Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwzgPGVFQbXf2FPFJ7mguvc8NLR7zAYUymzGR1yX22yu/0/323830343a376665633a3a2f33322d3438203d3e20323731373138.roa
File:                     323830343a376665633a3a2f33322d3438203d3e20323731373138.roa (raw, json)
Hash identifier:          CPUHSL0EuapC4RXXpBtzmNlSvSb4nhGOhEgi2r8wjXE=
Subject key identifier:   64:A1:D6:EC:B2:63:68:3E:B6:AF:79:9D:14:B8:E1:AE:20:4E:C6:1D
Certificate issuer:       /CN=2762C0584A0490647322BB1ECE529FC78BA7BAA8
Certificate serial:       22369AAA9E527191D1663191A99EC5EB3BC3F99E
Authority key identifier: 27:62:C0:58:4A:04:90:64:73:22:BB:1E:CE:52:9F:C7:8B:A7:BA:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2762C0584A0490647322BB1ECE529FC78BA7BAA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwzgPGVFQbXf2FPFJ7mguvc8NLR7zAYUymzGR1yX22yu/0/323830343a376665633a3a2f33322d3438203d3e20323731373138.roa
Signing time:             Mon 16 Mar 2026 13:43:22 +0000
ROA not before:           Mon 16 Mar 2026 13:38:22 +0000
ROA not after:            Mon 15 Mar 2027 13:43:22 +0000
asID:                     271718
IP address blocks:        2804:7fec::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwzgPGVFQbXf2FPFJ7mguvc8NLR7zAYUymzGR1yX22yu/0/2762C0584A0490647322BB1ECE529FC78BA7BAA8.crl
                          rsync://rpki-repo.registro.br/repo/DwzgPGVFQbXf2FPFJ7mguvc8NLR7zAYUymzGR1yX22yu/0/2762C0584A0490647322BB1ECE529FC78BA7BAA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2762C0584A0490647322BB1ECE529FC78BA7BAA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 08:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:36:9a:aa:9e:52:71:91:d1:66:31:91:a9:9e:c5:eb:3b:c3:f9:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2762C0584A0490647322BB1ECE529FC78BA7BAA8
        Validity
            Not Before: Mar 16 13:38:22 2026 GMT
            Not After : Mar 15 13:43:22 2027 GMT
        Subject: CN=64A1D6ECB263683EB6AF799D14B8E1AE204EC61D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9f:04:b1:92:40:59:36:b6:bb:30:4e:72:37:
                    4e:16:fa:bb:85:b5:22:27:f9:10:3c:77:6a:37:b4:
                    5e:6d:a8:f8:e3:bb:8c:6f:41:f0:24:9a:06:d3:d6:
                    df:60:2d:df:53:0e:5e:15:15:5a:c3:cc:6a:b5:0d:
                    c3:97:b0:ef:e7:04:dd:b1:a6:99:eb:f8:b9:0d:5d:
                    e2:a3:16:97:06:29:5d:f1:75:ea:96:02:d5:c9:49:
                    0c:0a:9a:86:e4:24:fa:3d:92:18:c6:8a:32:d7:95:
                    91:3c:4c:c8:c5:3e:9b:a9:7c:88:22:f4:56:79:aa:
                    6c:88:7b:aa:1b:e5:81:b5:b2:dd:4a:5e:ff:f0:eb:
                    7a:fc:91:53:fd:24:03:fe:c8:86:a1:69:d0:7b:34:
                    0d:f8:49:65:db:03:bf:60:5d:35:ea:e8:b2:78:c6:
                    4e:e3:af:c9:fe:94:be:d7:12:85:4f:1a:3b:20:11:
                    11:df:57:00:50:40:e0:3a:5a:db:67:e6:d3:c8:4d:
                    0b:94:67:75:47:5c:e8:01:79:23:95:a2:bd:cb:9d:
                    aa:d0:17:9e:23:af:5f:10:b8:a7:0a:38:b0:15:93:
                    02:f6:d5:9e:3f:79:18:b7:09:82:a3:db:03:11:1c:
                    ed:96:c7:57:e0:ee:d7:dd:2c:cd:92:05:6d:2c:77:
                    aa:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A1:D6:EC:B2:63:68:3E:B6:AF:79:9D:14:B8:E1:AE:20:4E:C6:1D
            X509v3 Authority Key Identifier:
                keyid:27:62:C0:58:4A:04:90:64:73:22:BB:1E:CE:52:9F:C7:8B:A7:BA:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwzgPGVFQbXf2FPFJ7mguvc8NLR7zAYUymzGR1yX22yu/0/2762C0584A0490647322BB1ECE529FC78BA7BAA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2762C0584A0490647322BB1ECE529FC78BA7BAA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwzgPGVFQbXf2FPFJ7mguvc8NLR7zAYUymzGR1yX22yu/0/323830343a376665633a3a2f33322d3438203d3e20323731373138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7fec::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:d6:14:48:b0:c5:88:a0:a6:3b:f6:80:9a:cc:b2:37:f2:15:
         20:71:02:e0:a8:20:e0:a5:13:a9:ec:e0:44:7c:eb:0d:6e:9f:
         73:5a:e7:83:8a:83:26:f0:a8:fe:b7:5a:67:d3:ff:de:76:a8:
         08:38:39:0f:72:2d:ba:95:30:6e:1c:c9:ce:2c:82:58:7d:9f:
         77:54:eb:45:ac:bd:ce:49:9d:1a:57:af:1a:15:19:89:ef:82:
         d8:9e:05:8e:a6:a4:79:e5:6d:5c:44:ac:41:67:44:4a:f4:2b:
         fd:6b:27:28:98:a2:f9:9b:ed:2b:72:9f:d4:bc:9b:e1:a1:d7:
         71:01:8d:62:81:c5:27:aa:a2:68:ca:fb:70:25:be:d2:6c:70:
         76:95:8b:7a:91:46:fa:b4:55:b1:04:e0:9e:e7:3d:c9:12:07:
         a2:03:cf:47:d9:59:93:8d:ea:0c:3c:d1:d1:e1:85:80:39:c4:
         4d:a2:a6:f4:95:8f:d4:ab:92:58:b5:5b:ed:f1:11:6d:b2:3e:
         6d:eb:a5:8b:aa:83:b3:e0:a1:ff:26:85:9c:d2:f8:ec:d2:9e:
         66:88:71:49:d1:4c:f5:d0:9c:c6:fe:de:7c:a8:fd:73:0f:78:
         a6:fb:d0:ae:35:4c:c2:40:ba:52:f4:c5:52:a6:2b:92:d1:4c:
         d8:ad:67:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:21:09 2026 by rpki-client