Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/323030313a313239633a3a2f33322d3438203d3e203232333536.roa
File:                     323030313a313239633a3a2f33322d3438203d3e203232333536.roa (raw, json)
Hash identifier:          m5Nc9dH10neNbKM+w3cyytiacRROX+YRbx16uynq/lQ=
Subject key identifier:   53:23:D3:B4:E3:2A:32:3B:93:D3:BA:3C:66:39:E2:3D:FF:02:05:90
Certificate issuer:       /CN=968400C9DFC16D643EF5C94C34F993F17C7568AA
Certificate serial:       5A1B36ED9831D238A1CB1A54690390A8960123D5
Authority key identifier: 96:84:00:C9:DF:C1:6D:64:3E:F5:C9:4C:34:F9:93:F1:7C:75:68:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/323030313a313239633a3a2f33322d3438203d3e203232333536.roa
Signing time:             Fri 20 Mar 2026 15:30:33 +0000
ROA not before:           Fri 20 Mar 2026 15:25:33 +0000
ROA not after:            Fri 19 Mar 2027 15:30:33 +0000
asID:                     22356
IP address blocks:        2001:129c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.crl
                          rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:1b:36:ed:98:31:d2:38:a1:cb:1a:54:69:03:90:a8:96:01:23:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=968400C9DFC16D643EF5C94C34F993F17C7568AA
        Validity
            Not Before: Mar 20 15:25:33 2026 GMT
            Not After : Mar 19 15:30:33 2027 GMT
        Subject: CN=5323D3B4E32A323B93D3BA3C6639E23DFF020590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:dd:85:c3:b8:b3:db:c0:1c:ec:cd:b9:26:4d:
                    62:0e:ed:35:fe:bb:b5:56:19:c1:66:15:b5:23:bb:
                    a9:11:d0:5a:7a:d5:02:09:85:94:1e:e5:19:56:9a:
                    98:f3:c7:23:13:42:79:12:74:6a:c0:f3:ca:c9:fb:
                    7d:e7:8d:1c:09:1e:27:78:f3:b6:64:d3:a0:fa:e8:
                    22:6c:d1:c4:f2:b8:43:e0:36:26:c5:50:19:ee:b5:
                    f1:a4:16:50:c8:2e:69:ee:77:ad:80:4e:55:bd:91:
                    41:29:ef:5a:1a:dc:02:b7:49:56:6d:14:d4:ed:08:
                    d3:7b:4c:68:59:ab:f6:59:08:b0:27:e9:86:8d:53:
                    72:35:37:48:ae:1b:4d:71:4e:2c:0c:34:cb:43:f0:
                    b5:66:15:ea:14:a6:8a:ee:41:92:36:ca:c9:76:1a:
                    7d:b5:4a:57:a7:fb:2a:ce:32:47:32:63:74:d8:59:
                    3a:66:34:17:ff:bc:6e:d9:0b:75:16:bf:14:aa:04:
                    f1:a8:c0:f5:35:b9:e4:01:4e:09:43:f5:cc:eb:32:
                    b6:a2:f9:ca:57:ea:65:5b:cc:cd:1e:0e:30:89:2c:
                    aa:b8:4c:33:95:ce:ff:52:3e:90:d1:e8:e7:8c:41:
                    5e:c0:08:f6:57:4e:b9:84:c3:fe:5c:e5:36:b4:a6:
                    aa:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:23:D3:B4:E3:2A:32:3B:93:D3:BA:3C:66:39:E2:3D:FF:02:05:90
            X509v3 Authority Key Identifier:
                keyid:96:84:00:C9:DF:C1:6D:64:3E:F5:C9:4C:34:F9:93:F1:7C:75:68:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/323030313a313239633a3a2f33322d3438203d3e203232333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:129c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:d8:36:50:68:e2:66:53:6f:b2:0c:34:21:57:c4:47:50:b4:
         c2:da:a4:41:ea:f6:5e:9f:76:65:d5:f4:8b:d8:de:bb:16:13:
         82:93:2e:e2:b2:91:25:51:ec:c4:d2:b0:8d:33:7e:d5:7a:49:
         c3:2d:da:2b:72:ef:9e:3f:93:2b:d1:c9:24:b3:cf:cc:a2:6f:
         04:80:3b:48:6b:2c:0d:89:c4:ed:a3:44:bd:66:ac:44:51:2c:
         37:1b:95:de:7e:48:2f:c4:9d:60:ed:09:42:55:18:17:88:cd:
         88:fe:2d:2c:eb:b5:64:7c:97:fc:7e:e2:d6:ad:37:a4:30:00:
         da:13:07:88:4a:f6:ab:5f:63:b5:35:b2:97:ff:d5:0a:93:23:
         a7:e5:ef:b3:19:e9:fa:4e:9b:37:fa:6a:ab:df:13:a4:cf:bb:
         2f:99:67:8e:d6:ee:89:3e:33:49:4a:9e:e2:1d:49:aa:0c:32:
         da:4b:55:59:81:88:d7:35:1e:f8:d0:87:9c:ff:72:b7:12:b8:
         3f:1f:0e:66:cc:b1:7a:d9:7a:5f:64:33:f6:eb:49:8d:b6:66:
         d1:84:e3:c5:78:2e:59:6e:29:25:bc:51:a5:87:cd:cd:c5:a4:
         36:e1:82:7e:24:d5:45:ca:fd:b7:fd:54:8c:45:4a:4b:50:9c:
         59:3c:4c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:01:57 2026 by rpki-client