Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/323830343a316565383a3a2f33332d313238203d3e20323634343533.roa
File:                     323830343a316565383a3a2f33332d313238203d3e20323634343533.roa (raw, json)
Hash identifier:          PTBj6tcGQykJ+RIKhlH2Ii1MuS+5hPhZuIYpELC03nM=
Subject key identifier:   48:FE:5B:9A:26:5D:C2:41:57:94:4B:61:33:DD:67:68:70:C2:85:4C
Certificate issuer:       /CN=1464CD5C3AF5B04C47CBB5A79553DD7640D8B709
Certificate serial:       5F6BC1DB8AFE0E69F42AF6097DE241C517C85112
Authority key identifier: 14:64:CD:5C:3A:F5:B0:4C:47:CB:B5:A7:95:53:DD:76:40:D8:B7:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1464CD5C3AF5B04C47CBB5A79553DD7640D8B709.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/323830343a316565383a3a2f33332d313238203d3e20323634343533.roa
Signing time:             Mon 23 Mar 2026 13:10:34 +0000
ROA not before:           Mon 23 Mar 2026 13:05:34 +0000
ROA not after:            Mon 22 Mar 2027 13:10:34 +0000
asID:                     264453
IP address blocks:        2804:1ee8::/33 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/1464CD5C3AF5B04C47CBB5A79553DD7640D8B709.crl
                          rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/1464CD5C3AF5B04C47CBB5A79553DD7640D8B709.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1464CD5C3AF5B04C47CBB5A79553DD7640D8B709.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 12:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:6b:c1:db:8a:fe:0e:69:f4:2a:f6:09:7d:e2:41:c5:17:c8:51:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1464CD5C3AF5B04C47CBB5A79553DD7640D8B709
        Validity
            Not Before: Mar 23 13:05:34 2026 GMT
            Not After : Mar 22 13:10:34 2027 GMT
        Subject: CN=48FE5B9A265DC24157944B6133DD676870C2854C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9c:b8:0f:95:9e:76:30:e5:e2:18:a3:7d:e4:
                    45:fb:69:3c:bb:15:7e:01:d2:a9:82:e9:14:21:3b:
                    59:27:99:a7:e4:c9:50:9d:6c:ce:8a:15:66:55:a6:
                    4e:d6:7f:cd:0d:3c:ac:6e:6e:12:b7:5d:e3:61:49:
                    6c:67:a6:06:94:38:f3:f8:a7:1d:66:84:49:0a:59:
                    39:ed:05:15:ff:c5:ee:1f:d7:95:81:ea:08:61:41:
                    57:02:85:bf:25:00:12:02:dd:e5:1a:34:24:06:fe:
                    01:7b:aa:26:12:0a:17:64:ea:81:fc:1f:98:75:88:
                    77:99:56:0d:05:7a:6f:23:00:d6:a3:aa:3f:fa:ee:
                    e9:d1:75:e4:bb:08:03:0f:ce:82:f5:14:3e:28:8c:
                    52:62:06:e7:cb:f3:5e:af:96:6f:c2:5f:43:16:22:
                    66:2e:66:44:e5:86:d9:b7:55:22:bb:3d:cb:87:63:
                    f5:41:e9:36:d2:5e:92:82:68:88:32:72:9e:9b:be:
                    90:6e:2a:74:4f:01:c8:42:d0:8e:3f:4c:cf:5e:4b:
                    16:3a:2a:c3:c7:e6:78:e3:2a:85:55:75:25:68:bb:
                    de:f0:be:11:11:5c:ba:85:fa:27:c1:78:a7:3c:05:
                    5d:24:09:96:ba:77:fa:a5:b9:e5:8c:43:3b:b1:14:
                    a4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FE:5B:9A:26:5D:C2:41:57:94:4B:61:33:DD:67:68:70:C2:85:4C
            X509v3 Authority Key Identifier:
                keyid:14:64:CD:5C:3A:F5:B0:4C:47:CB:B5:A7:95:53:DD:76:40:D8:B7:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/1464CD5C3AF5B04C47CBB5A79553DD7640D8B709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1464CD5C3AF5B04C47CBB5A79553DD7640D8B709.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/323830343a316565383a3a2f33332d313238203d3e20323634343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ee8::/33

    Signature Algorithm: sha256WithRSAEncryption
         6a:92:6a:ed:20:53:d7:3a:84:2d:e9:4c:f2:25:31:27:86:e8:
         6d:f2:e7:bf:9e:f4:e9:7f:53:34:04:09:78:fd:f1:b6:3e:04:
         4e:b6:55:61:51:f5:0b:b4:05:74:c4:f0:aa:09:85:36:49:83:
         f1:6c:4f:dd:1a:d2:29:13:2b:17:23:48:98:aa:a7:97:32:da:
         c9:ac:d4:26:76:e3:62:07:86:da:7a:80:47:1f:c8:48:e8:c2:
         e8:f6:1c:37:31:26:45:d4:43:f9:8d:85:3c:70:dd:44:a1:e5:
         c7:d6:9d:12:74:41:e3:47:aa:d9:d6:ad:f9:dc:f8:12:92:5a:
         bd:2d:62:68:d3:36:36:b1:b4:35:83:ff:2d:0a:a9:fb:53:84:
         21:23:05:51:6a:2e:0b:f2:ff:c5:92:73:93:56:ce:c3:83:14:
         5e:91:eb:d5:a0:3b:e8:0f:4f:9c:cc:af:30:7f:e4:ec:64:41:
         39:7c:91:ae:2c:c4:8f:86:c3:51:bf:69:a5:00:e4:e7:97:1a:
         87:03:4f:40:b4:7c:df:e2:91:d6:c5:5e:83:34:99:7b:77:22:
         a6:48:41:65:1a:9b:db:e1:97:25:30:ca:79:13:bd:13:f4:21:
         f8:e0:f2:37:ec:7c:df:05:06:65:1b:ff:0a:4d:83:e6:58:26:
         dd:5c:28:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:57:34 2026 by rpki-client