Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/323830343a343333383a3a2f33322d3332203d3e20323637353536.roa
File:                     323830343a343333383a3a2f33322d3332203d3e20323637353536.roa (raw, json)
Hash identifier:          Mf82mT9NNqvoJIjDwyzswBkeAGxtCppGdbLRsGosPSI=
Subject key identifier:   F6:DA:19:D4:5C:36:CF:43:BB:5F:A4:93:B7:41:1D:1D:AB:79:38:5A
Certificate issuer:       /CN=B8F6A8EA366AB7209A0CC568F5B9ABB9618A17BC
Certificate serial:       47E13EE3AA278DB3447CB5C78C6AC7C9E093B560
Authority key identifier: B8:F6:A8:EA:36:6A:B7:20:9A:0C:C5:68:F5:B9:AB:B9:61:8A:17:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8F6A8EA366AB7209A0CC568F5B9ABB9618A17BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/323830343a343333383a3a2f33322d3332203d3e20323637353536.roa
Signing time:             Wed 04 Mar 2026 17:20:45 +0000
ROA not before:           Wed 04 Mar 2026 17:15:45 +0000
ROA not after:            Wed 03 Mar 2027 17:20:45 +0000
asID:                     267556
IP address blocks:        2804:4338::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/B8F6A8EA366AB7209A0CC568F5B9ABB9618A17BC.crl
                          rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/B8F6A8EA366AB7209A0CC568F5B9ABB9618A17BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8F6A8EA366AB7209A0CC568F5B9ABB9618A17BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 08:55:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e1:3e:e3:aa:27:8d:b3:44:7c:b5:c7:8c:6a:c7:c9:e0:93:b5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F6A8EA366AB7209A0CC568F5B9ABB9618A17BC
        Validity
            Not Before: Mar  4 17:15:45 2026 GMT
            Not After : Mar  3 17:20:45 2027 GMT
        Subject: CN=F6DA19D45C36CF43BB5FA493B7411D1DAB79385A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4c:bc:a1:26:ef:b8:78:ba:75:86:07:a2:34:
                    4f:67:87:a6:12:34:f1:cc:15:5e:36:c4:42:09:49:
                    4b:ba:29:1f:32:22:54:1a:c1:7f:91:06:5d:cd:ea:
                    37:74:30:a4:03:cd:91:8e:ea:e3:e5:48:6f:24:41:
                    a1:52:14:61:a2:67:08:72:9f:42:42:60:3c:f3:10:
                    d5:11:68:3c:d7:16:5f:99:5b:ce:ac:0a:92:b4:8e:
                    60:a0:75:84:51:5a:0b:48:6a:75:19:87:ea:16:1f:
                    d7:90:1d:71:88:70:2d:8c:3d:69:0b:39:5a:2b:2c:
                    f6:92:3b:65:35:1e:80:94:47:9f:6e:ec:37:42:34:
                    f8:48:a4:54:82:0f:e4:f8:e7:21:1a:d0:24:29:62:
                    96:d3:13:c4:a1:53:27:58:51:19:b4:31:d9:64:cb:
                    78:67:91:35:16:38:25:76:84:76:3e:08:4e:50:83:
                    eb:f0:3b:54:59:76:c6:a0:31:bf:a5:6a:31:24:43:
                    fb:0b:72:33:bc:52:a7:57:2b:27:7f:6e:8c:87:90:
                    14:84:bf:7b:55:e9:1f:08:23:90:b2:76:69:aa:42:
                    dc:85:d1:92:e6:25:64:63:a1:60:67:ad:8f:f4:0c:
                    43:00:32:93:d7:11:48:fe:a5:81:87:eb:9d:ec:bc:
                    f5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DA:19:D4:5C:36:CF:43:BB:5F:A4:93:B7:41:1D:1D:AB:79:38:5A
            X509v3 Authority Key Identifier:
                keyid:B8:F6:A8:EA:36:6A:B7:20:9A:0C:C5:68:F5:B9:AB:B9:61:8A:17:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/B8F6A8EA366AB7209A0CC568F5B9ABB9618A17BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8F6A8EA366AB7209A0CC568F5B9ABB9618A17BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/323830343a343333383a3a2f33322d3332203d3e20323637353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4338::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:0e:17:3b:2a:d4:1d:63:50:40:75:a8:09:09:99:33:d5:fe:
         38:3f:0e:3b:78:da:ac:31:82:fd:c3:36:53:eb:c1:9d:a7:eb:
         18:e0:a6:01:c8:97:f2:ee:c8:84:81:41:bf:35:fd:9f:21:2c:
         38:e5:4a:9d:28:b7:d2:4a:86:d8:41:a0:e7:a9:b8:54:a7:9e:
         c6:d3:67:dd:4b:3c:1f:3a:cc:06:c2:64:49:2a:cb:6b:83:b2:
         13:6b:ed:16:c7:80:e8:4f:08:39:0a:73:a1:4f:f9:f5:15:7b:
         0d:1a:17:90:c9:8a:95:59:92:fe:96:ac:8d:29:4e:f5:79:d5:
         f3:5d:89:54:4e:47:e9:b2:74:7b:67:c9:d1:b0:80:e9:f9:dc:
         02:a5:a4:1c:f0:ab:ef:de:05:a6:33:8d:43:26:7d:89:68:fa:
         2e:f3:0a:7a:ea:18:82:b5:38:94:12:9e:e0:5d:22:7a:53:1c:
         1c:f4:36:7f:77:04:86:46:23:2e:8c:c1:c1:5d:7e:f1:c2:4d:
         95:61:41:18:41:a8:fb:56:5b:02:4b:ad:de:a0:57:bc:d4:ae:
         6b:73:f7:f2:d6:f6:a8:60:de:06:d2:a9:32:e4:49:ef:de:c8:
         b8:30:49:6c:99:1e:d9:f6:6a:44:da:c7:a6:1e:6c:e7:b9:a7:
         58:f7:8c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:48:02 2026 by rpki-client