Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/323830343a6131383a3a2f33332d3333203d3e20323633303232.roa
File:                     323830343a6131383a3a2f33332d3333203d3e20323633303232.roa (raw, json)
Hash identifier:          hq4OG/qZ/bhAG8jYQpwAcDk4m0ocitMSfukjU6wjlUI=
Subject key identifier:   82:0F:D3:B0:15:BD:63:E6:E1:02:DC:F7:9D:84:A7:00:AF:97:97:5F
Certificate issuer:       /CN=E6A54FF71E395BA75DF9DE63D180369AF8715EB1
Certificate serial:       2A47FADEEEC93336F02F6B0A8D7F95DC3FA1977A
Authority key identifier: E6:A5:4F:F7:1E:39:5B:A7:5D:F9:DE:63:D1:80:36:9A:F8:71:5E:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6A54FF71E395BA75DF9DE63D180369AF8715EB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/323830343a6131383a3a2f33332d3333203d3e20323633303232.roa
Signing time:             Thu 12 Mar 2026 17:32:20 +0000
ROA not before:           Thu 12 Mar 2026 17:27:20 +0000
ROA not after:            Thu 11 Mar 2027 17:32:20 +0000
asID:                     263022
IP address blocks:        2804:a18::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/E6A54FF71E395BA75DF9DE63D180369AF8715EB1.crl
                          rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/E6A54FF71E395BA75DF9DE63D180369AF8715EB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6A54FF71E395BA75DF9DE63D180369AF8715EB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 11:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:47:fa:de:ee:c9:33:36:f0:2f:6b:0a:8d:7f:95:dc:3f:a1:97:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6A54FF71E395BA75DF9DE63D180369AF8715EB1
        Validity
            Not Before: Mar 12 17:27:20 2026 GMT
            Not After : Mar 11 17:32:20 2027 GMT
        Subject: CN=820FD3B015BD63E6E102DCF79D84A700AF97975F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:36:93:6e:3c:1f:31:2a:0a:88:27:bd:c4:3d:
                    96:3d:48:5b:b1:13:cd:ee:1b:08:06:4d:76:99:6f:
                    82:ef:91:85:df:52:de:98:a6:bb:16:5d:07:7b:60:
                    5d:67:b7:e2:8b:ed:7f:84:91:09:03:1e:79:c0:29:
                    57:69:86:ff:f3:85:bc:0f:47:f8:48:80:21:65:e7:
                    f6:9f:a7:1e:9d:41:fd:a0:9c:d8:63:2b:b7:1b:62:
                    f5:77:8f:d7:11:e0:b8:aa:7a:47:5e:4e:34:3e:ba:
                    5c:3d:63:df:2b:4c:3f:f3:d0:60:5e:1b:25:dd:61:
                    b7:77:0e:ce:63:98:f9:e2:13:e5:c9:68:23:96:2c:
                    90:08:ab:52:01:b8:25:80:bf:b5:f3:24:2e:4e:1f:
                    50:89:d0:6f:69:09:13:18:fa:4e:42:bc:89:56:88:
                    c1:46:bb:7d:97:d6:15:2b:61:08:4c:ce:97:0a:d3:
                    7d:b6:bc:04:05:a5:08:a5:1d:de:ed:bf:b7:86:91:
                    cd:5f:cd:13:5e:94:e4:27:9d:e2:4d:7a:49:87:76:
                    59:39:4c:67:18:14:12:d1:24:72:a9:ee:b0:5b:a2:
                    8c:f9:9a:ce:08:aa:cd:93:e0:db:73:21:df:9e:6a:
                    90:1d:b8:43:14:1f:59:a0:33:67:6f:97:b2:d5:87:
                    87:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0F:D3:B0:15:BD:63:E6:E1:02:DC:F7:9D:84:A7:00:AF:97:97:5F
            X509v3 Authority Key Identifier:
                keyid:E6:A5:4F:F7:1E:39:5B:A7:5D:F9:DE:63:D1:80:36:9A:F8:71:5E:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/E6A54FF71E395BA75DF9DE63D180369AF8715EB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6A54FF71E395BA75DF9DE63D180369AF8715EB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/323830343a6131383a3a2f33332d3333203d3e20323633303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a18::/33

    Signature Algorithm: sha256WithRSAEncryption
         b5:a4:48:5f:e4:ba:79:61:78:ec:69:40:dd:ae:12:ef:f1:85:
         7e:1f:3d:61:e4:bf:9e:8c:00:c1:5e:46:74:94:46:f9:ef:86:
         45:70:0b:ba:56:d5:c7:92:62:3a:f9:01:62:f1:9d:93:46:94:
         ba:99:51:91:9c:2c:a6:6b:15:cd:73:60:6d:f2:bf:cb:ee:22:
         bb:51:d6:a9:99:a1:3b:82:b5:ef:6c:6e:1a:ef:ab:7f:30:e1:
         aa:6b:8a:8b:2e:8e:2d:22:39:bc:30:ed:fe:ef:d7:a6:f5:7a:
         e1:f6:93:a1:33:d4:55:a1:64:d6:8f:5b:9b:bb:74:58:3d:01:
         e3:75:e2:44:9e:71:8f:9f:ad:16:e1:88:b2:cd:b2:fd:b3:37:
         3d:4f:fd:c9:65:09:67:ea:32:ed:dd:40:95:3e:a5:a7:85:74:
         a1:1e:ce:d0:22:b0:9f:55:bb:11:a6:59:20:1b:19:be:bf:5d:
         84:6d:1f:da:90:d3:68:d3:ab:cc:b8:35:70:a6:de:62:18:50:
         84:fb:95:fd:a7:44:67:aa:8d:2d:c2:88:b3:f4:1e:d7:df:01:
         06:f4:9e:e8:8b:b3:04:f7:9a:91:8e:ba:ce:c9:3b:2a:f8:ea:
         ba:45:d2:66:74:70:5f:87:06:79:7c:df:22:ef:a4:4f:d8:c8:
         7b:c9:f3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:19:38 2026 by rpki-client