Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/323830343a333437633a383030303a3a2f33362d3336203d3e20323635343631.roa
File:                     323830343a333437633a383030303a3a2f33362d3336203d3e20323635343631.roa (raw, json)
Hash identifier:          JZrfW9Wg2XB572VkeYey3LTJ/oU5UsDNyM/FleDdOCg=
Subject key identifier:   CB:08:94:68:20:F3:86:26:04:23:67:D8:B7:9B:D9:D2:BC:9A:4E:FF
Certificate issuer:       /CN=065E3409E65889AAF6B851D59C66CD22E4619409
Certificate serial:       36C84E6CB49F0E1EE3FA7F88DCDB710AFAA58144
Authority key identifier: 06:5E:34:09:E6:58:89:AA:F6:B8:51:D5:9C:66:CD:22:E4:61:94:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/065E3409E65889AAF6B851D59C66CD22E4619409.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/323830343a333437633a383030303a3a2f33362d3336203d3e20323635343631.roa
Signing time:             Wed 11 Mar 2026 13:53:51 +0000
ROA not before:           Wed 11 Mar 2026 13:48:51 +0000
ROA not after:            Wed 10 Mar 2027 13:53:51 +0000
asID:                     265461
IP address blocks:        2804:347c:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/065E3409E65889AAF6B851D59C66CD22E4619409.crl
                          rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/065E3409E65889AAF6B851D59C66CD22E4619409.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/065E3409E65889AAF6B851D59C66CD22E4619409.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 21:55:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c8:4e:6c:b4:9f:0e:1e:e3:fa:7f:88:dc:db:71:0a:fa:a5:81:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=065E3409E65889AAF6B851D59C66CD22E4619409
        Validity
            Not Before: Mar 11 13:48:51 2026 GMT
            Not After : Mar 10 13:53:51 2027 GMT
        Subject: CN=CB08946820F38626042367D8B79BD9D2BC9A4EFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:84:d1:0e:9a:22:66:d8:7d:76:d7:dd:88:46:
                    e2:fa:79:d2:9a:79:8e:71:61:de:9b:22:c8:6e:82:
                    ba:8c:4b:63:c3:52:92:4e:cc:ea:69:b8:18:0e:05:
                    9c:0f:30:f8:b4:8f:87:66:22:19:9d:b6:81:59:63:
                    09:8f:40:9a:1a:4b:a1:fd:66:f2:68:09:03:84:89:
                    d7:2b:34:d9:62:11:62:a5:5a:0f:1a:65:66:87:bc:
                    c2:13:11:c7:0d:66:9a:ae:3e:88:ed:f1:e7:fe:0b:
                    d5:64:b2:18:2b:b0:78:84:47:96:a7:4f:1d:9d:3b:
                    89:b7:8a:90:de:d0:9b:09:5e:b7:b9:ef:f5:d1:7e:
                    c3:17:47:55:b6:9e:7a:85:a2:97:9f:6e:f8:96:32:
                    c6:48:a7:8c:0b:bd:50:e5:57:44:23:49:ab:dc:e6:
                    77:20:81:2f:06:48:97:b3:88:2b:12:25:ab:6d:29:
                    2a:d5:58:1b:77:78:ad:33:6f:e7:b0:f1:2d:25:9b:
                    1d:58:77:60:78:d0:00:1f:9d:84:33:17:d0:09:97:
                    3c:cd:47:9e:1b:d4:f3:17:0e:1e:0b:9e:e0:8f:b1:
                    cf:05:d1:ea:fc:3d:0f:b5:d2:09:c6:08:6b:f1:41:
                    03:87:ac:ca:0a:68:4b:ff:d4:0c:47:63:07:b3:40:
                    1b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:08:94:68:20:F3:86:26:04:23:67:D8:B7:9B:D9:D2:BC:9A:4E:FF
            X509v3 Authority Key Identifier:
                keyid:06:5E:34:09:E6:58:89:AA:F6:B8:51:D5:9C:66:CD:22:E4:61:94:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/065E3409E65889AAF6B851D59C66CD22E4619409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/065E3409E65889AAF6B851D59C66CD22E4619409.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/323830343a333437633a383030303a3a2f33362d3336203d3e20323635343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:347c:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         71:e6:0e:c8:e5:f5:53:b1:19:48:ad:7e:b6:2c:91:90:53:b7:
         57:2a:a8:c8:23:62:21:e3:ba:a7:14:8e:c0:4e:34:a9:e8:fc:
         c5:a4:e4:03:5c:8b:35:1f:fe:c2:f1:91:85:71:ba:c0:c0:14:
         7e:9d:b6:a3:30:5b:d1:18:99:1a:02:21:55:99:ca:ab:e9:8d:
         2f:61:66:8e:ca:c5:06:ab:5d:70:9c:30:b8:8e:d6:d7:40:56:
         d2:8b:8b:c0:3a:a3:f7:16:c6:df:d9:d5:b8:7f:52:a3:5d:9f:
         7a:94:85:66:4d:06:77:e8:15:7e:84:cd:12:eb:76:ac:e7:0a:
         25:14:dc:cb:8f:66:e8:e6:56:e0:7f:ef:5f:8e:00:6e:97:07:
         08:31:38:87:1c:74:6c:20:e4:b1:52:a1:6d:83:5a:5f:d3:28:
         13:77:19:d3:0f:67:21:cf:38:c0:58:ca:4e:e7:69:98:29:be:
         68:ed:e7:55:68:75:32:9d:52:32:87:77:ad:28:45:05:cd:be:
         7a:32:f1:30:89:0d:8e:90:5b:0a:1e:ce:d3:8d:4f:5c:45:d4:
         74:6d:57:d6:9c:0f:12:66:ae:71:ab:e3:2b:a1:2b:90:cd:4c:
         20:fd:27:04:0d:bb:44:5f:24:8c:27:ca:01:e9:62:cb:d2:36:
         b2:bc:ed:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:27:46 2026 by rpki-client