Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/323830343a346364383a613030303a3a2f33352d313238203d3e20323637333936.roa
File:                     323830343a346364383a613030303a3a2f33352d313238203d3e20323637333936.roa (raw, json)
Hash identifier:          0S3dbGoktk993KsHmQOxa6axj9zuV1SaDiD3zIp2KXw=
Subject key identifier:   2D:4B:2C:3D:EE:AE:FC:78:F8:7B:C5:65:02:A3:4D:AD:4B:94:AC:6B
Certificate issuer:       /CN=D11065C38ED3D7D0573D15A86D4828AE1D980631
Certificate serial:       3190B56058FF34634EB32FD8E9CFB867A4BAE4D6
Authority key identifier: D1:10:65:C3:8E:D3:D7:D0:57:3D:15:A8:6D:48:28:AE:1D:98:06:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11065C38ED3D7D0573D15A86D4828AE1D980631.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/323830343a346364383a613030303a3a2f33352d313238203d3e20323637333936.roa
Signing time:             Fri 20 Mar 2026 14:44:36 +0000
ROA not before:           Fri 20 Mar 2026 14:39:36 +0000
ROA not after:            Fri 19 Mar 2027 14:44:36 +0000
asID:                     267396
IP address blocks:        2804:4cd8:a000::/35 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/D11065C38ED3D7D0573D15A86D4828AE1D980631.crl
                          rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/D11065C38ED3D7D0573D15A86D4828AE1D980631.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11065C38ED3D7D0573D15A86D4828AE1D980631.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:90:b5:60:58:ff:34:63:4e:b3:2f:d8:e9:cf:b8:67:a4:ba:e4:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D11065C38ED3D7D0573D15A86D4828AE1D980631
        Validity
            Not Before: Mar 20 14:39:36 2026 GMT
            Not After : Mar 19 14:44:36 2027 GMT
        Subject: CN=2D4B2C3DEEAEFC78F87BC56502A34DAD4B94AC6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c8:43:32:9b:67:9f:3c:fe:d6:6c:3c:5a:b2:
                    5c:b3:a0:da:22:4f:78:95:7a:6b:fd:bf:45:c3:8a:
                    70:55:80:e6:8b:f8:4c:84:15:b6:d1:57:86:92:78:
                    2d:f3:fc:40:fb:35:e4:e9:ec:76:b4:70:71:ae:db:
                    4b:50:1d:68:a2:df:a8:55:d8:e5:d6:c0:73:96:70:
                    f7:3a:65:c6:a2:16:5f:36:b7:88:28:3a:6d:46:bd:
                    d6:da:8c:f8:ca:9c:eb:81:a1:32:10:34:b2:af:d8:
                    78:ac:35:05:a0:14:3c:eb:6a:46:2d:04:cd:d9:e0:
                    89:42:28:27:d7:08:7f:80:3d:6a:b3:5a:94:46:d8:
                    d4:8b:a0:20:97:43:68:2d:9d:5b:a4:85:1b:b6:9f:
                    58:30:fd:fd:bd:02:52:2a:5c:b4:30:3e:b7:20:b0:
                    ee:4a:11:14:dc:cd:28:57:d0:b9:fc:0f:62:7c:c5:
                    cd:0d:76:35:27:71:09:e9:a4:0b:59:7c:27:3c:6f:
                    44:31:c7:e0:e2:a8:f6:37:3b:58:65:12:de:dd:2a:
                    d0:6f:5e:1d:b9:1b:dd:ba:31:50:22:1a:63:e3:f1:
                    a3:da:0d:26:a0:22:dd:aa:04:b3:90:52:5e:15:e4:
                    07:cd:ef:ee:54:86:ac:36:d1:8e:11:21:83:88:b3:
                    83:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4B:2C:3D:EE:AE:FC:78:F8:7B:C5:65:02:A3:4D:AD:4B:94:AC:6B
            X509v3 Authority Key Identifier:
                keyid:D1:10:65:C3:8E:D3:D7:D0:57:3D:15:A8:6D:48:28:AE:1D:98:06:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/D11065C38ED3D7D0573D15A86D4828AE1D980631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11065C38ED3D7D0573D15A86D4828AE1D980631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/323830343a346364383a613030303a3a2f33352d313238203d3e20323637333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cd8:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         c7:db:e3:4a:fd:51:7d:50:ad:0e:46:22:f6:c0:43:5e:79:03:
         b3:e0:77:ca:35:2a:ca:d6:a3:7d:54:af:01:2e:88:66:96:e2:
         45:f3:f0:43:35:3c:00:e3:bc:ee:ee:50:9f:1d:15:21:ce:a3:
         53:a4:bd:a4:af:82:dd:cd:90:a2:90:c5:b8:21:49:3f:16:a0:
         76:4d:d4:03:0c:63:7c:3b:62:28:7b:28:62:29:f7:d8:05:26:
         d0:3a:b3:5b:66:3d:0c:b2:cc:5f:6a:41:cd:dc:b5:fb:21:a8:
         3f:94:fd:76:3d:92:22:39:57:e1:f5:00:1d:67:9f:c1:e3:9a:
         b7:6a:a0:c4:17:53:b5:07:2e:fe:b9:2d:b5:67:45:a3:48:e3:
         7e:2f:de:2e:9e:90:b0:b0:fa:48:aa:a8:db:37:2b:85:5f:20:
         50:90:53:99:3d:26:d6:14:bf:2a:13:d3:e1:4e:67:9a:b9:7f:
         28:5d:f5:9d:4e:99:00:fe:52:47:08:fd:ed:88:e5:9c:91:ce:
         39:a9:a7:98:1a:a9:33:33:24:44:0a:19:c6:df:41:cf:bb:cc:
         5c:c8:e8:e3:6b:0e:62:94:81:cf:d4:24:06:39:7f:97:87:51:
         66:1d:0c:a3:50:5b:b6:b0:64:09:f8:83:63:4e:66:fa:c1:20:
         41:6d:09:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:20:37 2026 by rpki-client