Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/323830343a393536343a3a2f33362d313238203d3e20323734353230.roa
File:                     323830343a393536343a3a2f33362d313238203d3e20323734353230.roa (raw, json)
Hash identifier:          UD83ELatLmhsC6r7wjfmyJ2K+B+WVeAdK/ANt1UP0no=
Subject key identifier:   C9:F1:C1:38:B6:9F:61:4A:2B:E1:C3:AB:BB:22:72:1A:F9:52:E9:22
Certificate issuer:       /CN=E28429D3ABE302909DF402CE9FF34ABB4CC883F3
Certificate serial:       6D31293E9ADC1D04F8DC13F3BF421B3992C72C0F
Authority key identifier: E2:84:29:D3:AB:E3:02:90:9D:F4:02:CE:9F:F3:4A:BB:4C:C8:83:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E28429D3ABE302909DF402CE9FF34ABB4CC883F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/323830343a393536343a3a2f33362d313238203d3e20323734353230.roa
Signing time:             Thu 19 Mar 2026 15:00:06 +0000
ROA not before:           Thu 19 Mar 2026 14:55:06 +0000
ROA not after:            Thu 18 Mar 2027 15:00:06 +0000
asID:                     274520
IP address blocks:        2804:9564::/36 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/E28429D3ABE302909DF402CE9FF34ABB4CC883F3.crl
                          rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/E28429D3ABE302909DF402CE9FF34ABB4CC883F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E28429D3ABE302909DF402CE9FF34ABB4CC883F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 21:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:31:29:3e:9a:dc:1d:04:f8:dc:13:f3:bf:42:1b:39:92:c7:2c:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E28429D3ABE302909DF402CE9FF34ABB4CC883F3
        Validity
            Not Before: Mar 19 14:55:06 2026 GMT
            Not After : Mar 18 15:00:06 2027 GMT
        Subject: CN=C9F1C138B69F614A2BE1C3ABBB22721AF952E922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ba:fe:4d:d7:0a:ca:a1:f0:59:98:63:32:6b:
                    3f:aa:d2:26:ca:8e:02:49:81:4d:27:e6:e4:83:e3:
                    31:d2:7d:71:c0:da:9c:b2:df:eb:e4:0e:61:7b:3c:
                    b0:5c:0a:ca:bf:19:c0:83:ee:ca:cc:92:be:bd:c1:
                    24:24:28:bc:71:fa:68:9c:6d:b5:5f:d7:e7:23:37:
                    ae:64:d3:01:9d:1d:64:19:10:27:44:e4:75:73:29:
                    ce:23:8c:9a:9a:2f:28:a4:51:84:e7:c2:87:54:6f:
                    4d:82:23:e3:27:bd:67:7b:bc:db:07:f9:07:97:f8:
                    15:d7:c5:17:65:60:58:cc:a6:33:90:27:dc:55:b9:
                    e6:1b:0b:d1:59:47:bd:9b:10:8e:8d:2f:e3:98:6c:
                    6c:1c:f4:c1:3d:d9:f4:dd:46:4b:d8:76:08:71:82:
                    c3:11:23:37:42:4f:28:de:62:af:d6:a0:92:42:18:
                    84:55:dd:d6:a5:c0:35:8d:28:8c:cb:ee:8d:02:7f:
                    a9:22:d7:d5:be:1a:aa:25:37:32:77:b2:b8:34:56:
                    2f:b1:34:56:4f:05:e3:81:ae:b8:4a:02:5a:71:1d:
                    b1:f9:4a:ea:c9:62:2d:ee:f4:0a:07:95:54:b4:fa:
                    a2:96:8d:80:a7:02:bd:f4:a9:a1:e7:5d:6d:b6:32:
                    b8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F1:C1:38:B6:9F:61:4A:2B:E1:C3:AB:BB:22:72:1A:F9:52:E9:22
            X509v3 Authority Key Identifier:
                keyid:E2:84:29:D3:AB:E3:02:90:9D:F4:02:CE:9F:F3:4A:BB:4C:C8:83:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/E28429D3ABE302909DF402CE9FF34ABB4CC883F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E28429D3ABE302909DF402CE9FF34ABB4CC883F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/323830343a393536343a3a2f33362d313238203d3e20323734353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9564::/36

    Signature Algorithm: sha256WithRSAEncryption
         38:63:7a:18:04:0c:35:cf:3b:10:77:3f:ab:2a:76:5a:af:38:
         a6:0b:73:0f:f5:92:68:d5:c8:75:28:94:cf:c4:12:32:b1:74:
         7c:0c:ec:29:76:08:c5:37:f5:07:9c:17:ca:a6:07:00:aa:e2:
         3d:b9:f7:6b:9f:29:8c:6a:76:09:d5:32:4a:69:6e:2d:c1:12:
         bb:f3:e7:01:04:5f:68:85:88:a8:1f:22:82:38:f1:fa:2a:15:
         cb:a5:d0:eb:b9:38:92:12:ea:04:1c:32:ab:93:37:89:1d:59:
         40:f7:a9:e9:b1:bd:64:e2:0f:7e:a5:cd:b7:89:c0:2f:f1:73:
         aa:0f:32:26:a7:7e:d7:4e:61:ab:2c:84:a0:86:6f:02:45:53:
         11:43:20:b5:8f:54:ff:b2:42:b5:2a:42:9c:58:88:f9:c5:d8:
         c9:fe:ad:e1:76:79:cb:bb:5e:99:fc:5c:bd:4f:2c:41:18:d9:
         13:87:fb:7d:ab:48:1e:de:22:08:57:b4:ff:20:b7:c4:f7:f3:
         0a:00:76:a0:68:60:75:ec:3b:92:78:87:04:a6:0e:1d:31:45:
         0e:75:3e:6c:a8:12:e9:71:f0:4c:f6:e8:d9:e0:e4:b3:ca:56:
         6c:00:35:ab:de:0c:52:1e:85:ca:28:51:3b:7e:9b:20:11:d9:
         21:00:37:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:21:05 2026 by rpki-client