Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/323830343a373032633a3a2f33322d313238203d3e20323632393039.roa
File:                     323830343a373032633a3a2f33322d313238203d3e20323632393039.roa (raw, json)
Hash identifier:          N5ArmMzegNFOnbqFgoJ55Gdjfn9MGSuC7FUyD0l0ans=
Subject key identifier:   0A:99:D0:9B:66:CC:F3:C1:6F:97:92:F9:BC:20:B7:B8:5D:15:07:E1
Certificate issuer:       /CN=926E2DA5BBCE23FFDEBA140C29D70244E090ACAC
Certificate serial:       4B8B01F0B3CD73B332FF4AE68BB53F6AF05F0EED
Authority key identifier: 92:6E:2D:A5:BB:CE:23:FF:DE:BA:14:0C:29:D7:02:44:E0:90:AC:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/926E2DA5BBCE23FFDEBA140C29D70244E090ACAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/323830343a373032633a3a2f33322d313238203d3e20323632393039.roa
Signing time:             Tue 03 Mar 2026 18:14:40 +0000
ROA not before:           Tue 03 Mar 2026 18:09:40 +0000
ROA not after:            Tue 02 Mar 2027 18:14:40 +0000
asID:                     262909
IP address blocks:        2804:702c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/926E2DA5BBCE23FFDEBA140C29D70244E090ACAC.crl
                          rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/926E2DA5BBCE23FFDEBA140C29D70244E090ACAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/926E2DA5BBCE23FFDEBA140C29D70244E090ACAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 17:33:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:8b:01:f0:b3:cd:73:b3:32:ff:4a:e6:8b:b5:3f:6a:f0:5f:0e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926E2DA5BBCE23FFDEBA140C29D70244E090ACAC
        Validity
            Not Before: Mar  3 18:09:40 2026 GMT
            Not After : Mar  2 18:14:40 2027 GMT
        Subject: CN=0A99D09B66CCF3C16F9792F9BC20B7B85D1507E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:0e:2a:96:b5:72:d3:9a:c2:2a:c4:1b:da:de:
                    3e:cb:8b:87:a6:3a:d7:6e:46:9d:3b:af:06:6e:8e:
                    c8:4a:2c:02:bf:e5:ff:e9:36:be:e5:24:f6:0b:eb:
                    6e:00:6f:5e:3a:28:7b:59:0d:50:31:78:05:40:99:
                    cb:40:43:58:c9:13:96:0d:69:1f:e9:12:56:5e:1a:
                    82:b1:87:99:a6:af:2b:78:a5:17:ba:f7:75:09:3c:
                    44:44:f4:a5:79:3b:e2:95:7f:ef:9c:e5:8d:94:e8:
                    a7:10:a0:8a:d2:26:67:5d:58:f6:a9:2c:7c:4d:01:
                    9c:12:2f:c1:fd:70:2f:07:bf:10:f8:23:c6:cb:95:
                    2f:b2:98:29:b2:b4:a3:9b:22:63:b3:c5:73:c7:d1:
                    92:c5:30:77:60:d2:70:47:ef:17:13:2a:91:de:2c:
                    56:4e:27:f8:f1:e5:4e:3f:05:65:91:70:91:3f:7c:
                    02:bc:de:a6:c1:89:58:08:d5:61:df:ca:e4:b1:75:
                    3a:23:82:35:1e:8f:bb:29:8f:7a:56:89:e6:21:22:
                    b3:a7:94:eb:eb:40:c1:9b:d0:75:95:43:82:26:a9:
                    db:4a:4e:a3:9c:a6:25:7c:01:c9:29:0a:67:72:b0:
                    ee:e7:8e:e6:e8:8d:b3:cf:0d:86:4b:df:eb:7e:d3:
                    93:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:99:D0:9B:66:CC:F3:C1:6F:97:92:F9:BC:20:B7:B8:5D:15:07:E1
            X509v3 Authority Key Identifier:
                keyid:92:6E:2D:A5:BB:CE:23:FF:DE:BA:14:0C:29:D7:02:44:E0:90:AC:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/926E2DA5BBCE23FFDEBA140C29D70244E090ACAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/926E2DA5BBCE23FFDEBA140C29D70244E090ACAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/323830343a373032633a3a2f33322d313238203d3e20323632393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:702c::/32

    Signature Algorithm: sha256WithRSAEncryption
         dd:ab:5b:90:b4:0f:7f:85:76:11:11:08:88:88:e5:dd:50:2c:
         33:16:a0:c5:86:53:4c:d4:84:92:8d:75:49:d3:87:58:9e:07:
         4c:04:5c:ad:81:28:30:9d:2f:1d:cd:e9:5e:ad:81:e2:ca:55:
         ba:be:1c:89:98:46:53:80:c6:07:8c:fd:3c:b9:2c:1a:d9:89:
         a2:18:9d:39:cd:3c:4d:34:8d:14:b3:29:d2:38:19:6b:54:6d:
         bd:a0:7e:3c:30:80:82:52:43:3d:08:c1:81:38:b2:1a:75:cd:
         9f:b3:30:c8:60:f8:9f:e6:18:7e:c9:66:61:40:62:6e:8e:42:
         c3:02:51:65:d5:fd:8e:07:22:1d:bd:b0:63:29:03:05:1b:d2:
         ed:1e:52:2d:ba:4f:48:12:2b:cb:c9:4f:48:98:6c:f8:a3:fe:
         e1:b7:cd:46:e7:be:7d:55:c3:f5:fc:cd:17:bf:86:99:0a:b9:
         dc:14:b9:e9:2c:42:87:fc:15:5b:37:e2:9d:7f:54:d5:38:c4:
         c5:11:71:2a:c6:81:6b:85:0f:a3:fe:aa:73:18:30:be:8e:1f:
         a5:a7:6c:a0:79:a1:fb:be:5a:61:9d:e1:59:20:03:fa:3d:17:
         63:71:0c:11:d9:3f:76:ae:42:d9:b9:78:5d:70:76:fe:5d:f7:
         5b:2b:cb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:53:33 2026 by rpki-client