Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/323830343a373638343a3a2f33342d3334203d3e20323731313137.roa
File:                     323830343a373638343a3a2f33342d3334203d3e20323731313137.roa (raw, json)
Hash identifier:          TwL+xAWYqgkDOu6wO0mdemu+Pw/I/HmfsvRANGCX5YQ=
Subject key identifier:   B2:C1:4E:E5:93:AA:4C:70:1F:8E:88:8A:8A:BF:BA:7C:72:8A:45:16
Certificate issuer:       /CN=FBCBA80748B2020F269BC5F846E96B8A7F73026D
Certificate serial:       5F4CE8FE1BDFB8CC092B7809FED7538B8BC35936
Authority key identifier: FB:CB:A8:07:48:B2:02:0F:26:9B:C5:F8:46:E9:6B:8A:7F:73:02:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBCBA80748B2020F269BC5F846E96B8A7F73026D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/323830343a373638343a3a2f33342d3334203d3e20323731313137.roa
Signing time:             Mon 16 Mar 2026 19:00:00 +0000
ROA not before:           Mon 16 Mar 2026 18:55:00 +0000
ROA not after:            Mon 15 Mar 2027 19:00:00 +0000
asID:                     271117
IP address blocks:        2804:7684::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/FBCBA80748B2020F269BC5F846E96B8A7F73026D.crl
                          rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/FBCBA80748B2020F269BC5F846E96B8A7F73026D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBCBA80748B2020F269BC5F846E96B8A7F73026D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 12:42:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:4c:e8:fe:1b:df:b8:cc:09:2b:78:09:fe:d7:53:8b:8b:c3:59:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBCBA80748B2020F269BC5F846E96B8A7F73026D
        Validity
            Not Before: Mar 16 18:55:00 2026 GMT
            Not After : Mar 15 19:00:00 2027 GMT
        Subject: CN=B2C14EE593AA4C701F8E888A8ABFBA7C728A4516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:60:45:0e:0d:f7:49:2b:e7:a0:d9:d1:34:f6:
                    ab:87:27:57:c2:35:5f:03:86:7c:c2:2f:d3:a3:42:
                    cd:f3:d4:e5:96:5e:fe:22:88:b0:9e:23:1c:5d:98:
                    20:12:b1:31:25:62:e5:e0:3e:be:1b:93:c0:cc:4e:
                    52:84:0c:c0:7c:29:ec:60:63:e3:15:5a:4e:e6:5b:
                    29:f0:c2:57:8d:ca:1e:c7:48:d6:ec:33:b1:3f:77:
                    65:d4:27:8d:e3:9b:be:d7:03:13:57:a5:13:04:63:
                    4f:7d:48:dc:07:9b:c5:4d:99:53:35:ee:9c:56:02:
                    d8:4c:1d:79:03:21:41:cd:91:5c:9c:ec:d4:12:61:
                    5b:43:2d:cd:d8:f5:24:4b:4c:18:32:94:24:a4:89:
                    54:13:23:52:9b:4c:18:b9:fb:c1:4d:56:c1:90:fe:
                    1b:e7:2d:d4:4b:17:f6:a9:ff:c7:51:b0:25:f8:41:
                    81:ba:01:01:59:83:d6:4a:71:37:28:2d:35:73:0e:
                    b5:50:8c:be:50:83:fb:37:95:82:c6:06:f5:4b:1e:
                    1e:a1:d6:8a:2d:72:07:c3:65:f4:b6:0a:04:52:db:
                    20:cf:cc:6e:c8:b4:97:5f:de:47:40:ff:e6:56:49:
                    73:7d:d7:de:cf:b7:41:61:d7:27:79:2b:b2:a2:8e:
                    d1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C1:4E:E5:93:AA:4C:70:1F:8E:88:8A:8A:BF:BA:7C:72:8A:45:16
            X509v3 Authority Key Identifier:
                keyid:FB:CB:A8:07:48:B2:02:0F:26:9B:C5:F8:46:E9:6B:8A:7F:73:02:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/FBCBA80748B2020F269BC5F846E96B8A7F73026D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBCBA80748B2020F269BC5F846E96B8A7F73026D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/323830343a373638343a3a2f33342d3334203d3e20323731313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7684::/34

    Signature Algorithm: sha256WithRSAEncryption
         26:36:4f:7b:b0:92:87:79:a8:d0:35:83:ce:74:e4:b9:da:07:
         0d:91:02:6f:14:9e:7b:dd:56:d0:c2:76:92:0a:c7:29:41:09:
         45:a3:81:8d:19:86:a1:2d:13:d2:ee:94:6f:31:79:28:dd:53:
         54:55:51:ef:1d:6d:d3:ef:d6:a5:65:bd:3d:ce:42:c5:fb:eb:
         ea:09:fa:0e:22:23:f5:f9:72:7d:b7:ec:97:70:c8:b1:48:b9:
         64:da:0b:ca:68:32:8c:06:9d:2b:51:fb:7b:4e:71:7a:24:9c:
         bf:48:15:ef:de:a5:fa:9b:eb:b9:09:4a:e2:c3:39:e3:71:ba:
         95:a7:d7:5d:74:c0:11:48:b2:41:f1:a9:ce:71:6e:47:10:53:
         62:ac:f7:62:4e:e6:ea:e0:e2:2d:08:54:38:7d:4a:f0:7c:39:
         6a:b8:4c:d2:64:f0:c1:88:d7:0a:c0:8b:2f:4f:f4:2d:f1:0c:
         2f:dd:bf:52:b9:66:74:c8:c3:a8:28:82:bc:77:cb:a4:d1:7e:
         85:61:65:b1:14:25:4c:1e:c9:f9:f3:1f:14:2c:13:76:2f:14:
         b4:e9:4a:cd:8d:9d:0a:68:db:e3:f0:6f:46:18:38:40:46:95:
         db:b2:62:43:3a:a8:37:d8:84:8d:60:c0:b9:85:d8:df:ec:c4:
         be:73:9e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:26:02 2026 by rpki-client