Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/323830343a6364303a3a2f33322d3438203d3e203532353537.roa
File:                     323830343a6364303a3a2f33322d3438203d3e203532353537.roa (raw, json)
Hash identifier:          Eu5DVU3V/RZ0BlpAFcjCoGAkt5dgqvba2lZm5tomid4=
Subject key identifier:   D2:FA:97:F3:42:7C:7F:65:CD:20:CC:1E:82:4C:FB:98:6E:51:EF:A1
Certificate issuer:       /CN=703A0CD811A69A5124FD18D0E69AB4829B388433
Certificate serial:       5E1957272E3CB62CDA72A79DC19F73FFC621596E
Authority key identifier: 70:3A:0C:D8:11:A6:9A:51:24:FD:18:D0:E6:9A:B4:82:9B:38:84:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/703A0CD811A69A5124FD18D0E69AB4829B388433.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/323830343a6364303a3a2f33322d3438203d3e203532353537.roa
Signing time:             Mon 09 Mar 2026 22:59:31 +0000
ROA not before:           Mon 09 Mar 2026 22:54:31 +0000
ROA not after:            Mon 08 Mar 2027 22:59:31 +0000
asID:                     52557
IP address blocks:        2804:cd0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/703A0CD811A69A5124FD18D0E69AB4829B388433.crl
                          rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/703A0CD811A69A5124FD18D0E69AB4829B388433.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/703A0CD811A69A5124FD18D0E69AB4829B388433.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 07:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:19:57:27:2e:3c:b6:2c:da:72:a7:9d:c1:9f:73:ff:c6:21:59:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=703A0CD811A69A5124FD18D0E69AB4829B388433
        Validity
            Not Before: Mar  9 22:54:31 2026 GMT
            Not After : Mar  8 22:59:31 2027 GMT
        Subject: CN=D2FA97F3427C7F65CD20CC1E824CFB986E51EFA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:28:8f:f8:ea:73:3c:ca:1c:5e:38:54:be:f9:
                    b9:71:18:0f:fe:e6:7c:4f:15:4d:a6:46:6f:db:c9:
                    69:c8:64:b0:72:f6:9e:fa:b1:5a:7c:f4:4a:2a:9a:
                    44:f1:38:8b:e6:ea:ef:01:2d:e5:94:fa:22:37:c7:
                    9f:d2:4c:7a:82:25:dc:8d:11:b3:d6:83:e8:b4:9f:
                    1c:0e:fa:5f:8a:a7:03:90:f1:bf:3d:24:25:e9:d2:
                    cb:f7:9a:04:8d:a7:ef:e3:b9:e5:d5:98:b5:8d:94:
                    b7:8b:75:d5:0e:34:7b:7f:25:e8:7d:95:fe:f2:ee:
                    19:50:6e:bb:d5:94:26:04:24:7d:3f:ef:82:cc:f9:
                    98:f1:1b:8f:53:80:95:db:a1:1f:94:ff:6f:c2:33:
                    05:fe:9b:3c:f2:0a:18:32:c1:b5:8a:e0:e4:c6:68:
                    0c:9a:ec:f8:1d:90:07:35:37:12:5d:f3:30:37:89:
                    df:00:24:a9:99:ee:ab:25:a9:56:31:88:e2:b9:26:
                    15:cf:70:b2:62:d8:eb:ef:d2:2e:a8:27:f0:0a:0c:
                    3a:c6:13:b0:59:8b:b9:0f:2f:fb:8e:bb:33:6d:72:
                    7b:52:5e:a0:55:52:95:f8:20:9c:4f:47:ba:ca:3b:
                    c3:1b:d3:c9:8a:ad:ec:6b:ba:60:49:15:03:df:3d:
                    4d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:FA:97:F3:42:7C:7F:65:CD:20:CC:1E:82:4C:FB:98:6E:51:EF:A1
            X509v3 Authority Key Identifier:
                keyid:70:3A:0C:D8:11:A6:9A:51:24:FD:18:D0:E6:9A:B4:82:9B:38:84:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/703A0CD811A69A5124FD18D0E69AB4829B388433.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/703A0CD811A69A5124FD18D0E69AB4829B388433.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/323830343a6364303a3a2f33322d3438203d3e203532353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:0c:a7:2b:de:7c:42:aa:c7:85:1c:7f:af:9d:96:3c:bc:97:
         27:74:b4:9b:d1:c0:b3:45:bc:99:b1:d0:64:54:fb:8b:82:1a:
         41:fd:3a:6e:8e:09:06:72:05:d4:0f:73:b0:50:f5:87:e3:b8:
         a9:ed:11:b3:6c:c6:68:8c:39:83:05:2d:ea:57:26:1d:a5:08:
         12:2d:ea:54:59:82:73:01:86:e8:41:eb:d7:7b:a6:fb:23:83:
         f5:38:d0:06:c9:8d:ee:27:1d:86:17:59:54:ec:fd:18:9f:fa:
         da:c6:aa:db:6d:f7:ee:44:6a:a7:f5:c1:7a:71:b2:55:13:9a:
         57:8e:b7:86:58:f9:4c:9f:67:b2:af:db:58:11:4e:e0:13:ac:
         6d:65:8a:56:0a:d8:55:f5:ff:09:8e:41:cc:cb:99:f1:5a:62:
         fa:a7:18:97:2c:05:07:eb:8d:e8:75:4a:5d:a2:bb:17:ea:23:
         4a:57:31:ba:ae:56:01:46:90:23:74:c0:32:eb:ed:fa:12:22:
         d4:1c:88:64:97:44:3d:1f:b3:ea:8f:54:e3:24:88:2c:6d:dc:
         1c:a8:3c:dc:37:66:f0:31:b5:7a:4d:44:8f:6d:1a:a9:d1:c6:
         d7:8b:8c:08:4e:ac:8c:ac:ba:35:41:9a:39:55:d9:8b:1f:e1:
         ea:be:f6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:51:51 2026 by rpki-client