Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Aytmwa8x32zQUr7Z6YTi6e75T4s6sV2yQNG2ycDghuio/0/323830343a343033343a3a2f33322d313238203d3e20323635393434.roa
File:                     323830343a343033343a3a2f33322d313238203d3e20323635393434.roa (raw, json)
Hash identifier:          8GNbW4r8xMLWxWhE8/he0Ti3bjh0Nb6Z4WcusYg0SNk=
Subject key identifier:   BD:71:C2:AB:2D:CE:F8:20:39:30:D0:4E:4B:51:EC:76:6B:40:9A:2D
Certificate issuer:       /CN=0D1F4791ABFFDB4C4F7126E001EBA099098A4AC1
Certificate serial:       79DE5D73214C3DDEABFA1381FF23F6C3B273E783
Authority key identifier: 0D:1F:47:91:AB:FF:DB:4C:4F:71:26:E0:01:EB:A0:99:09:8A:4A:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1F4791ABFFDB4C4F7126E001EBA099098A4AC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Aytmwa8x32zQUr7Z6YTi6e75T4s6sV2yQNG2ycDghuio/0/323830343a343033343a3a2f33322d313238203d3e20323635393434.roa
Signing time:             Thu 12 Mar 2026 19:14:49 +0000
ROA not before:           Thu 12 Mar 2026 19:09:49 +0000
ROA not after:            Thu 11 Mar 2027 19:14:49 +0000
asID:                     265944
IP address blocks:        2804:4034::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Aytmwa8x32zQUr7Z6YTi6e75T4s6sV2yQNG2ycDghuio/0/0D1F4791ABFFDB4C4F7126E001EBA099098A4AC1.crl
                          rsync://rpki-repo.registro.br/repo/Aytmwa8x32zQUr7Z6YTi6e75T4s6sV2yQNG2ycDghuio/0/0D1F4791ABFFDB4C4F7126E001EBA099098A4AC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1F4791ABFFDB4C4F7126E001EBA099098A4AC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 04:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:de:5d:73:21:4c:3d:de:ab:fa:13:81:ff:23:f6:c3:b2:73:e7:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1F4791ABFFDB4C4F7126E001EBA099098A4AC1
        Validity
            Not Before: Mar 12 19:09:49 2026 GMT
            Not After : Mar 11 19:14:49 2027 GMT
        Subject: CN=BD71C2AB2DCEF8203930D04E4B51EC766B409A2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f0:19:3e:06:bd:48:d9:db:61:f1:be:1f:0e:
                    1b:63:7e:11:ef:50:2c:32:17:a9:a0:93:39:7f:4c:
                    88:bb:45:3b:e2:b1:45:d8:48:0a:a5:3b:e0:dc:4a:
                    d4:f1:ec:5b:99:b9:c6:62:bc:b2:fd:83:a5:11:57:
                    90:85:bf:2f:ef:32:f0:36:6a:ca:0f:63:08:8c:6e:
                    71:d5:ee:c3:6c:3d:e6:53:be:95:12:f0:6e:6a:9c:
                    33:95:fe:13:5f:4d:d8:53:b8:36:75:b5:43:65:ac:
                    4e:7f:24:05:cf:e6:58:c2:60:a2:66:b8:ab:38:a0:
                    54:33:47:89:7b:b0:ae:5b:da:05:77:5b:af:7a:53:
                    26:8f:03:f7:df:30:d9:0f:68:88:fe:36:ee:01:41:
                    43:03:a8:e0:93:df:dc:14:e2:f1:8b:fb:1b:5e:5b:
                    8d:59:52:8d:58:a9:75:7a:09:93:7c:ed:4e:fb:72:
                    44:e8:f1:bf:04:25:a9:33:fd:b8:e9:bf:fb:73:da:
                    f1:f4:0f:2a:8a:ce:6b:87:a0:52:77:90:96:76:77:
                    88:0a:33:a8:96:4a:4c:6b:17:e9:0a:33:9e:f7:e7:
                    54:c3:08:a0:40:ec:ab:23:e0:b3:60:14:13:99:3e:
                    85:40:fe:0b:b3:69:14:fa:68:8f:88:cf:b0:1e:64:
                    d1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:71:C2:AB:2D:CE:F8:20:39:30:D0:4E:4B:51:EC:76:6B:40:9A:2D
            X509v3 Authority Key Identifier:
                keyid:0D:1F:47:91:AB:FF:DB:4C:4F:71:26:E0:01:EB:A0:99:09:8A:4A:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Aytmwa8x32zQUr7Z6YTi6e75T4s6sV2yQNG2ycDghuio/0/0D1F4791ABFFDB4C4F7126E001EBA099098A4AC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1F4791ABFFDB4C4F7126E001EBA099098A4AC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Aytmwa8x32zQUr7Z6YTi6e75T4s6sV2yQNG2ycDghuio/0/323830343a343033343a3a2f33322d313238203d3e20323635393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4034::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:a8:e5:55:d8:66:c1:ed:be:26:3c:c3:b4:53:d3:ce:70:6c:
         3c:d0:99:01:21:f3:d5:93:0d:2f:5b:82:9a:00:8c:3a:1d:cf:
         ed:ba:05:cd:b7:14:2b:ea:f6:f5:0d:87:60:51:b3:2d:1a:85:
         39:3b:02:a0:ec:71:9f:af:af:72:27:cf:63:b7:46:8e:5d:db:
         6b:71:57:e2:fe:60:45:c4:c0:00:66:2c:ac:cf:54:37:7d:27:
         35:89:14:3b:c1:0e:34:4a:6d:05:0a:5d:75:11:5f:ee:63:95:
         77:46:66:a8:d6:2e:ed:70:80:c5:c9:6b:a5:6a:8f:8e:30:be:
         3f:f8:c8:3d:dd:cf:99:40:0b:dc:f3:11:44:13:93:c3:e5:97:
         e9:cd:ef:fe:9f:29:52:e4:f7:c0:5d:03:f0:cd:e9:df:85:eb:
         a4:56:c6:ec:eb:f7:d6:60:80:4e:ea:b2:fe:df:1b:f7:11:ba:
         6f:0c:6f:85:2b:55:c3:8c:b8:d1:9b:c0:ce:14:c7:2b:a4:75:
         91:37:12:2b:61:21:d9:32:3d:6e:3f:b1:aa:7a:a0:20:ef:6d:
         a4:a4:28:ea:4f:e6:16:8e:51:73:c5:e8:77:e7:10:f1:b0:2a:
         16:81:47:f0:67:31:1c:dd:fb:20:d1:55:46:44:ac:d0:78:81:
         15:83:06:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:57:54 2026 by rpki-client