Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/323830343a373638343a383030303a3a2f34302d3430203d3e20323731313137.roa
File:                     323830343a373638343a383030303a3a2f34302d3430203d3e20323731313137.roa (raw, json)
Hash identifier:          JDTYNS8zkjaLM3E5mbuaRohjHTQG3QUxEg1kRVCoJsA=
Subject key identifier:   A6:8C:19:D1:B7:75:B4:AE:AD:D3:82:F5:6E:1D:1C:06:DB:93:77:26
Certificate issuer:       /CN=FBCBA80748B2020F269BC5F846E96B8A7F73026D
Certificate serial:       1ABC4D7339BF2D0C047EF9206414090B9DE26D16
Authority key identifier: FB:CB:A8:07:48:B2:02:0F:26:9B:C5:F8:46:E9:6B:8A:7F:73:02:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBCBA80748B2020F269BC5F846E96B8A7F73026D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/323830343a373638343a383030303a3a2f34302d3430203d3e20323731313137.roa
Signing time:             Mon 16 Mar 2026 19:00:23 +0000
ROA not before:           Mon 16 Mar 2026 18:55:23 +0000
ROA not after:            Mon 15 Mar 2027 19:00:23 +0000
asID:                     271117
IP address blocks:        2804:7684:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/FBCBA80748B2020F269BC5F846E96B8A7F73026D.crl
                          rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/FBCBA80748B2020F269BC5F846E96B8A7F73026D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBCBA80748B2020F269BC5F846E96B8A7F73026D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 12:42:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:bc:4d:73:39:bf:2d:0c:04:7e:f9:20:64:14:09:0b:9d:e2:6d:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBCBA80748B2020F269BC5F846E96B8A7F73026D
        Validity
            Not Before: Mar 16 18:55:23 2026 GMT
            Not After : Mar 15 19:00:23 2027 GMT
        Subject: CN=A68C19D1B775B4AEADD382F56E1D1C06DB937726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4b:ca:cc:63:70:2c:c4:39:8c:75:e9:3f:ee:
                    c1:98:39:f7:6d:19:6f:e1:9e:f5:70:af:07:98:6f:
                    83:56:12:d9:1b:c1:e0:05:0f:e4:ae:6e:6b:79:a1:
                    3e:24:e3:37:65:9b:ea:06:1d:73:8d:56:74:b9:e0:
                    d3:bc:0f:c0:b1:d6:49:c9:5d:28:7a:d9:87:b6:c4:
                    87:c2:c0:02:35:7f:50:95:d1:d3:b1:fa:e8:78:04:
                    61:51:08:43:bd:04:a8:85:61:22:e0:3a:6e:a3:85:
                    81:20:fd:5b:6c:32:a5:aa:0c:d0:7f:8e:67:50:fe:
                    ad:99:5c:9f:1b:1d:22:b3:0a:28:00:b9:67:95:0c:
                    6a:bd:8b:cb:8e:2b:19:c8:4c:43:43:b2:21:1f:06:
                    e6:b6:8e:7e:62:bc:22:84:66:f5:18:bf:0d:d1:df:
                    c7:5e:b9:a9:c8:dc:6b:0e:f8:33:c0:50:b1:05:06:
                    39:13:db:fb:d7:66:f9:8c:1a:87:fb:4b:82:32:5d:
                    db:63:65:ce:7d:1d:65:f5:d7:58:8c:8e:2a:8d:0c:
                    68:10:cd:58:fc:17:77:98:44:4b:18:24:d2:06:ed:
                    b2:56:57:e8:23:87:16:1d:43:d6:8e:73:3b:4a:9c:
                    1d:e6:a4:eb:1a:69:c9:c9:61:e3:81:91:61:b1:59:
                    9c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:8C:19:D1:B7:75:B4:AE:AD:D3:82:F5:6E:1D:1C:06:DB:93:77:26
            X509v3 Authority Key Identifier:
                keyid:FB:CB:A8:07:48:B2:02:0F:26:9B:C5:F8:46:E9:6B:8A:7F:73:02:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/FBCBA80748B2020F269BC5F846E96B8A7F73026D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBCBA80748B2020F269BC5F846E96B8A7F73026D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/323830343a373638343a383030303a3a2f34302d3430203d3e20323731313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7684:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         4b:86:1e:f4:a4:25:6c:4f:51:70:73:f3:e7:a0:c5:96:c8:f7:
         33:e4:a5:08:5f:6e:a9:75:58:4e:da:4f:ec:fc:e0:4a:80:f8:
         db:0e:5b:8a:03:ca:6c:e5:29:8f:33:16:c5:13:c1:75:e0:a7:
         8f:ec:e4:28:3e:28:72:6c:0d:be:81:59:75:ba:73:55:46:4f:
         a3:51:b2:23:60:18:1a:46:1d:ff:fe:b5:5a:32:da:98:c4:ab:
         82:9a:79:de:24:37:8d:2a:ca:9e:1f:ae:09:09:0e:25:52:dd:
         63:25:e3:cd:bf:54:68:3f:17:78:ab:8b:e4:f2:80:06:db:76:
         0a:d2:9c:fe:2c:37:be:b3:45:44:2d:f8:10:b7:23:1b:03:1d:
         9a:a8:01:87:05:a5:0d:b3:59:d9:bb:bc:33:ca:93:28:3c:20:
         86:d0:93:67:26:f0:5d:28:0e:08:c1:89:a4:54:af:9b:50:2f:
         3f:c1:67:83:d5:01:7a:b9:c8:c2:1b:05:88:06:c0:55:f6:e5:
         07:43:c4:61:bd:1f:8b:41:89:b0:46:28:42:55:29:f4:5c:20:
         f9:74:3d:00:f7:e8:2c:a5:13:68:d9:11:6b:31:d8:79:6e:b9:
         2d:a7:7b:1f:c0:00:51:04:02:b0:15:fd:07:49:d9:ed:63:d4:
         31:0b:a3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:57:38 2026 by rpki-client