Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a3a2f33322d3438203d3e20323637333435.roa
File:                     323830343a346330633a3a2f33322d3438203d3e20323637333435.roa (raw, json)
Hash identifier:          TOcVP9YD10oKpO/JYnUt1OMECMMLUKoakzYnYyb8uAk=
Subject key identifier:   09:E8:09:A9:C8:26:2B:17:B9:6F:24:36:2C:2E:3B:C3:AE:25:42:D5
Certificate issuer:       /CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
Certificate serial:       1537E4698758B5EC28F4C72F446CD28BBC4976EF
Authority key identifier: 69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a3a2f33322d3438203d3e20323637333435.roa
Signing time:             Thu 12 Mar 2026 15:00:00 +0000
ROA not before:           Thu 12 Mar 2026 14:55:00 +0000
ROA not after:            Thu 11 Mar 2027 15:00:00 +0000
asID:                     267345
IP address blocks:        2804:4c0c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.crl
                          rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:37:e4:69:87:58:b5:ec:28:f4:c7:2f:44:6c:d2:8b:bc:49:76:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
        Validity
            Not Before: Mar 12 14:55:00 2026 GMT
            Not After : Mar 11 15:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f9:09:62:09:e4:df:c4:bf:04:a5:0d:6b:0f:
                    ce:39:1d:f9:ef:3b:14:4e:ee:20:14:d8:2c:f5:fa:
                    6c:b7:7e:6e:ce:b3:e3:00:7c:3a:c2:56:51:88:89:
                    31:3f:4b:b5:a1:02:43:06:8f:cc:53:eb:18:aa:ac:
                    1b:52:da:24:b4:d8:35:55:f3:2e:46:48:44:de:94:
                    ae:a6:5b:a7:fb:ef:7b:da:05:5f:fc:19:83:de:a9:
                    c0:43:70:13:2f:d6:ea:01:8d:c6:4e:d0:8a:86:d7:
                    85:4b:3e:0b:9f:ab:48:61:a3:22:2a:71:10:a5:0b:
                    fd:95:24:58:fb:84:d3:90:b9:4a:31:52:17:5b:0e:
                    3e:a0:16:e5:a7:97:f5:55:3a:d0:12:99:1a:28:65:
                    22:31:c8:9d:29:de:0a:29:ed:fa:13:1d:5e:59:10:
                    30:11:a5:1b:fb:4d:87:80:7d:15:30:57:0c:68:d9:
                    35:c3:27:84:58:69:ce:0e:32:a4:9a:d6:a4:10:96:
                    2e:85:28:0e:4b:8f:14:71:de:d9:7a:fe:42:4e:16:
                    d0:60:39:67:88:0a:dd:c5:0e:54:c5:78:a4:75:39:
                    5c:f4:26:25:91:ff:5c:c5:32:f0:96:83:f0:c2:2d:
                    51:73:8e:2d:b7:b6:30:8c:78:4d:6a:5a:15:04:18:
                    7a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E8:09:A9:C8:26:2B:17:B9:6F:24:36:2C:2E:3B:C3:AE:25:42:D5
            X509v3 Authority Key Identifier:
                keyid:69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a3a2f33322d3438203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:7b:69:77:af:f6:f7:21:7f:04:33:67:0c:a0:f0:56:4b:01:
         66:9b:e1:06:77:e2:30:9b:77:20:21:48:f2:82:cc:65:9d:49:
         4d:9d:15:07:55:fc:63:ee:03:74:ee:96:7f:b6:2e:35:b0:d1:
         9b:74:47:8b:19:dd:ee:3e:ba:80:fe:39:a4:d6:21:52:1c:76:
         ac:5f:86:2d:a5:8d:2a:57:f3:c8:6f:11:6d:5d:7e:4a:13:c2:
         a1:8f:0b:99:d1:67:ea:3e:09:16:a5:ba:b5:ec:4b:54:c7:87:
         8d:cb:67:36:ec:c1:84:a5:28:54:17:f0:c9:a9:b4:52:73:d1:
         4f:70:fa:dd:28:27:64:d3:83:80:6e:df:33:0c:58:b4:09:48:
         9e:c2:4a:22:47:27:f1:f5:91:ae:51:95:ba:50:58:74:c7:cb:
         a9:a1:46:de:7f:88:c8:27:a2:28:cb:4f:30:a5:18:f1:e0:00:
         89:de:76:97:c5:48:8f:3d:fe:92:d0:da:2d:49:ff:3d:59:2d:
         6b:90:8b:1b:3d:bf:13:6c:c5:08:a2:bb:0b:f4:94:c5:60:29:
         aa:23:06:e7:b0:eb:a6:41:8c:28:32:d5:6e:4d:f9:e9:16:a4:
         0f:d7:51:5c:44:6c:20:ae:6f:93:50:41:84:d8:89:67:0a:34:
         95:73:a0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:58:31 2026 by rpki-client