:3d:c7:6d:75:af:dc:90:ee:6d:
         e5:62:f6:1c:82:a3:13:6d:14:cb:1b:de:cf:b1:75:15:67:a7:
         ab:06:b2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:20:30 2026 by rpki-client