Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/3/323830343a343535383a3a2f33322d313238203d3e20323636393230.roa
File:                     323830343a343535383a3a2f33322d313238203d3e20323636393230.roa (raw, json)
Hash identifier:          hutdj/bpTB4huOawLScIsT+Xrnd+R7qsDnKQ+yIlZCI=
Subject key identifier:   34:CE:B2:72:D7:C4:97:93:3D:CE:57:F7:6D:C4:9F:78:96:5D:F9:D8
Certificate issuer:       /CN=BF58315949907054B5E7AB00ED192423448BF8DF
Certificate serial:       470FED983A72C0532D8879C57E65EF719D61C4B9
Authority key identifier: BF:58:31:59:49:90:70:54:B5:E7:AB:00:ED:19:24:23:44:8B:F8:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF58315949907054B5E7AB00ED192423448BF8DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/3/323830343a343535383a3a2f33322d313238203d3e20323636393230.roa
Signing time:             Mon 02 Mar 2026 19:17:47 +0000
ROA not before:           Mon 02 Mar 2026 19:12:47 +0000
ROA not after:            Mon 01 Mar 2027 19:17:47 +0000
asID:                     266920
IP address blocks:        2804:4558::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/3/BF58315949907054B5E7AB00ED192423448BF8DF.crl
                          rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/3/BF58315949907054B5E7AB00ED192423448BF8DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF58315949907054B5E7AB00ED192423448BF8DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 05:45:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:0f:ed:98:3a:72:c0:53:2d:88:79:c5:7e:65:ef:71:9d:61:c4:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF58315949907054B5E7AB00ED192423448BF8DF
        Validity
            Not Before: Mar  2 19:12:47 2026 GMT
            Not After : Mar  1 19:17:47 2027 GMT
        Subject: CN=34CEB272D7C497933DCE57F76DC49F78965DF9D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2f:16:a3:62:36:d2:93:98:e9:49:c4:dd:33:
                    1f:9d:66:ff:d8:82:1a:1c:66:71:be:88:6f:b1:a4:
                    9e:f8:a2:bb:4c:f0:2e:15:44:c6:0e:fa:44:dc:96:
                    c3:2e:8b:32:a2:32:fa:5a:1b:fd:c0:70:15:76:11:
                    85:97:fa:19:a1:bc:12:92:7c:9b:3f:24:41:5c:fb:
                    90:96:79:bb:dc:84:eb:d7:ce:6a:12:2f:14:4e:7c:
                    9c:06:1b:7d:05:78:28:fa:c2:63:f0:42:2c:99:b3:
                    06:83:26:fe:67:6f:88:d6:69:5f:ef:eb:8e:78:73:
                    0a:f7:f7:c7:92:89:ba:cb:f6:8d:41:d3:7d:25:3a:
                    03:31:24:64:62:aa:f4:7c:5a:e0:51:15:c6:15:d7:
                    d3:bf:b6:91:1d:19:6e:f0:df:8f:5e:0d:48:b7:88:
                    42:73:c9:d4:83:1a:3a:c4:5e:bc:c8:22:b8:29:b9:
                    32:0e:db:16:ab:23:c7:d8:1e:88:68:9e:0d:e7:17:
                    5c:26:aa:52:d4:2a:50:84:ff:7a:ef:97:ed:be:e5:
                    2f:96:eb:ff:b5:a1:a3:f3:d6:66:57:e0:d5:13:64:
                    02:74:60:fb:3d:5e:7a:54:b4:4c:db:f5:a2:24:fb:
                    27:0e:c0:31:67:e9:9b:15:da:25:39:74:d5:b3:f6:
                    59:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:CE:B2:72:D7:C4:97:93:3D:CE:57:F7:6D:C4:9F:78:96:5D:F9:D8
            X509v3 Authority Key Identifier:
                keyid:BF:58:31:59:49:90:70:54:B5:E7:AB:00:ED:19:24:23:44:8B:F8:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/3/BF58315949907054B5E7AB00ED192423448BF8DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF58315949907054B5E7AB00ED192423448BF8DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/3/323830343a343535383a3a2f33322d313238203d3e20323636393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4558::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:55:e6:ad:46:1a:ca:78:5b:03:d7:ec:87:02:b0:17:49:c2:
         65:0f:c6:61:e5:13:5c:2a:ab:78:d7:71:53:8f:f3:93:1d:be:
         90:52:c3:3a:80:a1:62:01:96:99:02:b2:2a:29:c9:14:e4:32:
         61:22:27:88:84:6e:15:94:48:47:07:4b:34:96:66:9c:90:4b:
         e3:4a:96:88:7a:ff:86:c1:a4:c9:03:ae:c0:7f:ca:1e:e3:74:
         32:c5:6a:31:ee:1c:a1:08:6a:b3:d9:a1:2e:31:7c:09:c5:8b:
         fd:33:b7:0f:32:ab:b5:cd:c7:e2:eb:63:0d:fc:5a:fb:e4:c5:
         6a:0e:74:41:ea:9c:bf:b7:17:8c:87:8a:05:8d:af:ee:64:1e:
         1b:9c:75:90:a6:b4:4d:44:a4:28:47:22:43:88:5f:d6:f7:b3:
         59:6a:d1:d2:bd:36:97:9b:08:68:f4:9b:87:41:95:f6:88:5b:
         d1:26:2d:41:89:f5:96:4f:c2:b3:56:8f:cd:d7:7a:34:33:51:
         f6:24:64:05:72:08:8a:c0:0b:4d:ed:b9:fd:3d:84:6d:22:4f:
         b6:81:75:30:65:e7:f7:e8:30:8d:6c:96:14:9e:4a:98:f4:e8:
         b9:15:d6:0e:b8:31:f8:e0:87:73:81:eb:3a:7d:9e:cb:f0:9d:
         f8:2d:0b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:37:48 2026 by rpki-client