Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/323830343a356632343a3a2f33322d3332203d3e20323639303739.roa
File:                     323830343a356632343a3a2f33322d3332203d3e20323639303739.roa (raw, json)
Hash identifier:          zGfZlXt92w7Dc4U2toUZVjzrd1xQ3x+DDWPonk6Tyc8=
Subject key identifier:   DC:92:0A:FF:14:5C:22:3A:2B:6E:C8:9C:F2:85:30:97:96:56:96:CA
Certificate issuer:       /CN=433BC56DE61BF5759F79705E437131F09597AF13
Certificate serial:       4D695B5A6E0C6151D7EB689CAF24BE5F1FD56F44
Authority key identifier: 43:3B:C5:6D:E6:1B:F5:75:9F:79:70:5E:43:71:31:F0:95:97:AF:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/323830343a356632343a3a2f33322d3332203d3e20323639303739.roa
Signing time:             Mon 02 Mar 2026 18:15:56 +0000
ROA not before:           Mon 02 Mar 2026 18:10:56 +0000
ROA not after:            Mon 01 Mar 2027 18:15:56 +0000
asID:                     269079
IP address blocks:        2804:5f24::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.crl
                          rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 05:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:69:5b:5a:6e:0c:61:51:d7:eb:68:9c:af:24:be:5f:1f:d5:6f:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=433BC56DE61BF5759F79705E437131F09597AF13
        Validity
            Not Before: Mar  2 18:10:56 2026 GMT
            Not After : Mar  1 18:15:56 2027 GMT
        Subject: CN=DC920AFF145C223A2B6EC89CF2853097965696CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1e:34:94:ed:3f:cf:e2:f5:a3:6e:61:76:6b:
                    32:6a:a9:d3:c0:fe:3e:d1:c1:d3:18:11:28:03:af:
                    27:5c:8f:dd:b9:98:10:23:c7:a2:72:56:ea:5f:73:
                    2f:f8:85:a5:7f:bf:b1:0c:e0:0c:9f:88:a4:c0:7e:
                    29:27:ac:d3:81:99:bd:70:3f:b1:36:8d:16:d0:b1:
                    a6:56:af:82:f4:ac:7d:6c:cd:4f:fb:4d:f9:fd:56:
                    1e:96:40:ce:ed:44:1a:8a:8a:d7:e5:c9:e3:a4:b9:
                    9d:a9:fa:b1:7b:03:38:17:8d:51:17:3c:02:39:fd:
                    96:4e:d2:14:c2:3f:eb:8d:ec:b5:02:8f:38:7f:34:
                    db:89:b9:14:e0:48:04:85:6c:a9:57:28:0c:9f:a3:
                    b2:83:92:6d:93:22:31:2d:55:63:8b:67:33:a1:09:
                    cb:d5:6d:9e:cd:dc:e7:28:ed:a7:38:64:ff:7d:21:
                    29:fd:3e:1f:8e:44:26:5f:f7:44:57:ed:c6:a1:81:
                    0a:a5:c7:d9:b4:43:60:64:bf:08:7c:bd:81:df:0d:
                    5c:0d:f2:73:a7:32:64:49:fb:6c:46:54:cb:0f:a3:
                    1c:e2:f4:21:0e:ee:c2:a8:14:72:d5:18:c7:78:60:
                    9f:b3:04:37:e0:ee:f4:6f:6b:ee:0c:23:55:d2:37:
                    fc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:92:0A:FF:14:5C:22:3A:2B:6E:C8:9C:F2:85:30:97:96:56:96:CA
            X509v3 Authority Key Identifier:
                keyid:43:3B:C5:6D:E6:1B:F5:75:9F:79:70:5E:43:71:31:F0:95:97:AF:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/323830343a356632343a3a2f33322d3332203d3e20323639303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f24::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:3b:2a:33:ef:04:ae:3f:f5:96:fa:28:f7:42:8c:85:f6:1c:
         06:5b:1b:df:1a:01:c5:ef:6d:30:c1:dd:bc:48:ec:2b:d4:50:
         25:e4:f4:e8:a9:c0:43:05:b1:71:34:76:fa:28:e4:a3:6b:e6:
         74:a5:40:7b:55:16:c1:12:30:2e:32:e6:6f:ad:bd:ac:6f:74:
         48:f2:51:06:d8:37:a5:e3:bd:dd:a0:55:08:6b:c9:2c:99:ee:
         8f:00:99:8d:6d:9e:9f:39:fa:5f:83:78:6e:5f:b4:d6:93:83:
         3e:3c:1c:e0:8e:01:ed:af:1c:b2:d7:a4:09:b3:c1:5f:c2:67:
         65:da:66:53:c6:8c:30:2c:82:0c:d9:e4:93:55:e6:76:0a:4c:
         47:3d:43:2d:e2:81:00:8b:bd:68:38:b7:71:ae:20:3c:0f:e8:
         28:0b:54:96:b8:d7:d2:19:70:f8:31:8b:a3:d6:01:fc:44:3f:
         af:1f:7c:ad:8c:2e:84:13:33:67:4b:c0:db:9a:23:e9:c4:dd:
         21:a8:e3:34:5d:b5:df:9e:84:84:73:1d:5b:a6:f8:8a:d9:5a:
         7a:7c:e2:eb:f6:ec:fe:5f:00:da:50:c9:39:f8:d2:71:6f:01:
         7b:4f:93:75:9f:c0:0a:bf:e4:c3:60:72:42:a7:06:b8:cc:e3:
         b7:43:3a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:31:16 2026 by rpki-client