Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a333030303a3a2f33362d3336203d3e203631373736.roa
File:                     323830343a313932633a333030303a3a2f33362d3336203d3e203631373736.roa (raw, json)
Hash identifier:          XFjj24Hbs2bt1AgVKr/Gwpwx/w78p0ll5ze+T4afxpc=
Subject key identifier:   FA:01:AC:62:E5:1C:3E:E4:E9:3D:88:EB:F9:D7:3D:75:E0:F6:D3:B6
Certificate issuer:       /CN=53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4
Certificate serial:       301B6EE7DC69BAF6BA96E1ACFBEA322DA79E590F
Authority key identifier: 53:07:2E:0F:22:9B:5D:EC:1E:BC:8B:3B:B5:2B:29:D1:DF:86:A0:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a333030303a3a2f33362d3336203d3e203631373736.roa
Signing time:             Tue 03 Mar 2026 22:03:09 +0000
ROA not before:           Tue 03 Mar 2026 21:58:09 +0000
ROA not after:            Tue 02 Mar 2027 22:03:09 +0000
asID:                     61776
IP address blocks:        2804:192c:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.crl
                          rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 09:57:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:1b:6e:e7:dc:69:ba:f6:ba:96:e1:ac:fb:ea:32:2d:a7:9e:59:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4
        Validity
            Not Before: Mar  3 21:58:09 2026 GMT
            Not After : Mar  2 22:03:09 2027 GMT
        Subject: CN=FA01AC62E51C3EE4E93D88EBF9D73D75E0F6D3B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3c:71:96:46:fd:ba:6c:a4:39:66:a3:07:3e:
                    f0:01:66:77:40:03:38:8b:5a:df:c3:fd:1b:03:5e:
                    13:bd:29:47:de:a0:7b:51:9d:e6:47:e2:85:0b:8b:
                    30:fa:ac:a1:0c:ec:bc:72:a6:e6:48:f4:73:d9:d9:
                    46:9d:26:5d:6f:ed:a4:2b:bb:ab:92:17:9a:e4:eb:
                    20:86:58:bb:71:19:bd:c9:9c:29:d1:43:3e:19:9c:
                    92:65:52:83:87:04:27:4e:50:42:73:16:73:b7:c1:
                    c2:6a:5f:e8:e1:92:80:fa:e4:f4:f5:18:cd:4e:77:
                    67:98:77:b0:f8:36:5b:02:0d:2e:37:69:75:a5:9e:
                    62:43:25:60:1e:20:9e:63:3e:09:63:89:65:12:ce:
                    aa:bc:69:df:0c:ba:ad:f3:7e:e3:95:ef:fb:01:24:
                    b1:03:a5:10:54:b5:3e:68:54:64:bc:24:9c:1c:ff:
                    ae:45:51:a7:c5:1a:86:a9:14:61:5b:4a:11:5e:82:
                    80:9f:fa:ef:fa:0f:a7:00:4f:30:7b:96:33:00:eb:
                    c4:7f:86:be:31:8b:38:59:74:c1:03:64:08:7e:13:
                    0c:5d:0b:6b:72:fc:c6:b6:ab:7d:51:30:6c:8a:83:
                    4e:f1:c6:93:54:0d:9c:db:ce:44:52:91:55:dd:b9:
                    c7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:01:AC:62:E5:1C:3E:E4:E9:3D:88:EB:F9:D7:3D:75:E0:F6:D3:B6
            X509v3 Authority Key Identifier:
                keyid:53:07:2E:0F:22:9B:5D:EC:1E:BC:8B:3B:B5:2B:29:D1:DF:86:A0:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a333030303a3a2f33362d3336203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:192c:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7d:7b:10:5e:47:5a:08:63:20:69:1b:62:67:1b:19:4b:89:66:
         2e:9f:ff:aa:65:74:3c:b1:93:bb:2e:05:4c:24:52:25:d7:78:
         e0:23:0c:47:f2:21:3a:49:eb:88:40:bf:7d:05:59:c6:c4:f7:
         c0:60:3c:2d:57:9c:6a:3b:4a:71:8e:53:a5:e7:97:ed:60:d0:
         eb:b4:89:44:dc:b9:9e:9e:5a:04:b2:f7:64:dd:63:d5:96:0f:
         bf:88:b5:08:d8:9b:8b:62:c2:45:0f:40:bb:c6:f5:2e:5c:d5:
         1e:de:ad:ea:5e:8f:7c:3b:44:17:5b:ad:e3:a5:61:44:0f:7f:
         d0:db:31:31:01:ac:d6:89:93:27:69:4e:dd:0b:08:83:cf:1f:
         31:58:45:bc:b5:16:11:4e:7c:97:af:03:b7:96:85:5b:99:e5:
         85:50:b6:1e:d3:6d:65:ac:34:06:77:a1:49:31:74:e6:bf:f6:
         38:8a:31:7e:d6:53:7d:27:aa:bf:c0:11:e3:20:da:53:2e:1e:
         07:01:ff:95:d0:ac:fc:ba:15:29:eb:5d:2e:6a:3e:14:fc:8e:
         d7:62:4e:ec:17:82:30:8c:af:13:ed:a4:82:32:26:83:57:52:
         1a:b8:e3:3f:b9:5d:4b:ae:11:38:33:d3:74:65:7c:31:54:c1:
         08:f4:74:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:18:03 2026 by rpki-client