Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/323830343a353463383a3a2f33322d3438203d3e20323133343936.roa
File:                     323830343a353463383a3a2f33322d3438203d3e20323133343936.roa (raw, json)
Hash identifier:          Y2OC9JXEDt2BErpNSSdF0EqJ8OpsWaCymwx4RjkiNeY=
Subject key identifier:   FA:38:6F:D9:AB:9C:9F:DA:E9:2B:7C:3B:78:6D:3D:78:41:8F:44:C4
Certificate issuer:       /CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A
Certificate serial:       41CB97FF8AA85D56F3BAF7FEB753A703C7F50C0B
Authority key identifier: AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/323830343a353463383a3a2f33322d3438203d3e20323133343936.roa
Signing time:             Mon 09 Mar 2026 17:51:36 +0000
ROA not before:           Mon 09 Mar 2026 17:46:36 +0000
ROA not after:            Mon 08 Mar 2027 17:51:36 +0000
asID:                     213496
IP address blocks:        2804:54c8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl
                          rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 12:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:cb:97:ff:8a:a8:5d:56:f3:ba:f7:fe:b7:53:a7:03:c7:f5:0c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A
        Validity
            Not Before: Mar  9 17:46:36 2026 GMT
            Not After : Mar  8 17:51:36 2027 GMT
        Subject: CN=FA386FD9AB9C9FDAE92B7C3B786D3D78418F44C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:00:98:0e:3b:09:cb:bd:8e:15:b2:e3:68:ca:
                    8c:a7:62:6a:86:78:4d:02:5e:b6:92:de:51:b9:b3:
                    c3:e1:15:86:4c:94:33:47:47:5f:79:9e:b7:b0:fa:
                    43:3c:e6:e4:e0:a9:b5:38:00:7c:d5:cc:d6:62:e4:
                    f0:63:5b:70:61:91:a0:1e:85:61:b9:b0:ed:48:a2:
                    5b:f2:72:15:77:90:4c:3a:44:4b:28:ef:04:a4:16:
                    54:71:ad:d7:c9:f5:3e:fd:92:4c:2e:3d:8a:d9:af:
                    19:89:38:28:b6:a9:23:3b:68:8e:c4:12:02:13:1d:
                    2f:09:fb:b9:4a:35:fe:45:b9:4a:19:cb:d8:32:95:
                    0b:cb:93:92:5e:12:3f:9c:b0:00:73:03:f5:ca:d8:
                    c8:8f:c8:73:17:ea:ef:42:6f:93:18:c8:4e:6b:21:
                    37:89:95:fb:7a:2b:02:26:e2:6b:73:6f:ad:97:6b:
                    6a:ed:ea:4e:ff:37:fc:71:49:bb:4f:a2:46:0a:c1:
                    42:33:0f:c0:34:0a:4b:85:c8:c2:6c:d4:7f:91:69:
                    81:c0:20:db:c0:0b:36:99:a2:c1:03:19:85:28:b2:
                    c0:3c:0d:cf:70:40:c8:19:3a:c5:55:2c:f3:5d:7e:
                    4a:55:22:5d:e0:14:48:fa:2d:67:3b:82:ac:38:2e:
                    03:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:38:6F:D9:AB:9C:9F:DA:E9:2B:7C:3B:78:6D:3D:78:41:8F:44:C4
            X509v3 Authority Key Identifier:
                keyid:AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/323830343a353463383a3a2f33322d3438203d3e20323133343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:0e:1c:62:c1:a4:c5:64:76:9f:4c:e3:ff:91:0a:c3:cd:a3:
         82:8f:83:ef:fe:53:48:78:2a:82:76:83:d4:48:97:e7:74:17:
         77:6a:4d:91:88:aa:38:ff:eb:28:08:85:41:a6:7d:97:2f:c0:
         47:9a:34:16:e9:af:00:7c:89:32:b9:a3:3e:64:84:ec:1e:90:
         84:5e:73:ee:e7:af:3e:e9:96:76:db:6a:2c:5e:a2:5a:47:72:
         7f:15:3a:a5:f2:e2:02:53:50:d9:df:d1:7d:af:af:43:21:67:
         35:88:cc:76:6c:be:2f:c8:4d:ea:61:3c:9c:82:24:b1:1c:61:
         e5:cd:a4:24:df:6d:38:ed:e6:f1:e9:20:34:a4:07:20:ca:4f:
         09:8d:74:1a:62:54:51:de:fd:18:f8:c4:5b:5b:9e:c9:b8:33:
         83:d5:f6:9b:f0:20:c3:3f:44:4d:f1:23:71:46:82:b5:52:a5:
         3c:5d:58:9d:fe:1e:00:04:eb:7b:f2:bb:af:5e:7a:4f:ba:c0:
         a0:b7:62:ae:9e:b2:3e:c3:6d:e3:c0:99:ec:c2:ea:22:92:2d:
         a6:02:07:38:0f:91:be:57:20:14:1c:19:94:a8:4f:c0:a1:e4:
         9d:99:f1:52:bf:a1:55:07:97:c2:37:1c:84:81:e5:04:bb:60:
         12:7d:71:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:59:26 2026 by rpki-client