Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FtmLLjRZUWKNmECZ9PuUtuNxaUFhnsAh9kwsmufhxyDW/0/323830343a386130303a3a2f33322d313238203d3e20323733363430.roa
File:                     323830343a386130303a3a2f33322d313238203d3e20323733363430.roa (raw, json)
Hash identifier:          25I9jXVsQEOBXaXv9gfgVPBBVIg9W9XkiJxF+/EAIWU=
Subject key identifier:   C9:65:65:A3:E0:C0:94:A2:B5:63:CD:3A:28:13:94:56:AF:24:77:AA
Certificate issuer:       /CN=C995FADB47FE8FE1FB58CB0D4E2B14CB3F83A780
Certificate serial:       1551177FFF118E28EEC55AB3DE59B1D1099CFCDA
Authority key identifier: C9:95:FA:DB:47:FE:8F:E1:FB:58:CB:0D:4E:2B:14:CB:3F:83:A7:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C995FADB47FE8FE1FB58CB0D4E2B14CB3F83A780.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FtmLLjRZUWKNmECZ9PuUtuNxaUFhnsAh9kwsmufhxyDW/0/323830343a386130303a3a2f33322d313238203d3e20323733363430.roa
Signing time:             Fri 20 Mar 2026 20:37:00 +0000
ROA not before:           Fri 20 Mar 2026 20:32:00 +0000
ROA not after:            Fri 19 Mar 2027 20:37:00 +0000
asID:                     273640
IP address blocks:        2804:8a00::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FtmLLjRZUWKNmECZ9PuUtuNxaUFhnsAh9kwsmufhxyDW/0/C995FADB47FE8FE1FB58CB0D4E2B14CB3F83A780.crl
                          rsync://rpki-repo.registro.br/repo/FtmLLjRZUWKNmECZ9PuUtuNxaUFhnsAh9kwsmufhxyDW/0/C995FADB47FE8FE1FB58CB0D4E2B14CB3F83A780.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C995FADB47FE8FE1FB58CB0D4E2B14CB3F83A780.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 02:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:51:17:7f:ff:11:8e:28:ee:c5:5a:b3:de:59:b1:d1:09:9c:fc:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C995FADB47FE8FE1FB58CB0D4E2B14CB3F83A780
        Validity
            Not Before: Mar 20 20:32:00 2026 GMT
            Not After : Mar 19 20:37:00 2027 GMT
        Subject: CN=C96565A3E0C094A2B563CD3A28139456AF2477AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:97:71:e1:b3:32:16:d4:93:af:c8:5a:d7:72:
                    4e:e5:71:01:4c:f7:25:79:9c:be:32:a7:cd:ab:9d:
                    e7:80:27:44:04:14:26:c6:47:b4:49:2d:44:41:3b:
                    cb:f5:c6:07:44:2f:27:8a:b6:0e:3e:59:fb:1f:83:
                    43:ae:ca:e5:d2:a1:fe:35:ed:66:92:4b:51:32:6c:
                    f5:97:71:39:1d:1d:e4:56:d2:d5:fe:8c:c8:6f:f2:
                    3d:e3:2c:cb:3b:07:9c:24:f2:99:b7:ae:60:54:63:
                    e3:79:4f:17:db:cf:4d:58:08:cd:be:bb:33:22:a9:
                    20:9f:1e:fd:c9:82:22:89:9f:5b:90:e7:5e:2e:cd:
                    c5:eb:66:e3:8c:da:ed:78:52:04:c3:26:de:d1:ae:
                    63:12:31:d0:f8:4a:22:be:0a:df:88:bc:c8:e5:80:
                    b8:69:94:ab:74:93:43:d3:12:a1:54:ea:55:2b:20:
                    7b:ea:d0:9d:0f:45:d9:a5:d0:de:c0:93:0a:db:a5:
                    78:fa:6e:92:07:72:c5:02:93:13:1f:23:d1:a0:0f:
                    f4:45:01:f1:76:f6:36:73:68:5f:82:ef:29:9a:7f:
                    03:67:8a:bf:65:5e:1e:d1:3e:2b:91:23:ab:f8:94:
                    b0:27:34:07:a7:b8:c7:11:c0:bf:60:18:a1:03:40:
                    48:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:65:65:A3:E0:C0:94:A2:B5:63:CD:3A:28:13:94:56:AF:24:77:AA
            X509v3 Authority Key Identifier:
                keyid:C9:95:FA:DB:47:FE:8F:E1:FB:58:CB:0D:4E:2B:14:CB:3F:83:A7:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FtmLLjRZUWKNmECZ9PuUtuNxaUFhnsAh9kwsmufhxyDW/0/C995FADB47FE8FE1FB58CB0D4E2B14CB3F83A780.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C995FADB47FE8FE1FB58CB0D4E2B14CB3F83A780.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FtmLLjRZUWKNmECZ9PuUtuNxaUFhnsAh9kwsmufhxyDW/0/323830343a386130303a3a2f33322d313238203d3e20323733363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:27:de:f1:bf:2f:ed:20:0c:be:36:79:c1:b2:4b:e2:ae:65:
         62:59:76:c3:9e:71:b0:47:70:75:4c:af:1f:e8:cd:82:7e:55:
         4b:2c:e1:89:08:81:f5:9b:d3:1b:8b:63:1f:23:c8:bc:67:b5:
         e4:3e:59:eb:50:f1:f1:91:c2:ec:57:d9:df:a1:21:b3:5d:1c:
         23:7c:a5:a3:14:e3:7d:f9:4d:97:70:bb:a3:1f:af:72:d6:30:
         24:a3:ed:87:42:90:a5:3b:02:de:d7:fa:a0:65:2c:e1:9e:7d:
         7e:44:7a:03:8d:51:95:14:59:cc:8c:a2:78:ae:52:71:72:1e:
         b3:4c:3e:5b:9f:3d:b2:15:ba:e4:1a:12:61:47:61:c0:1f:7c:
         1f:d5:79:14:fc:8e:e7:a5:fb:3c:0b:fc:00:32:03:1a:db:38:
         46:f0:8d:04:71:85:38:7e:ac:30:06:d5:72:be:9a:5b:e7:fb:
         b2:7b:5f:2f:93:4b:74:75:84:4a:78:57:88:d5:e0:c8:cb:88:
         6d:90:79:34:12:3b:ca:50:25:a4:70:1b:ce:dc:86:aa:69:67:
         44:14:0c:88:c5:56:d7:23:18:3c:37:a3:ad:7d:eb:73:04:b4:
         88:fe:13:94:48:ab:b2:17:6a:37:55:ec:fc:57:5b:81:7f:a4:
         4e:57:6d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:08:27 2026 by rpki-client