Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/323830343a316464343a3a2f33322d3334203d3e20323634333937.roa
File:                     323830343a316464343a3a2f33322d3334203d3e20323634333937.roa (raw, json)
Hash identifier:          z1nTBUM98YZ4WLL05oD8FGds6VFL5/3ENmkFPQyNef8=
Subject key identifier:   CD:83:F8:C3:90:38:51:AA:C3:18:3F:95:46:A7:8C:70:E1:DF:A5:53
Certificate issuer:       /CN=BEE85EDFC75269C914F73EF5DF18F12F6B7EED76
Certificate serial:       571D0542E1B07E3215E7F519FE9A7867E4A333A7
Authority key identifier: BE:E8:5E:DF:C7:52:69:C9:14:F7:3E:F5:DF:18:F1:2F:6B:7E:ED:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEE85EDFC75269C914F73EF5DF18F12F6B7EED76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/323830343a316464343a3a2f33322d3334203d3e20323634333937.roa
Signing time:             Tue 17 Mar 2026 14:21:25 +0000
ROA not before:           Tue 17 Mar 2026 14:16:25 +0000
ROA not after:            Tue 16 Mar 2027 14:21:25 +0000
asID:                     264397
IP address blocks:        2804:1dd4::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/BEE85EDFC75269C914F73EF5DF18F12F6B7EED76.crl
                          rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/BEE85EDFC75269C914F73EF5DF18F12F6B7EED76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEE85EDFC75269C914F73EF5DF18F12F6B7EED76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:25:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:1d:05:42:e1:b0:7e:32:15:e7:f5:19:fe:9a:78:67:e4:a3:33:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEE85EDFC75269C914F73EF5DF18F12F6B7EED76
        Validity
            Not Before: Mar 17 14:16:25 2026 GMT
            Not After : Mar 16 14:21:25 2027 GMT
        Subject: CN=CD83F8C3903851AAC3183F9546A78C70E1DFA553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:61:e5:5a:b5:47:61:16:93:5e:1d:8c:58:8a:
                    90:70:43:2d:f6:f8:f7:86:0c:eb:89:ce:30:42:06:
                    de:b4:cd:47:e2:a2:22:5d:e3:ce:17:59:55:5a:ba:
                    f1:bb:22:26:aa:78:81:26:15:b5:13:8a:a6:71:64:
                    cc:e1:6c:40:8c:c2:f3:f9:2d:d1:c3:46:34:99:04:
                    d9:bc:63:d8:2f:ff:7c:84:3d:6f:29:c1:98:cc:7a:
                    ba:b1:ca:39:d7:c6:a4:50:28:47:e3:54:8d:da:61:
                    9a:f3:bb:7a:1c:59:f7:6a:76:70:3a:39:f7:b2:1b:
                    7b:1a:3a:7a:b9:0d:56:70:1e:b9:9f:0b:8d:3e:11:
                    db:d3:e7:84:9d:74:15:7c:21:55:71:9b:3a:7f:67:
                    66:6f:0e:87:b7:d4:8a:dc:ca:dc:d2:a4:9a:d4:49:
                    57:5d:d0:59:41:75:67:99:7a:23:ec:d9:5a:6b:a4:
                    3c:01:ad:6c:e8:48:57:86:8a:86:d6:54:c3:c8:b2:
                    61:f3:60:7b:bf:0a:a8:3e:8b:be:aa:e6:9a:a9:7f:
                    44:4f:93:a8:6d:37:32:54:97:69:48:ba:d6:82:14:
                    5a:5e:fb:f8:dd:45:a6:f1:44:eb:d6:16:de:0c:6c:
                    b8:7b:93:49:1c:25:31:d1:ab:55:e5:18:23:b7:d1:
                    c2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:83:F8:C3:90:38:51:AA:C3:18:3F:95:46:A7:8C:70:E1:DF:A5:53
            X509v3 Authority Key Identifier:
                keyid:BE:E8:5E:DF:C7:52:69:C9:14:F7:3E:F5:DF:18:F1:2F:6B:7E:ED:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/BEE85EDFC75269C914F73EF5DF18F12F6B7EED76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEE85EDFC75269C914F73EF5DF18F12F6B7EED76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/323830343a316464343a3a2f33322d3334203d3e20323634333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dd4::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:6e:4a:ca:3d:86:1e:13:77:d4:99:f5:a7:d4:24:38:e4:86:
         5b:64:65:7f:62:58:cc:51:d4:3b:ef:4d:f9:59:4a:77:46:2d:
         26:f7:30:03:8c:4f:2a:cc:3f:ec:6d:d3:2e:ee:6f:12:b3:37:
         fc:d6:57:99:d0:b2:7d:d6:e3:94:24:cc:fc:3a:58:f9:11:66:
         5a:69:c6:a4:51:0a:bf:2a:a1:d7:0c:cf:dc:60:95:b9:c0:5b:
         9c:1d:02:12:e0:8a:17:77:85:6b:b0:ac:f2:15:58:b5:ae:b7:
         b1:22:82:e1:0d:2d:25:31:21:41:12:47:c2:5d:69:78:ef:94:
         68:f0:1e:71:72:d7:07:cc:a0:fb:1f:9b:e9:dc:a9:53:fc:58:
         9a:6e:ac:e1:2c:1e:84:81:91:40:de:5b:c2:45:0e:13:59:8e:
         0b:fe:23:b0:4a:20:f5:4c:90:3c:63:10:af:e4:90:74:c8:94:
         25:77:f8:39:a5:d6:19:c1:d0:4f:4a:5c:0a:5c:a1:b3:7f:87:
         c9:a1:2c:4e:54:46:32:da:69:24:b8:bd:f7:9f:d4:7b:4e:a3:
         6e:fd:17:0e:1b:dc:89:62:8d:8e:e9:3d:ec:07:62:24:69:dd:
         54:dd:d6:db:d4:74:46:df:52:9a:80:9f:54:84:36:71:6a:82:
         6a:35:b5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:12:43 2026 by rpki-client