Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAV4nw5eQkWexnCGhy8RygMTu4RJehSbPqdbhDhQPJyi/0/323830343a356363383a3a2f33322d313238203d3e20323638393330.roa
File:                     323830343a356363383a3a2f33322d313238203d3e20323638393330.roa (raw, json)
Hash identifier:          Ajn7Sk84RvhTmOXEzCcn7IkTfjc9VPcYY603Vd7Zwsg=
Subject key identifier:   8D:25:76:6A:A4:B6:60:0E:50:18:FA:05:1F:C6:0C:54:63:E1:83:EC
Certificate issuer:       /CN=424B270A59BC61AADE7E7688F3F688A9428D166C
Certificate serial:       1D3169BA27F863F50410071256CFA35A2D38DBDE
Authority key identifier: 42:4B:27:0A:59:BC:61:AA:DE:7E:76:88:F3:F6:88:A9:42:8D:16:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424B270A59BC61AADE7E7688F3F688A9428D166C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAV4nw5eQkWexnCGhy8RygMTu4RJehSbPqdbhDhQPJyi/0/323830343a356363383a3a2f33322d313238203d3e20323638393330.roa
Signing time:             Thu 19 Mar 2026 18:25:08 +0000
ROA not before:           Thu 19 Mar 2026 18:20:08 +0000
ROA not after:            Thu 18 Mar 2027 18:25:08 +0000
asID:                     268930
IP address blocks:        2804:5cc8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DAV4nw5eQkWexnCGhy8RygMTu4RJehSbPqdbhDhQPJyi/0/424B270A59BC61AADE7E7688F3F688A9428D166C.crl
                          rsync://rpki-repo.registro.br/repo/DAV4nw5eQkWexnCGhy8RygMTu4RJehSbPqdbhDhQPJyi/0/424B270A59BC61AADE7E7688F3F688A9428D166C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424B270A59BC61AADE7E7688F3F688A9428D166C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 14:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:31:69:ba:27:f8:63:f5:04:10:07:12:56:cf:a3:5a:2d:38:db:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=424B270A59BC61AADE7E7688F3F688A9428D166C
        Validity
            Not Before: Mar 19 18:20:08 2026 GMT
            Not After : Mar 18 18:25:08 2027 GMT
        Subject: CN=8D25766AA4B6600E5018FA051FC60C5463E183EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ea:1d:d4:60:b5:ce:9e:23:66:a7:ee:2f:95:
                    1b:4b:bf:11:e9:10:ae:be:ff:01:6a:24:e0:04:d3:
                    f6:54:ab:1b:99:c6:32:e8:d5:13:38:c9:1a:8e:78:
                    06:56:11:ac:85:a1:d5:9e:89:dc:dd:28:e8:d2:7b:
                    82:32:6a:ab:5d:9f:4e:a4:e2:6e:b9:f6:92:6a:65:
                    2b:bd:d4:46:d4:58:2c:0f:74:de:b5:bc:80:52:e6:
                    ee:95:d9:5a:5d:4d:e2:4e:3f:04:5d:be:ba:a1:c3:
                    a8:aa:d2:4d:aa:37:41:a3:33:d9:fe:14:03:1d:f6:
                    8c:77:dd:fc:41:98:14:4f:11:c0:d7:99:d2:f1:bb:
                    9a:db:df:5f:8b:8b:14:c0:fe:8b:44:c2:96:47:e7:
                    f4:a3:11:86:91:b9:1a:1e:92:78:45:cc:5b:03:d4:
                    0f:97:2e:92:f1:a2:53:9d:74:1a:48:7d:87:be:48:
                    19:19:6f:aa:f2:12:d7:ed:d9:e2:25:e6:c0:9b:01:
                    f2:cb:ae:34:a9:54:68:10:f3:41:80:4f:6d:5a:15:
                    9a:4d:b3:83:63:86:45:52:81:9c:32:1f:e4:cf:61:
                    0e:a4:ab:f6:2b:30:fa:e4:29:b2:93:83:5c:42:84:
                    7f:34:a0:5a:b2:86:24:da:17:8b:9d:bb:68:e3:88:
                    04:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:25:76:6A:A4:B6:60:0E:50:18:FA:05:1F:C6:0C:54:63:E1:83:EC
            X509v3 Authority Key Identifier:
                keyid:42:4B:27:0A:59:BC:61:AA:DE:7E:76:88:F3:F6:88:A9:42:8D:16:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAV4nw5eQkWexnCGhy8RygMTu4RJehSbPqdbhDhQPJyi/0/424B270A59BC61AADE7E7688F3F688A9428D166C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424B270A59BC61AADE7E7688F3F688A9428D166C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAV4nw5eQkWexnCGhy8RygMTu4RJehSbPqdbhDhQPJyi/0/323830343a356363383a3a2f33322d313238203d3e20323638393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5cc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:3e:c2:90:1e:59:bf:a2:3a:17:d4:95:ab:65:38:e6:a1:98:
         7c:cb:30:53:4b:79:f8:05:de:f3:20:82:17:77:97:9f:14:05:
         3b:34:63:74:06:f5:6c:d6:a7:e8:c7:c7:a5:d4:8f:b5:e6:0b:
         63:61:a9:cd:73:64:3b:98:21:61:4b:3d:e5:9a:f3:88:cb:c3:
         c3:8f:81:47:6f:be:8d:66:8d:ae:96:24:01:9a:44:1c:7f:d0:
         70:c3:cb:c9:c1:5a:06:2c:c3:57:dd:86:9a:bd:09:97:d5:b6:
         a1:de:f2:fa:a9:1b:73:1f:1c:5b:81:5d:3d:93:fe:9b:cb:60:
         33:03:e2:2e:73:bd:bd:ef:ed:2c:03:1f:c9:c6:aa:bc:63:e2:
         f3:21:93:48:58:7b:d3:cb:c8:48:d1:6f:25:eb:c3:33:f1:0b:
         ae:00:40:27:5f:da:fd:bd:d5:23:23:f6:b7:cf:9b:f3:21:c8:
         fc:1c:26:4c:0d:dd:a2:3b:71:65:d9:f6:ba:25:12:85:f9:b1:
         d3:6b:a9:a5:b4:7a:fe:73:26:09:f3:bd:96:a1:81:6c:29:bf:
         f1:20:0a:86:f1:20:ee:d3:71:ef:29:66:eb:d1:19:19:fa:d6:
         b6:98:ae:5b:3a:7e:ef:02:5b:a6:e4:a7:8d:95:23:7e:ae:36:
         ad:56:a3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:18:41 2026 by rpki-client