Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/323830343a373732633a383030303a3a2f33332d3333203d3e20323731313630.roa
File:                     323830343a373732633a383030303a3a2f33332d3333203d3e20323731313630.roa (raw, json)
Hash identifier:          ZKdfWmC05sSuMnqucSxY6A7mqxOhUwZSYyfZzQv1sds=
Subject key identifier:   1C:B1:94:61:17:21:80:A9:51:49:B7:D7:09:01:69:DB:39:70:E9:F9
Certificate issuer:       /CN=D1171AF24520C9934655F1D0B335CC88750F0C2F
Certificate serial:       62F09E5A589B4FE658F8255D71C8CF84F48A4297
Authority key identifier: D1:17:1A:F2:45:20:C9:93:46:55:F1:D0:B3:35:CC:88:75:0F:0C:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/323830343a373732633a383030303a3a2f33332d3333203d3e20323731313630.roa
Signing time:             Mon 16 Mar 2026 20:03:02 +0000
ROA not before:           Mon 16 Mar 2026 19:58:02 +0000
ROA not after:            Mon 15 Mar 2027 20:03:02 +0000
asID:                     271160
IP address blocks:        2804:772c:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.crl
                          rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:17:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:f0:9e:5a:58:9b:4f:e6:58:f8:25:5d:71:c8:cf:84:f4:8a:42:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1171AF24520C9934655F1D0B335CC88750F0C2F
        Validity
            Not Before: Mar 16 19:58:02 2026 GMT
            Not After : Mar 15 20:03:02 2027 GMT
        Subject: CN=1CB19461172180A95149B7D7090169DB3970E9F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:33:5c:44:c0:b5:f2:a5:3f:ac:e9:49:71:37:
                    5a:da:14:3d:5c:9e:e3:5d:fb:b6:59:28:88:a1:3e:
                    d3:b4:48:22:43:cb:69:fa:cc:db:66:97:c0:0b:df:
                    3b:76:da:47:81:a0:60:56:f4:0f:fb:9c:4f:0f:c1:
                    a6:5b:0a:f3:21:03:13:b5:e3:18:00:92:34:50:bd:
                    39:e1:0f:6f:9f:61:3b:43:fd:73:49:53:cf:f6:90:
                    ce:d6:1b:9a:58:e0:0b:89:29:d0:f8:e0:7d:a7:2e:
                    1d:9d:bb:b4:63:f9:4e:0b:c1:e3:c4:4b:12:c5:4d:
                    2b:20:b2:96:c8:50:47:b5:40:0a:09:9c:5c:2b:87:
                    ff:b7:f4:c7:8b:96:d8:e0:29:33:cf:74:e3:a1:94:
                    60:9e:af:cb:67:cf:ff:2d:24:56:06:f6:03:6d:f3:
                    b5:5e:b7:7e:88:41:e8:9f:0c:8c:73:db:0f:7f:c3:
                    9c:02:cd:17:b6:0b:91:c9:ad:38:79:17:e4:44:43:
                    3f:d2:d4:9f:f9:22:a9:28:8b:04:b4:a1:d6:60:39:
                    c9:e9:94:cd:4e:ba:ab:6a:1a:b4:c8:7d:be:50:a5:
                    99:ee:51:ed:a8:0d:0c:c3:81:b6:80:e9:ac:01:b7:
                    05:f1:c1:2e:04:ad:ed:86:bd:a5:ed:38:6b:a4:ea:
                    83:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B1:94:61:17:21:80:A9:51:49:B7:D7:09:01:69:DB:39:70:E9:F9
            X509v3 Authority Key Identifier:
                keyid:D1:17:1A:F2:45:20:C9:93:46:55:F1:D0:B3:35:CC:88:75:0F:0C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/323830343a373732633a383030303a3a2f33332d3333203d3e20323731313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:772c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         2b:f8:b3:23:24:46:95:44:48:33:9b:0d:7d:ea:fd:bc:02:63:
         f0:a6:73:3e:a6:55:ba:02:0f:db:3a:08:04:ad:61:51:c0:a3:
         d5:de:c6:bd:89:3d:f8:72:46:f8:75:35:75:23:bd:6c:79:b8:
         36:1b:7d:97:ed:c1:d1:f9:02:e3:f1:50:45:d5:da:49:87:a9:
         d0:6d:45:cb:45:50:65:8e:85:95:46:d4:90:20:b5:46:a2:07:
         c8:e5:ca:e3:38:e4:c7:c7:91:08:76:17:68:3c:fc:32:4d:74:
         54:0e:16:1d:e7:55:6f:bd:b1:6f:86:5e:56:f6:0f:aa:a4:c7:
         37:6a:a7:87:23:c8:7d:12:1b:77:f6:52:10:46:54:04:64:ac:
         60:4a:f9:b4:fc:5d:80:70:12:a3:c0:48:c7:ca:b7:30:4e:42:
         9f:9a:df:ef:a4:cf:85:4c:71:29:b8:66:94:bf:34:b4:f6:98:
         2d:cd:e6:af:03:a1:5e:ad:4b:33:fe:3d:b8:19:75:d6:f8:c3:
         1d:13:36:36:4e:aa:4b:54:a0:69:c8:81:c2:e6:ef:a2:96:27:
         a9:1f:2f:e6:36:06:08:0a:2c:5b:0a:95:d3:23:e2:73:6e:d4:
         22:0f:12:16:73:28:f5:c4:ef:87:54:94:bb:a3:5a:c6:e0:60:
         69:cb:40:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:55:53 2026 by rpki-client