Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/323830343a3634343a3a2f34382d3438203d3e203533323235.roa
File:                     323830343a3634343a3a2f34382d3438203d3e203533323235.roa (raw, json)
Hash identifier:          sLrQBMyHibWSPkg2PAsxTv1fJyodYYhOnSbEGouVkGI=
Subject key identifier:   F8:D0:01:A1:06:86:78:77:1C:82:62:03:6A:F5:4E:AB:93:A7:34:F5
Certificate issuer:       /CN=3CA849ABB60256D8A6B30F907763AEF9CB3912EF
Certificate serial:       76E6B0B137EAE247CEF409D86D7AECFA7AD70D83
Authority key identifier: 3C:A8:49:AB:B6:02:56:D8:A6:B3:0F:90:77:63:AE:F9:CB:39:12:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/323830343a3634343a3a2f34382d3438203d3e203533323235.roa
Signing time:             Wed 13 May 2026 12:26:33 +0000
ROA not before:           Wed 13 May 2026 12:21:33 +0000
ROA not after:            Wed 12 May 2027 12:26:33 +0000
asID:                     53225
IP address blocks:        2804:644::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 00:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e6:b0:b1:37:ea:e2:47:ce:f4:09:d8:6d:7a:ec:fa:7a:d7:0d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CA849ABB60256D8A6B30F907763AEF9CB3912EF
        Validity
            Not Before: May 13 12:21:33 2026 GMT
            Not After : May 12 12:26:33 2027 GMT
        Subject: CN=F8D001A1068678771C8262036AF54EAB93A734F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f8:af:39:80:d9:57:97:e9:b0:18:62:63:8a:
                    ee:fe:0f:ff:1d:4e:6d:e3:ad:06:ed:bc:c9:0a:15:
                    14:f3:21:81:28:87:a8:42:7d:69:60:cf:4e:db:bf:
                    c4:10:0b:33:32:56:07:eb:3c:0b:77:c7:f4:e9:76:
                    2f:4e:70:ad:a6:47:e6:18:53:02:3c:3d:62:da:b4:
                    54:8a:1c:36:a6:7d:00:2c:34:aa:6e:22:7f:d5:42:
                    f4:d3:65:c6:6c:e1:9e:13:c1:e7:77:b7:db:76:4b:
                    84:b2:68:85:a6:eb:10:47:0c:72:28:60:f7:11:e1:
                    e1:35:b0:54:14:b1:40:bf:76:37:00:f6:ed:75:60:
                    9f:51:56:54:20:d6:e0:93:a3:47:72:5f:9b:11:3a:
                    f1:84:2a:b3:1a:5d:6e:4b:d0:52:56:32:60:de:43:
                    dc:69:af:ec:35:1a:c5:3c:35:91:76:fe:f2:52:5f:
                    fb:10:d7:bc:11:28:93:85:0b:ad:dc:7f:be:40:86:
                    1c:69:4d:77:61:82:a8:72:1e:21:03:2c:28:81:d6:
                    5c:67:c8:b6:18:a2:42:f9:21:a1:51:b6:ad:54:cf:
                    51:a1:8b:17:9a:95:5d:cd:d4:0c:8f:32:93:ec:13:
                    32:34:c2:81:c1:44:a4:3d:d4:e6:90:d0:95:fb:c8:
                    18:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D0:01:A1:06:86:78:77:1C:82:62:03:6A:F5:4E:AB:93:A7:34:F5
            X509v3 Authority Key Identifier:
                keyid:3C:A8:49:AB:B6:02:56:D8:A6:B3:0F:90:77:63:AE:F9:CB:39:12:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/323830343a3634343a3a2f34382d3438203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:644::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:03:de:b4:6b:c4:c7:75:89:b1:68:a1:ed:0e:8d:cc:db:53:
         08:b1:74:1a:9c:59:4e:74:25:ec:3a:79:72:97:7e:2e:bb:97:
         08:b0:0e:24:31:dc:bb:c8:e5:ba:16:d5:4e:26:cb:4c:90:31:
         f0:f5:b1:36:ca:05:14:0a:8c:4f:65:b3:9b:3a:3d:0b:b1:15:
         25:1b:0f:d0:72:c7:2e:97:59:86:bf:fb:9c:ac:9a:29:c9:f0:
         5f:38:66:b3:23:da:b6:48:0e:48:8c:18:f8:50:f8:b7:30:9f:
         d7:e2:15:a8:70:32:fe:aa:05:48:3f:70:29:92:32:4e:d5:f5:
         44:f1:ae:06:02:cd:1d:ae:68:e5:e6:6c:3e:25:81:40:96:36:
         20:e7:10:96:ab:0b:55:7c:cf:a7:b3:6d:17:d3:cf:7b:c0:73:
         5f:c7:a8:4c:10:9b:13:5a:1f:83:a9:1a:47:2a:c3:5b:5d:44:
         d6:65:d2:8f:6d:fc:18:b2:87:06:8b:6f:74:ea:d2:85:40:fa:
         cf:63:b2:99:b1:b4:34:bf:b2:90:f5:a3:80:e4:cb:1a:02:9b:
         35:30:dc:52:e5:20:96:63:e4:ba:ed:a4:4b:85:68:ac:18:b4:
         fa:13:c6:04:c7:ca:36:d0:7f:8d:d2:b9:65:a8:e6:ac:2e:7b:
         df:36:eb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:56:48 2026 by rpki-client