Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/0/323830343a363032343a3a2f33322d3332203d3e20323639313438.roa
File:                     323830343a363032343a3a2f33322d3332203d3e20323639313438.roa (raw, json)
Hash identifier:          NYorknY4k8ob7CoRHr4zA2gnuIgTHTSbeIqJzqUmkVI=
Subject key identifier:   95:0B:72:4E:70:E1:C1:50:88:E4:33:22:78:07:E9:4D:CB:08:35:89
Certificate issuer:       /CN=2311AFA6284FE336E3EF92DF968DD22CF3BEA93C
Certificate serial:       73D54C5ACB59B277BF1BE2BE337130424D8D6644
Authority key identifier: 23:11:AF:A6:28:4F:E3:36:E3:EF:92:DF:96:8D:D2:2C:F3:BE:A9:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2311AFA6284FE336E3EF92DF968DD22CF3BEA93C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/0/323830343a363032343a3a2f33322d3332203d3e20323639313438.roa
Signing time:             Wed 25 Mar 2026 14:28:28 +0000
ROA not before:           Wed 25 Mar 2026 14:23:28 +0000
ROA not after:            Wed 24 Mar 2027 14:28:28 +0000
asID:                     269148
IP address blocks:        2804:6024::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/0/2311AFA6284FE336E3EF92DF968DD22CF3BEA93C.crl
                          rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/0/2311AFA6284FE336E3EF92DF968DD22CF3BEA93C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2311AFA6284FE336E3EF92DF968DD22CF3BEA93C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 01:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d5:4c:5a:cb:59:b2:77:bf:1b:e2:be:33:71:30:42:4d:8d:66:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2311AFA6284FE336E3EF92DF968DD22CF3BEA93C
        Validity
            Not Before: Mar 25 14:23:28 2026 GMT
            Not After : Mar 24 14:28:28 2027 GMT
        Subject: CN=950B724E70E1C15088E433227807E94DCB083589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:49:4d:12:81:bc:97:7b:f4:8f:2c:33:16:5a:
                    15:eb:d5:2c:6c:58:f5:91:e8:ec:77:e1:34:2e:52:
                    7c:a5:7c:1b:35:86:89:3c:f4:af:29:da:09:f5:19:
                    32:77:f3:97:e3:10:e6:b8:fc:25:d9:5f:bd:2b:1b:
                    fb:fc:b8:3a:f6:4f:ca:bc:28:f2:48:35:c9:8e:70:
                    69:2d:eb:6b:8d:7f:af:21:f9:c4:a0:a9:81:3f:fe:
                    e7:f1:79:ee:6a:1e:41:05:11:9b:bb:78:b9:ed:3f:
                    ad:f6:1a:ee:c2:63:d8:49:86:36:7a:9f:b4:59:b1:
                    bf:ba:ef:de:ce:84:f7:12:87:6a:05:01:46:2b:88:
                    80:fe:82:cf:11:db:2d:79:6b:12:d1:81:fc:06:f0:
                    06:45:fe:b3:16:af:f9:bd:68:b2:3f:c6:7c:35:c4:
                    f4:9d:e0:4c:2b:46:c9:63:f9:1e:9d:71:b4:9e:4d:
                    fb:c2:82:ae:8d:fe:f3:2d:50:7c:0f:17:13:4f:fe:
                    07:b9:b3:fe:bc:a9:53:1c:a4:a6:69:67:a1:d1:a9:
                    9b:94:34:6f:e3:63:0c:13:c0:69:f1:0d:63:4d:5e:
                    80:21:54:88:d0:f7:dd:85:2f:ac:d9:3f:64:96:1f:
                    7d:2b:98:16:41:bb:1a:9c:77:30:9a:51:dd:cd:1c:
                    88:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0B:72:4E:70:E1:C1:50:88:E4:33:22:78:07:E9:4D:CB:08:35:89
            X509v3 Authority Key Identifier:
                keyid:23:11:AF:A6:28:4F:E3:36:E3:EF:92:DF:96:8D:D2:2C:F3:BE:A9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/0/2311AFA6284FE336E3EF92DF968DD22CF3BEA93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2311AFA6284FE336E3EF92DF968DD22CF3BEA93C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/0/323830343a363032343a3a2f33322d3332203d3e20323639313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6024::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:16:d4:5e:97:f1:02:ab:de:49:38:a1:e6:d6:67:95:e6:74:
         09:25:fd:79:6c:2a:42:76:d0:95:80:a7:f2:cd:9e:a8:01:77:
         59:3c:1b:02:0c:41:f5:d0:39:26:cc:8d:7e:c9:bb:29:96:48:
         e6:48:fd:31:ad:8b:41:45:a6:6d:01:7b:0e:c0:68:75:a3:ff:
         a3:6b:ab:1e:e2:82:57:c6:e2:9e:d6:6e:db:0d:6d:89:ad:8c:
         ac:41:3b:87:99:1e:f1:0c:3a:fc:78:8b:eb:4f:84:92:c9:6d:
         7b:28:dd:18:2b:ec:c9:21:3d:26:db:01:62:42:45:fd:fb:66:
         97:0e:17:7d:74:aa:29:28:c2:57:38:ff:c2:ae:6c:2f:df:50:
         a7:f4:aa:06:d9:98:a6:56:13:e0:1d:ca:a4:34:d3:00:47:c8:
         58:04:dc:25:3e:e3:10:40:5b:0a:a8:6b:1f:37:c0:0f:35:4b:
         21:da:35:1d:7f:e8:2b:20:b0:3b:7e:0e:6c:b4:d5:a1:e3:7e:
         27:c2:d7:11:f0:dd:15:17:82:ba:07:55:4a:a0:2b:8e:a0:16:
         0e:b3:95:eb:11:76:39:1e:3c:75:85:52:82:86:f9:0e:ac:57:
         51:05:bb:b7:82:23:cb:08:02:4d:35:1e:19:1c:66:d9:48:ed:
         9e:45:ec:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:59:19 2026 by rpki-client