Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/323830343a3366343a3a2f33322d3438203d3e20323632343037.roa
File:                     323830343a3366343a3a2f33322d3438203d3e20323632343037.roa (raw, json)
Hash identifier:          fOireGe1x3pTHyRZFK6Rs72ZkX6J93LSyyxgZvhCZ+I=
Subject key identifier:   2C:64:2C:97:F0:FA:4D:EC:28:97:09:40:24:8B:12:10:7C:A8:09:6D
Certificate issuer:       /CN=6D31497D50F2E7BCADD55F9BBCC79046B5989FD9
Certificate serial:       53EEBEF06CEFCECDBFACB1D5EC48B74E51352133
Authority key identifier: 6D:31:49:7D:50:F2:E7:BC:AD:D5:5F:9B:BC:C7:90:46:B5:98:9F:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D31497D50F2E7BCADD55F9BBCC79046B5989FD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/323830343a3366343a3a2f33322d3438203d3e20323632343037.roa
Signing time:             Tue 24 Mar 2026 12:33:59 +0000
ROA not before:           Tue 24 Mar 2026 12:28:59 +0000
ROA not after:            Tue 23 Mar 2027 12:33:59 +0000
asID:                     262407
IP address blocks:        2804:3f4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/6D31497D50F2E7BCADD55F9BBCC79046B5989FD9.crl
                          rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/6D31497D50F2E7BCADD55F9BBCC79046B5989FD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D31497D50F2E7BCADD55F9BBCC79046B5989FD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 02:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ee:be:f0:6c:ef:ce:cd:bf:ac:b1:d5:ec:48:b7:4e:51:35:21:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D31497D50F2E7BCADD55F9BBCC79046B5989FD9
        Validity
            Not Before: Mar 24 12:28:59 2026 GMT
            Not After : Mar 23 12:33:59 2027 GMT
        Subject: CN=2C642C97F0FA4DEC28970940248B12107CA8096D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ce:05:e7:d7:6e:70:9d:3f:55:91:cd:39:2e:
                    9f:db:3f:36:3f:ac:17:f0:5d:57:1c:b7:7c:1a:f2:
                    c9:a6:61:e1:59:70:5a:7f:fb:55:d0:c9:c2:31:2a:
                    02:ac:6d:ed:d9:cc:01:c8:a7:10:b9:08:ad:be:c3:
                    69:54:de:6c:ea:97:81:34:3b:0e:bf:e4:4c:36:3e:
                    89:18:6a:12:a0:df:da:61:e0:00:6e:e3:27:1a:72:
                    2a:3b:53:84:05:8a:e0:6a:f5:f7:ee:64:24:44:19:
                    67:26:71:c8:a1:df:45:80:cc:b2:56:23:51:2b:30:
                    f7:12:31:30:65:c2:12:22:10:9a:c8:2e:3c:a2:4f:
                    49:44:67:45:23:50:7c:4a:65:02:a8:d4:03:97:e0:
                    d6:a3:b2:95:6a:ef:e7:22:3d:44:e8:5a:1e:b2:af:
                    dc:08:94:89:e4:03:9a:c7:4a:4e:2f:78:06:42:8e:
                    2a:96:4c:a6:bf:34:86:6d:c8:cd:41:e3:11:ad:57:
                    d6:13:ab:64:1e:e1:71:57:29:fd:d5:76:02:b0:d5:
                    26:35:d3:3a:fc:4f:aa:e4:f0:2a:e5:0e:f1:82:cd:
                    31:10:1c:91:fb:19:bb:e2:f6:04:02:0e:f1:29:6b:
                    2b:72:40:5e:36:0b:97:29:4c:f9:29:b4:b0:ba:37:
                    b7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:64:2C:97:F0:FA:4D:EC:28:97:09:40:24:8B:12:10:7C:A8:09:6D
            X509v3 Authority Key Identifier:
                keyid:6D:31:49:7D:50:F2:E7:BC:AD:D5:5F:9B:BC:C7:90:46:B5:98:9F:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/6D31497D50F2E7BCADD55F9BBCC79046B5989FD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D31497D50F2E7BCADD55F9BBCC79046B5989FD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/323830343a3366343a3a2f33322d3438203d3e20323632343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:00:dc:f0:b9:72:13:31:49:fe:a4:5a:ef:0e:99:75:b5:a1:
         d6:e7:e4:4b:48:d0:1a:75:7e:b5:d0:37:89:82:a9:89:de:c3:
         e4:b1:69:85:32:7f:ec:80:3d:d9:6e:75:18:5a:ad:43:2a:fd:
         63:b7:09:8a:2d:e0:b1:2b:ec:e3:b0:33:f8:a6:1c:34:b0:db:
         e0:4b:f1:7b:fe:37:f1:7b:df:75:e0:26:43:c7:87:81:65:a7:
         43:df:d2:ce:23:69:b1:12:3c:32:0a:36:af:fa:9c:fc:bd:2d:
         c7:b6:75:2d:2a:0e:96:fa:a2:f7:09:1e:5d:bf:02:0e:6b:64:
         57:de:a0:1b:77:a6:4b:2e:4b:99:fe:37:b9:85:65:e8:6d:fa:
         8f:4e:5f:b3:7e:66:3e:b6:41:d4:ef:d8:de:7a:09:93:5b:d5:
         27:2a:a2:51:0a:a2:42:67:45:24:f1:6b:39:bb:ff:f4:06:8f:
         67:f5:57:49:46:87:e1:26:24:a9:aa:8e:b3:dc:b5:20:47:b1:
         a7:cc:e5:4f:6d:25:a6:65:8f:7c:a3:ba:25:3a:e6:e7:19:d1:
         e6:5a:b8:da:7c:db:79:02:27:b9:61:49:66:96:dc:44:66:0c:
         c0:e0:d1:e8:d9:08:a1:2b:72:1c:51:7d:61:27:93:77:b9:c8:
         cc:7e:4d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:19:53 2026 by rpki-client