Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/323830343a376435343a3a2f33322d3634203d3e20323731353534.roa
File:                     323830343a376435343a3a2f33322d3634203d3e20323731353534.roa (raw, json)
Hash identifier:          KOUkMHS5DKWxHbsu7ns1bE5HbrJ5hRNMl11OdkQJI0A=
Subject key identifier:   6D:F6:FB:7F:FF:92:68:EF:26:35:51:C5:68:0C:79:04:ED:9E:FC:D0
Certificate issuer:       /CN=F3F0B9ADD08C4E354227AF7D761D7DBE2262AC14
Certificate serial:       41B47C22B7D30D1CACB0227C4C83F418C6A9F448
Authority key identifier: F3:F0:B9:AD:D0:8C:4E:35:42:27:AF:7D:76:1D:7D:BE:22:62:AC:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3F0B9ADD08C4E354227AF7D761D7DBE2262AC14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/323830343a376435343a3a2f33322d3634203d3e20323731353534.roa
Signing time:             Fri 13 Mar 2026 18:01:11 +0000
ROA not before:           Fri 13 Mar 2026 17:56:11 +0000
ROA not after:            Fri 12 Mar 2027 18:01:11 +0000
asID:                     271554
IP address blocks:        2804:7d54::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/F3F0B9ADD08C4E354227AF7D761D7DBE2262AC14.crl
                          rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/F3F0B9ADD08C4E354227AF7D761D7DBE2262AC14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3F0B9ADD08C4E354227AF7D761D7DBE2262AC14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 09:22:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b4:7c:22:b7:d3:0d:1c:ac:b0:22:7c:4c:83:f4:18:c6:a9:f4:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3F0B9ADD08C4E354227AF7D761D7DBE2262AC14
        Validity
            Not Before: Mar 13 17:56:11 2026 GMT
            Not After : Mar 12 18:01:11 2027 GMT
        Subject: CN=6DF6FB7FFF9268EF263551C5680C7904ED9EFCD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:58:ab:1e:66:62:eb:54:54:be:e3:a0:18:f4:
                    11:02:11:a4:92:e1:b7:a6:b5:9e:97:fc:74:f6:47:
                    ce:9a:27:c8:ca:f4:1c:29:3e:ef:14:ef:6a:f7:fb:
                    eb:54:51:f1:2e:e2:95:bb:e6:da:b3:ba:32:52:70:
                    81:16:32:3c:fd:d8:2c:36:0b:11:1c:f0:9a:35:aa:
                    07:e7:1c:f3:07:c3:8c:e3:43:fc:1e:33:1f:10:0a:
                    b0:8f:52:77:4a:a3:f2:80:4e:0f:c2:e4:5c:75:f8:
                    4b:99:ba:64:8a:0c:c2:96:77:0a:ed:48:32:a8:01:
                    42:40:9d:ba:5d:1c:09:4f:c1:fb:b3:4c:25:48:ce:
                    95:f1:8d:d5:af:bb:a7:cb:d1:a5:17:33:ad:f3:7e:
                    3b:9b:1b:c1:62:36:e8:48:54:6e:8e:42:b3:02:12:
                    53:02:8c:fb:8c:d9:84:d7:76:e4:6c:c1:5c:41:8e:
                    f3:60:19:35:a5:7c:e3:1f:19:eb:c3:1b:e1:22:72:
                    65:48:25:85:4f:8c:c6:11:5c:25:55:fe:da:e5:84:
                    a0:58:0a:a9:ca:14:21:13:cb:00:97:d7:e2:d0:e6:
                    e6:e0:9c:47:af:04:13:e2:09:6f:5e:81:59:fa:d7:
                    24:1e:d5:22:69:0a:f9:0f:64:bb:dc:cd:59:5c:25:
                    89:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F6:FB:7F:FF:92:68:EF:26:35:51:C5:68:0C:79:04:ED:9E:FC:D0
            X509v3 Authority Key Identifier:
                keyid:F3:F0:B9:AD:D0:8C:4E:35:42:27:AF:7D:76:1D:7D:BE:22:62:AC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/F3F0B9ADD08C4E354227AF7D761D7DBE2262AC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3F0B9ADD08C4E354227AF7D761D7DBE2262AC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/323830343a376435343a3a2f33322d3634203d3e20323731353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d54::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:84:bd:4d:a3:ed:dc:59:b6:5d:d1:4a:97:f9:78:3f:be:ed:
         d6:f5:8b:0a:04:70:c2:57:30:71:a1:fa:c2:8a:4e:1b:f1:2f:
         89:2c:e7:fc:36:8f:54:12:89:ea:41:fb:a7:b4:2c:e5:5e:36:
         73:54:8c:4f:02:06:39:f5:6d:7d:f8:11:13:ed:f6:e5:b2:43:
         48:00:7c:e9:c3:0f:c7:03:4f:52:51:60:1c:58:bb:f4:1d:fe:
         23:49:97:97:b1:d7:dd:0d:91:b2:a9:aa:80:31:6b:87:0d:ca:
         3f:88:bf:e3:1d:8a:1f:5a:be:9f:97:ec:8d:56:72:c1:bf:12:
         20:82:bf:e6:c7:bc:39:0e:57:40:56:86:b4:8d:2d:ff:a7:65:
         bb:1c:c9:ea:b5:bc:45:7d:de:5c:03:00:1f:dd:39:d2:1d:8f:
         9e:86:11:5e:a2:8e:90:c8:cd:e4:a1:0c:e2:8d:c1:20:d5:f0:
         38:d6:a6:6f:f2:47:fc:87:14:60:df:ea:b5:87:a9:3a:d3:ab:
         e4:de:9b:b1:0e:f0:9d:54:45:96:4e:fa:cb:64:f1:f2:f4:bd:
         d9:89:d3:8e:e8:ae:23:a0:79:9b:7b:97:94:4d:6c:65:9a:83:
         0c:5f:99:60:5d:71:b4:5e:67:31:1c:92:33:ff:4d:3f:01:38:
         33:a3:89:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:21:33 2026 by rpki-client