Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/323830343a343939383a3a2f33322d313238203d3e20323637313932.roa
File:                     323830343a343939383a3a2f33322d313238203d3e20323637313932.roa (raw, json)
Hash identifier:          V75F2f4vRQOBMofWpGvx6I6yQamZY5KGvwrJGSNYrFI=
Subject key identifier:   60:B2:2A:A6:5B:54:98:5C:1A:CF:96:9A:37:61:0B:C7:F3:D5:A3:11
Certificate issuer:       /CN=D9534541E35780249756A675D2E42F93AF812072
Certificate serial:       696B8C0EDAF511E97B8B1F1B6A33135D5A27D2BA
Authority key identifier: D9:53:45:41:E3:57:80:24:97:56:A6:75:D2:E4:2F:93:AF:81:20:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9534541E35780249756A675D2E42F93AF812072.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/323830343a343939383a3a2f33322d313238203d3e20323637313932.roa
Signing time:             Fri 20 Mar 2026 18:10:52 +0000
ROA not before:           Fri 20 Mar 2026 18:05:52 +0000
ROA not after:            Fri 19 Mar 2027 18:10:52 +0000
asID:                     267192
IP address blocks:        2804:4998::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/D9534541E35780249756A675D2E42F93AF812072.crl
                          rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/D9534541E35780249756A675D2E42F93AF812072.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9534541E35780249756A675D2E42F93AF812072.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 03:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:6b:8c:0e:da:f5:11:e9:7b:8b:1f:1b:6a:33:13:5d:5a:27:d2:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9534541E35780249756A675D2E42F93AF812072
        Validity
            Not Before: Mar 20 18:05:52 2026 GMT
            Not After : Mar 19 18:10:52 2027 GMT
        Subject: CN=60B22AA65B54985C1ACF969A37610BC7F3D5A311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f4:12:96:ce:ce:e7:bc:6f:2e:6c:68:ce:ef:
                    96:b7:f8:6c:39:cb:4b:2a:ac:ba:61:13:05:48:97:
                    d4:1f:9f:54:ad:4d:10:73:71:a0:0c:4a:f4:de:98:
                    0f:fa:22:73:a0:03:86:f1:e0:a9:d6:dd:3c:1a:11:
                    00:b7:e8:fe:cf:ef:ed:be:50:7f:d8:40:18:5a:d6:
                    fc:f3:57:2f:f9:f3:52:5e:0c:1f:85:25:7d:58:ef:
                    1c:ce:b0:ed:49:d9:96:ef:c6:d9:0f:d6:c0:92:df:
                    21:d5:86:83:49:d3:8e:af:f2:90:62:84:6e:52:61:
                    f0:f7:fa:9a:d1:11:dc:e8:c4:45:b4:48:76:96:9e:
                    61:04:ab:ad:78:b5:2b:9e:33:77:f5:19:45:83:c3:
                    7e:39:a4:b7:90:f8:e2:18:65:87:39:5d:9a:94:71:
                    6d:fc:73:35:f7:f2:52:33:41:59:85:03:02:b5:86:
                    1b:6c:68:d8:3a:d6:1c:18:0e:51:9c:25:fe:71:7a:
                    93:03:fa:71:cb:c6:b7:a4:9c:78:69:a3:4e:7f:db:
                    2d:b9:8a:33:13:ec:b0:97:b9:ca:35:3e:36:e2:9a:
                    71:a7:2a:65:c1:21:9e:5a:48:0f:1f:25:df:6b:ce:
                    cd:4b:47:3f:f1:21:c5:91:5a:c5:c8:52:6e:9e:47:
                    87:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B2:2A:A6:5B:54:98:5C:1A:CF:96:9A:37:61:0B:C7:F3:D5:A3:11
            X509v3 Authority Key Identifier:
                keyid:D9:53:45:41:E3:57:80:24:97:56:A6:75:D2:E4:2F:93:AF:81:20:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/D9534541E35780249756A675D2E42F93AF812072.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9534541E35780249756A675D2E42F93AF812072.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/323830343a343939383a3a2f33322d313238203d3e20323637313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4998::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:7b:c7:ae:24:2b:53:8a:e3:bb:10:2e:f3:ef:81:cc:a8:04:
         38:2e:6b:c9:00:73:00:b6:55:75:f5:19:f0:af:4c:76:ae:0e:
         e4:12:80:e5:a5:3b:f1:90:1c:e8:15:fe:d9:ec:6f:65:ad:dd:
         c2:e2:1f:32:c7:0e:7a:ca:44:13:19:f7:63:5d:6b:a8:94:81:
         00:63:e9:7d:1c:6f:d3:45:99:d7:07:10:15:dd:fb:8a:ad:36:
         4b:db:75:7d:17:cc:21:d0:23:3f:d1:29:a5:44:c4:3d:1d:9e:
         a8:bc:08:2e:c2:29:9c:cf:ae:b9:7d:78:58:6c:2e:92:0a:2a:
         37:9a:5a:82:cd:98:eb:dc:8c:98:28:35:ed:87:f3:7e:9b:c1:
         a4:1b:3b:05:1f:87:99:f9:af:20:ab:c9:7d:ea:c4:77:63:77:
         eb:ab:aa:18:25:98:5c:e3:05:a7:f9:8d:44:5b:b3:b5:19:76:
         a8:57:de:7a:94:12:00:16:9e:a8:34:0b:7d:04:3f:51:7e:7f:
         b9:18:17:13:0d:29:03:89:59:44:bd:49:1d:ca:73:d2:13:da:
         5b:fb:2a:e9:84:4f:79:92:40:6c:ba:54:a9:82:49:df:24:5f:
         0e:6e:98:64:ec:48:2e:24:c3:6a:67:ce:ca:4e:6d:2e:2b:ec:
         b7:7b:df:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:52:27 2026 by rpki-client