Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/323830343a323038343a343a3a2f34382d3438203d3e20323634343936.roa
File:                     323830343a323038343a343a3a2f34382d3438203d3e20323634343936.roa (raw, json)
Hash identifier:          CuVGspiIiQrywlAgij5dOPiysAkf5WApO39xFJDYQGg=
Subject key identifier:   F0:2E:A9:B6:9C:0D:44:D4:8A:40:C3:78:59:78:98:21:C9:7D:FA:26
Certificate issuer:       /CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Certificate serial:       154226425978029F3F5479CBB2DE734E49761FC2
Authority key identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/323830343a323038343a343a3a2f34382d3438203d3e20323634343936.roa
Signing time:             Thu 12 Mar 2026 02:12:43 +0000
ROA not before:           Thu 12 Mar 2026 02:07:43 +0000
ROA not after:            Thu 11 Mar 2027 02:12:43 +0000
asID:                     264496
IP address blocks:        2804:2084:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl
                          rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 09:35:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:42:26:42:59:78:02:9f:3f:54:79:cb:b2:de:73:4e:49:76:1f:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
        Validity
            Not Before: Mar 12 02:07:43 2026 GMT
            Not After : Mar 11 02:12:43 2027 GMT
        Subject: CN=F02EA9B69C0D44D48A40C37859789821C97DFA26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bf:4c:b5:26:1f:e0:36:7e:d8:56:ad:4c:24:
                    09:7f:8f:69:50:45:00:14:4a:b8:e4:0f:6c:1a:d8:
                    5b:14:8e:8a:49:b3:24:d9:77:54:37:7e:7b:ae:78:
                    96:57:82:35:b9:1b:e0:79:cc:44:39:c0:f3:10:a5:
                    76:43:bc:d1:14:5b:d9:5f:f5:0b:40:06:2d:2c:8e:
                    ac:b5:ef:f7:3d:82:25:a7:21:2d:15:11:5a:87:7b:
                    3f:2b:91:14:05:ba:c8:91:11:3f:6f:6a:21:ff:35:
                    f3:65:30:03:7a:74:ad:50:98:96:d1:c8:d0:38:68:
                    81:54:18:55:37:fa:93:7d:19:8b:ec:fd:d3:39:48:
                    7f:53:2a:27:40:30:28:31:ed:d5:e5:5e:34:17:bc:
                    65:13:da:81:ee:a8:60:77:de:cc:3d:e7:56:1b:19:
                    1b:9a:43:61:76:38:a1:08:e2:d9:9f:5e:30:ea:b4:
                    b0:b1:b4:f1:4f:43:05:89:20:96:1a:ad:eb:09:7a:
                    d8:5f:9c:82:d4:7a:54:27:0e:66:b4:8e:6e:1c:a1:
                    c3:b3:91:fb:06:74:92:fb:b8:5f:69:de:cd:cf:e0:
                    57:30:5d:41:a0:79:92:93:67:d7:50:03:90:b0:39:
                    4e:a0:42:d4:66:53:2e:9e:c1:d7:5b:e7:b3:1b:2e:
                    53:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2E:A9:B6:9C:0D:44:D4:8A:40:C3:78:59:78:98:21:C9:7D:FA:26
            X509v3 Authority Key Identifier:
                keyid:97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/323830343a323038343a343a3a2f34382d3438203d3e20323634343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2084:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:24:69:e3:e9:6a:c4:2f:6d:21:f2:8e:93:8b:32:49:0d:d4:
         3d:c8:29:86:c0:5f:85:a3:4b:d6:0b:04:a2:9d:2c:23:4f:88:
         3f:65:2b:d7:dc:8b:b1:94:fc:8f:d4:86:44:bc:ad:58:fb:37:
         60:da:9c:c3:bc:00:d7:4e:a7:c2:2f:25:a7:f4:3c:57:da:05:
         32:49:fe:fc:10:50:ed:ba:9a:e9:22:2d:96:c3:1c:e8:77:81:
         2d:50:81:6e:46:fb:19:5c:d3:11:52:cf:13:a7:be:40:d0:1a:
         e6:b7:25:24:a3:3f:c1:0f:86:17:36:b2:c7:5f:af:41:ac:35:
         80:8e:2b:7c:64:de:d2:1f:3b:85:73:3d:27:a1:e1:dc:36:7b:
         bc:2e:ca:7a:08:f1:70:9f:61:57:18:14:c9:e9:67:c7:78:7b:
         a8:78:c0:82:16:67:af:58:d6:0b:ae:98:7f:1c:24:32:df:84:
         bf:0b:4f:70:70:e0:d3:b3:ec:b5:22:09:63:b9:85:47:7a:3e:
         7c:74:08:83:e2:1d:6b:be:a0:b1:d8:b6:95:e7:d7:ec:63:60:
         92:1b:6c:f3:64:ac:cb:54:6b:41:90:24:05:2d:04:ac:ce:a8:
         22:14:15:59:67:e7:fb:ed:72:b4:5e:9e:8f:1c:14:41:86:4d:
         00:d6:95:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:22:33 2026 by rpki-client