Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a323030303a3a2f33362d3336203d3e203631373736.roa
File:                     323830343a313932633a323030303a3a2f33362d3336203d3e203631373736.roa (raw, json)
Hash identifier:          Fahtvoi4pxxxX/lIZBDKC0mBz2nKgIySGUV62feJCT8=
Subject key identifier:   D3:23:96:7A:85:2F:C3:5F:5F:0C:DD:73:AC:51:BB:6F:82:7A:89:51
Certificate issuer:       /CN=53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4
Certificate serial:       038D77FFABBF556575DED688A9A506FFE8389FF9
Authority key identifier: 53:07:2E:0F:22:9B:5D:EC:1E:BC:8B:3B:B5:2B:29:D1:DF:86:A0:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a323030303a3a2f33362d3336203d3e203631373736.roa
Signing time:             Tue 03 Mar 2026 22:03:10 +0000
ROA not before:           Tue 03 Mar 2026 21:58:10 +0000
ROA not after:            Tue 02 Mar 2027 22:03:10 +0000
asID:                     61776
IP address blocks:        2804:192c:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.crl
                          rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 09:57:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:8d:77:ff:ab:bf:55:65:75:de:d6:88:a9:a5:06:ff:e8:38:9f:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4
        Validity
            Not Before: Mar  3 21:58:10 2026 GMT
            Not After : Mar  2 22:03:10 2027 GMT
        Subject: CN=D323967A852FC35F5F0CDD73AC51BB6F827A8951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0e:53:04:76:12:bb:56:8f:bf:95:a5:3b:0b:
                    c6:64:3f:6c:bc:fe:1a:a1:80:6c:55:44:c6:ee:f0:
                    f6:7f:43:08:c2:d2:3f:aa:ca:29:2e:b2:f5:68:29:
                    05:22:05:c7:0f:31:c5:4a:03:8d:8e:f8:4c:96:66:
                    3e:29:ae:59:c1:be:b6:f9:aa:5b:ec:35:ab:af:2e:
                    48:c7:15:01:65:48:5e:a0:ff:f0:70:2f:aa:e8:37:
                    aa:26:e4:49:2c:af:61:2f:c4:c7:9f:e2:b8:75:d0:
                    b7:84:4f:f5:e7:3a:4d:b6:70:f5:70:b5:8a:13:e1:
                    02:b2:6c:13:86:40:c8:10:d7:4b:46:34:d6:30:63:
                    38:e9:03:7a:2e:29:4a:b6:17:36:c8:a2:5b:b8:84:
                    e7:bd:56:29:0d:9b:8d:38:ac:47:c2:9e:49:7e:eb:
                    f2:e5:12:30:cc:df:22:06:dd:34:33:d4:68:db:0b:
                    52:4e:9b:f9:df:e1:f2:8e:b7:fb:62:eb:b4:b6:5a:
                    f9:f0:6d:91:79:7b:26:37:0f:d9:7e:e3:2d:f3:65:
                    c1:ee:d3:f1:b4:10:41:1d:6f:b8:12:2a:0e:d6:8b:
                    0e:24:64:be:55:aa:39:47:32:03:6e:2d:aa:6a:b1:
                    b2:91:33:65:78:5f:65:bf:4b:12:10:e7:7e:46:0e:
                    6b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:23:96:7A:85:2F:C3:5F:5F:0C:DD:73:AC:51:BB:6F:82:7A:89:51
            X509v3 Authority Key Identifier:
                keyid:53:07:2E:0F:22:9B:5D:EC:1E:BC:8B:3B:B5:2B:29:D1:DF:86:A0:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a323030303a3a2f33362d3336203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:192c:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         bf:e9:a0:d2:9e:b4:f3:80:f8:5b:a0:9c:23:e8:8a:f2:1c:32:
         04:c5:d1:5b:65:64:9b:cb:ae:3e:ef:15:42:de:a2:2e:6d:e1:
         ef:10:78:6a:fc:57:eb:6a:ba:dc:06:99:03:ef:c6:92:51:d2:
         a3:7c:06:e9:b6:98:cf:13:2d:d0:4c:80:7b:a6:5b:d7:74:2f:
         5c:30:e4:4a:68:82:b7:d0:3b:30:39:3c:ea:9c:ef:ae:ce:dc:
         ba:e3:59:f8:d9:fa:15:d6:05:0d:a0:2b:ed:3e:53:0c:ff:6b:
         b5:97:fe:7e:5b:53:2f:5f:85:3e:2f:9f:c9:a4:a1:c3:09:ee:
         6b:c4:9f:51:01:81:0f:02:1c:e5:91:fe:6d:99:cd:bc:48:dc:
         fd:82:33:4d:2f:f8:df:54:ca:8e:7d:40:06:e3:f7:48:8c:17:
         e6:15:6a:8d:d3:a4:cb:64:19:fa:67:c0:ad:5f:61:9f:68:c1:
         b1:a4:63:cd:0b:0e:a7:92:2f:5f:1c:b1:42:ff:8f:a6:ab:ac:
         85:e0:14:8b:98:9e:da:a9:80:0b:82:33:10:fc:c6:13:1c:0c:
         9b:45:fc:d2:8a:78:0d:3b:3f:7e:22:b0:8e:04:fc:fb:09:09:
         09:c3:03:9a:4a:6c:c9:d0:c2:12:d1:79:35:ac:97:2f:96:72:
         99:c1:f9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:18:19 2026 by rpki-client