Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/323830343a313566303a3a2f33332d313238203d3e20323633343139.roa
File:                     323830343a313566303a3a2f33332d313238203d3e20323633343139.roa (raw, json)
Hash identifier:          HAc7CUZYbYz5WlR3Al4rvos5e+FtCTOW+gBC6TwwLGM=
Subject key identifier:   ED:06:6B:A2:22:2F:34:D0:42:11:59:7D:F5:C8:32:17:1F:CA:46:4C
Certificate issuer:       /CN=8898A858F32A18B4216D9DC482B230666EAD0A61
Certificate serial:       12683101C5DDEC47A2501F8371459FFB64389660
Authority key identifier: 88:98:A8:58:F3:2A:18:B4:21:6D:9D:C4:82:B2:30:66:6E:AD:0A:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8898A858F32A18B4216D9DC482B230666EAD0A61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/323830343a313566303a3a2f33332d313238203d3e20323633343139.roa
Signing time:             Thu 19 Mar 2026 17:54:21 +0000
ROA not before:           Thu 19 Mar 2026 17:49:21 +0000
ROA not after:            Thu 18 Mar 2027 17:54:21 +0000
asID:                     263419
IP address blocks:        2804:15f0::/33 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/8898A858F32A18B4216D9DC482B230666EAD0A61.crl
                          rsync://rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/8898A858F32A18B4216D9DC482B230666EAD0A61.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8898A858F32A18B4216D9DC482B230666EAD0A61.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 19:12:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:68:31:01:c5:dd:ec:47:a2:50:1f:83:71:45:9f:fb:64:38:96:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8898A858F32A18B4216D9DC482B230666EAD0A61
        Validity
            Not Before: Mar 19 17:49:21 2026 GMT
            Not After : Mar 18 17:54:21 2027 GMT
        Subject: CN=ED066BA2222F34D04211597DF5C832171FCA464C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4f:0c:16:01:62:0f:e5:d1:40:a0:fa:05:30:
                    08:44:3f:34:5e:71:a1:11:ab:88:bc:60:f3:ef:1b:
                    db:44:8c:c2:f6:0e:cf:ad:81:e9:84:42:fe:f4:08:
                    4d:5e:cf:80:64:c6:46:cf:0a:51:5b:f3:27:7c:05:
                    70:7b:dc:fe:b3:38:c5:48:89:ca:a7:14:4b:13:aa:
                    e2:06:62:ba:30:05:28:14:df:76:a2:23:12:5c:44:
                    f0:2a:ea:3c:90:d5:75:03:90:ef:ab:04:14:3f:5b:
                    f8:ca:cc:37:7b:d0:86:6f:b6:68:0f:77:c2:c3:1f:
                    e4:54:6f:cd:09:33:4a:16:0a:4f:5a:b0:72:57:8e:
                    46:29:c9:b7:33:90:6b:56:bf:79:f6:39:ef:24:d5:
                    bb:41:cd:ee:c8:5b:5a:96:59:73:bc:c7:76:9e:28:
                    e4:1e:75:de:63:58:fe:57:ed:09:fc:cc:e1:19:59:
                    0b:78:8d:8e:ee:c3:91:f9:d1:e3:bb:65:f0:db:ef:
                    9a:98:10:17:9c:6a:fc:92:67:90:dc:49:4f:3a:8d:
                    ab:9e:a7:8e:fd:b7:cc:d2:9b:66:f6:e8:39:96:fb:
                    d4:0b:15:aa:b9:4a:01:f0:81:25:48:41:f9:39:9b:
                    ea:a3:c5:bd:fa:8b:1f:71:41:21:16:34:f1:a9:b8:
                    55:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:06:6B:A2:22:2F:34:D0:42:11:59:7D:F5:C8:32:17:1F:CA:46:4C
            X509v3 Authority Key Identifier:
                keyid:88:98:A8:58:F3:2A:18:B4:21:6D:9D:C4:82:B2:30:66:6E:AD:0A:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/8898A858F32A18B4216D9DC482B230666EAD0A61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8898A858F32A18B4216D9DC482B230666EAD0A61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/323830343a313566303a3a2f33332d313238203d3e20323633343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:15f0::/33

    Signature Algorithm: sha256WithRSAEncryption
         4d:f7:f6:29:7c:06:8e:a2:38:a9:16:de:b7:d6:15:76:14:d8:
         2b:1f:a1:a1:d1:95:eb:f9:5d:cb:ab:57:2f:3c:bc:59:fd:87:
         11:d8:4e:22:83:d6:39:0d:d0:a1:86:88:5e:5f:b5:34:5a:28:
         03:2d:ee:30:06:04:e9:dc:4b:b3:b5:5f:33:83:b3:93:bd:b4:
         b5:e5:f3:27:13:31:99:1d:70:bd:a4:5d:9f:76:e4:84:78:3d:
         d3:41:4d:37:50:60:4a:a7:ce:2a:b3:53:97:1d:08:15:21:6d:
         52:42:2f:56:4e:9c:7b:01:2c:ef:19:26:03:ad:17:37:0b:43:
         c6:a6:ef:38:af:f4:95:00:bb:5b:03:17:be:e8:59:85:6e:e9:
         95:bb:37:a0:d9:f0:0b:fb:b6:50:68:06:7f:aa:45:47:0c:35:
         c7:e7:10:a8:cb:44:8b:76:38:db:b6:11:e2:65:b1:e5:52:5c:
         a2:f1:11:ed:50:ec:a4:e3:d2:f4:01:0b:71:27:26:ed:db:a4:
         69:f0:85:54:c5:3e:ec:60:64:dc:09:c0:5d:a9:76:11:5a:31:
         df:78:12:53:f8:0d:75:68:38:d2:ed:93:3e:ff:42:14:29:80:
         76:a0:8c:6e:01:e7:48:91:b4:1f:f4:f2:4f:94:02:ae:5b:c3:
         7a:fa:59:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:48:34 2026 by rpki-client