Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/0/323830343a356162303a3a2f33322d3438203d3e20323638373839.roa
File:                     323830343a356162303a3a2f33322d3438203d3e20323638373839.roa (raw, json)
Hash identifier:          I7wwyODrUi5b8mVkdPb8ZFeEwH5Ad4jAavqkio8SL30=
Subject key identifier:   64:F3:83:28:7E:BC:B8:44:21:3B:E1:7C:D1:12:73:B9:62:26:F2:97
Certificate issuer:       /CN=36C29FBD6B767CD76CD081C6ABCFEB42FD382A14
Certificate serial:       46850BC210F5D391790F8F0A7FB60D0DB9FBAFB5
Authority key identifier: 36:C2:9F:BD:6B:76:7C:D7:6C:D0:81:C6:AB:CF:EB:42:FD:38:2A:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C29FBD6B767CD76CD081C6ABCFEB42FD382A14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/0/323830343a356162303a3a2f33322d3438203d3e20323638373839.roa
Signing time:             Fri 13 Mar 2026 20:10:53 +0000
ROA not before:           Fri 13 Mar 2026 20:05:53 +0000
ROA not after:            Fri 12 Mar 2027 20:10:53 +0000
asID:                     268789
IP address blocks:        2804:5ab0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/0/36C29FBD6B767CD76CD081C6ABCFEB42FD382A14.crl
                          rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/0/36C29FBD6B767CD76CD081C6ABCFEB42FD382A14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C29FBD6B767CD76CD081C6ABCFEB42FD382A14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 03:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:85:0b:c2:10:f5:d3:91:79:0f:8f:0a:7f:b6:0d:0d:b9:fb:af:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36C29FBD6B767CD76CD081C6ABCFEB42FD382A14
        Validity
            Not Before: Mar 13 20:05:53 2026 GMT
            Not After : Mar 12 20:10:53 2027 GMT
        Subject: CN=64F383287EBCB844213BE17CD11273B96226F297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:50:e0:c8:ee:5c:a5:f7:2a:67:40:bc:60:1f:
                    68:ac:8b:a0:42:2c:0e:a6:42:9c:f6:1f:c3:2a:e9:
                    28:14:b3:9d:93:c6:6f:e0:0a:50:6d:ee:63:b9:c5:
                    a3:9b:51:11:af:f7:96:d6:a0:42:54:33:96:ee:0b:
                    63:58:e1:e0:08:99:dd:36:86:51:fe:16:d0:03:5f:
                    7f:61:8f:17:31:0d:b9:4b:c2:a1:66:3b:39:da:e2:
                    2e:0e:05:57:b7:0a:a7:cf:6a:c8:74:ed:ae:46:b0:
                    62:14:97:e6:96:8b:25:10:46:5a:aa:0c:56:df:14:
                    18:b7:18:f9:34:04:67:74:f6:fa:ed:48:ab:7a:a9:
                    e2:25:d1:f3:9c:a4:07:fc:66:3f:26:b7:e2:67:a5:
                    6b:45:6a:56:1d:6d:d7:50:ba:b8:b6:21:36:8b:ba:
                    02:94:32:96:40:b9:2d:cf:d0:07:f9:6b:ed:4f:98:
                    91:d0:8e:e6:35:ea:ab:99:5c:c8:50:6a:b0:1b:8f:
                    57:b1:c3:34:39:84:e9:9b:77:54:66:79:35:48:77:
                    27:35:40:76:fd:c9:b7:f6:39:21:9c:ec:15:e0:37:
                    98:ed:f6:55:35:12:24:8b:df:97:fd:d9:04:8b:44:
                    c5:a8:26:6d:e5:75:85:37:e4:2a:da:05:e6:b0:61:
                    8f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F3:83:28:7E:BC:B8:44:21:3B:E1:7C:D1:12:73:B9:62:26:F2:97
            X509v3 Authority Key Identifier:
                keyid:36:C2:9F:BD:6B:76:7C:D7:6C:D0:81:C6:AB:CF:EB:42:FD:38:2A:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/0/36C29FBD6B767CD76CD081C6ABCFEB42FD382A14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C29FBD6B767CD76CD081C6ABCFEB42FD382A14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/0/323830343a356162303a3a2f33322d3438203d3e20323638373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ab0::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:cf:1e:a3:48:fe:14:40:0b:6a:c7:f9:4c:44:81:2b:6e:08:
         fd:4c:55:4f:bb:52:d3:96:e1:76:9b:07:aa:a4:40:65:70:9e:
         c9:89:0a:94:4f:b3:c9:70:88:34:52:e0:4f:08:5c:71:30:b7:
         51:90:4d:a2:b6:55:e1:cd:cb:0e:82:5c:52:c2:7e:6d:e3:55:
         67:43:bd:ba:c8:a3:df:1d:19:a7:f4:9e:49:03:8e:e7:7a:0d:
         8f:90:b0:e6:de:38:0b:5f:ea:5e:0a:db:7c:de:90:f7:1f:67:
         d5:aa:2e:23:be:ff:35:43:2c:0d:e7:16:1a:53:af:67:ba:53:
         ad:7f:98:6e:f2:62:3e:aa:6d:7c:93:10:48:c4:94:e5:fd:d4:
         65:fa:12:4c:82:c1:c0:c8:9c:07:3e:63:25:d4:0c:c6:d7:31:
         ce:6a:89:c8:d4:45:78:59:c4:fd:b1:7f:4d:a2:c5:70:e2:14:
         33:a9:38:cf:f8:35:c3:19:a2:e9:14:83:e3:48:ac:ec:56:ce:
         68:9a:d0:10:60:b8:c8:ef:f0:3b:7f:05:97:fd:74:88:35:7d:
         ca:96:93:5f:8d:92:85:07:59:34:3b:39:70:52:9a:96:e9:06:
         dd:8d:e6:f3:bd:e6:d0:19:21:f9:61:f4:36:76:4a:6e:61:ae:
         a7:43:e2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:52:46 2026 by rpki-client