Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/323830343a3830343a3a2f33322d313238203d3e20323632333338.roa
File:                     323830343a3830343a3a2f33322d313238203d3e20323632333338.roa (raw, json)
Hash identifier:          YV3+Ui85/LGdKLrrBQL/UhPGMtef7IRiyvUJWVfi5+M=
Subject key identifier:   C0:DE:44:BE:D0:D2:E5:C0:69:A6:61:75:21:F8:2F:7E:E5:D1:E0:BA
Certificate issuer:       /CN=AEDEDF6FCAC5704BDDF83F0B1E60F21929838DC3
Certificate serial:       50F8D3260A57AA6B9EF24B07121715AB7B20435B
Authority key identifier: AE:DE:DF:6F:CA:C5:70:4B:DD:F8:3F:0B:1E:60:F2:19:29:83:8D:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEDEDF6FCAC5704BDDF83F0B1E60F21929838DC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/323830343a3830343a3a2f33322d313238203d3e20323632333338.roa
Signing time:             Fri 20 Mar 2026 12:59:51 +0000
ROA not before:           Fri 20 Mar 2026 12:54:51 +0000
ROA not after:            Fri 19 Mar 2027 12:59:51 +0000
asID:                     262338
IP address blocks:        2804:804::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/AEDEDF6FCAC5704BDDF83F0B1E60F21929838DC3.crl
                          rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/AEDEDF6FCAC5704BDDF83F0B1E60F21929838DC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEDEDF6FCAC5704BDDF83F0B1E60F21929838DC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 14:52:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f8:d3:26:0a:57:aa:6b:9e:f2:4b:07:12:17:15:ab:7b:20:43:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDEDF6FCAC5704BDDF83F0B1E60F21929838DC3
        Validity
            Not Before: Mar 20 12:54:51 2026 GMT
            Not After : Mar 19 12:59:51 2027 GMT
        Subject: CN=C0DE44BED0D2E5C069A6617521F82F7EE5D1E0BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:59:01:71:e0:8d:d8:2b:f6:30:ce:88:b0:3a:
                    87:2c:ce:68:09:7e:26:5b:92:95:f6:70:7d:1b:85:
                    b5:55:b0:1d:e3:dd:4a:5a:37:c3:4a:ed:4f:c5:9b:
                    4d:f8:41:00:eb:35:6d:44:e2:66:4c:07:04:54:f0:
                    15:fd:bb:a7:b7:eb:68:16:2f:54:d7:50:30:29:81:
                    82:a9:f3:64:70:ca:a7:84:3e:e9:cb:e0:17:83:90:
                    63:b4:b6:19:f0:f7:0d:d4:3e:5d:93:6d:98:d1:e8:
                    b8:7c:d4:99:ea:22:c5:3e:f8:cb:84:95:b3:62:54:
                    91:b4:bb:02:56:21:58:4c:e0:ca:b3:da:0e:46:65:
                    a2:33:44:86:b6:be:c8:f6:e0:2f:0c:8c:72:b6:35:
                    20:fa:fb:14:68:35:a9:8b:18:b5:d8:83:4c:27:91:
                    6c:2d:3f:29:9a:98:e7:8a:c2:56:26:08:b9:c5:c5:
                    36:32:5a:cd:13:23:05:7d:00:03:57:c0:fc:c1:30:
                    24:4f:57:97:c5:1e:6e:9f:29:84:29:46:15:91:55:
                    3b:30:30:e2:a1:e3:e1:8f:4a:95:63:d2:24:af:ea:
                    c1:cd:62:48:6d:5c:36:76:99:ab:1a:a3:2f:d8:c2:
                    f2:c4:13:6f:de:63:39:74:ad:8a:32:8f:2d:16:17:
                    f5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:DE:44:BE:D0:D2:E5:C0:69:A6:61:75:21:F8:2F:7E:E5:D1:E0:BA
            X509v3 Authority Key Identifier:
                keyid:AE:DE:DF:6F:CA:C5:70:4B:DD:F8:3F:0B:1E:60:F2:19:29:83:8D:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/AEDEDF6FCAC5704BDDF83F0B1E60F21929838DC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEDEDF6FCAC5704BDDF83F0B1E60F21929838DC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/323830343a3830343a3a2f33322d313238203d3e20323632333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:804::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:60:57:49:ea:e4:df:02:a3:90:e9:d8:57:a2:31:83:16:24:
         7e:81:32:43:b4:e2:6b:35:b0:07:16:9c:4c:8a:c7:e3:cc:4a:
         c2:21:a3:ab:b8:99:41:a2:13:de:3a:3f:c1:e5:1b:1f:17:fe:
         97:70:d0:90:26:3b:ce:cf:a7:1f:ec:37:f0:75:49:d7:e3:82:
         04:10:b0:2a:71:89:a1:cd:b8:a1:73:56:19:ae:cf:68:f7:82:
         e7:9d:c4:80:a0:5c:d1:b7:25:4f:89:66:f4:c5:a4:b3:72:71:
         dd:36:32:52:db:1c:33:77:d3:10:eb:20:80:2b:b6:2d:80:af:
         99:1e:38:c9:39:87:38:0c:aa:dc:a2:45:51:fb:e6:f9:a6:dc:
         45:a5:ba:8d:74:b1:57:c6:db:82:38:d2:8f:e9:28:88:68:6e:
         a0:09:4d:97:47:41:c4:53:8a:a9:13:c5:9f:56:51:7e:d5:6a:
         81:af:b9:fe:fc:04:1b:24:30:74:ce:0f:c2:6c:65:e1:5b:c6:
         83:bc:c5:5b:72:bb:63:07:de:c4:d7:6b:5b:85:eb:03:69:d8:
         a0:49:42:0e:94:6d:08:d0:b5:48:32:36:73:ad:a7:d5:09:80:
         b9:52:21:55:7a:2c:ee:21:75:37:85:db:ae:10:b7:20:b9:42:
         90:e5:3b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:19:58 2026 by rpki-client