Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/323830343a333137343a383030303a3a2f33362d313238203d3e20323635303136.roa
File:                     323830343a333137343a383030303a3a2f33362d313238203d3e20323635303136.roa (raw, json)
Hash identifier:          eZs4bvCdhF+IeH2uHKZVGqPWcDJpZqpg/BeM3AYZZlI=
Subject key identifier:   F1:C5:02:36:27:7E:94:AD:18:78:D9:43:C1:F6:60:2C:EB:23:CE:8F
Certificate issuer:       /CN=EB2DD8C8D4EA793B9BA20B69C44523AF0F503317
Certificate serial:       6C83A956C2437624D0C1A1CCD5071AE66A38CE61
Authority key identifier: EB:2D:D8:C8:D4:EA:79:3B:9B:A2:0B:69:C4:45:23:AF:0F:50:33:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2DD8C8D4EA793B9BA20B69C44523AF0F503317.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/323830343a333137343a383030303a3a2f33362d313238203d3e20323635303136.roa
Signing time:             Mon 23 Mar 2026 11:49:54 +0000
ROA not before:           Mon 23 Mar 2026 11:44:54 +0000
ROA not after:            Mon 22 Mar 2027 11:49:54 +0000
asID:                     265016
IP address blocks:        2804:3174:8000::/36 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/EB2DD8C8D4EA793B9BA20B69C44523AF0F503317.crl
                          rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/EB2DD8C8D4EA793B9BA20B69C44523AF0F503317.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2DD8C8D4EA793B9BA20B69C44523AF0F503317.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 17:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:83:a9:56:c2:43:76:24:d0:c1:a1:cc:d5:07:1a:e6:6a:38:ce:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB2DD8C8D4EA793B9BA20B69C44523AF0F503317
        Validity
            Not Before: Mar 23 11:44:54 2026 GMT
            Not After : Mar 22 11:49:54 2027 GMT
        Subject: CN=F1C50236277E94AD1878D943C1F6602CEB23CE8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5d:1c:7c:d7:bb:82:4d:42:46:8b:16:50:66:
                    79:3d:71:5a:63:63:79:6a:d7:d4:a0:03:36:39:dd:
                    09:c0:e8:6e:52:7b:48:f0:b6:09:d4:21:26:b8:ee:
                    e7:fa:03:97:0c:94:e8:5d:39:40:8e:97:e3:9e:ba:
                    89:f0:6a:17:17:8f:bd:18:a5:fb:b8:ab:b2:ce:dc:
                    6b:19:9a:f3:30:07:dd:9a:ed:8c:0b:06:f2:65:8e:
                    c4:c6:e9:5b:e7:d5:8a:04:24:a8:2f:3e:87:51:30:
                    6a:48:d2:dc:25:9d:1e:4f:03:b3:5f:d8:62:ed:bf:
                    c8:de:78:bd:c9:af:fb:bb:30:df:9e:36:42:1e:97:
                    51:b6:4d:05:0c:98:a0:68:b5:e0:6f:41:d5:63:55:
                    f6:2c:b9:2d:8e:7e:c4:3c:4f:90:d5:87:e3:75:c7:
                    d4:23:33:7e:86:a1:19:95:e2:75:6a:9e:b1:e5:3c:
                    c1:2e:c5:6c:84:3c:98:1a:07:57:fe:82:c0:da:f8:
                    75:63:5b:c9:6c:aa:c9:a3:50:7a:c9:94:5f:bb:dd:
                    49:99:6a:5b:5c:85:11:1c:63:65:82:7a:ff:4e:09:
                    1f:1f:4f:3b:6b:be:56:64:5a:24:49:21:b7:f9:a1:
                    05:87:e1:14:14:87:39:88:72:91:6d:d4:1c:54:7b:
                    78:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C5:02:36:27:7E:94:AD:18:78:D9:43:C1:F6:60:2C:EB:23:CE:8F
            X509v3 Authority Key Identifier:
                keyid:EB:2D:D8:C8:D4:EA:79:3B:9B:A2:0B:69:C4:45:23:AF:0F:50:33:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/EB2DD8C8D4EA793B9BA20B69C44523AF0F503317.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2DD8C8D4EA793B9BA20B69C44523AF0F503317.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/323830343a333137343a383030303a3a2f33362d313238203d3e20323635303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3174:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7d:f4:e2:1c:3d:14:86:2b:0a:4a:02:49:21:5a:2d:0b:e9:2d:
         2a:24:c7:1a:b7:a4:00:a0:d2:09:18:99:b5:7e:b1:d1:a5:b7:
         0b:2c:af:fe:48:df:00:1f:fb:04:3f:aa:2e:8b:f7:da:94:3c:
         6c:29:64:7c:4a:25:78:10:f4:9c:7e:fd:ed:69:76:a2:66:6b:
         4b:d0:42:ba:82:68:b5:0f:16:e5:77:1a:9a:3b:86:7c:0c:6f:
         0f:fd:e2:4a:b7:ff:9f:e3:cf:98:e6:fe:18:85:43:b9:dc:f6:
         e7:23:4c:32:e1:ee:f1:af:d1:95:24:48:4c:9a:d5:54:53:85:
         ea:a9:a5:94:bb:e4:49:00:85:49:46:24:c3:96:45:68:07:48:
         33:1d:dd:5b:68:ae:f3:ac:f2:d9:7c:50:1b:20:05:de:e0:6b:
         46:9b:42:c7:7b:29:81:64:34:ab:d5:25:6c:b6:10:f3:64:75:
         bf:49:6b:1f:28:04:f3:16:cb:dd:8f:44:b5:ef:ad:73:dd:b5:
         f3:e2:9f:4e:ef:dd:0c:f4:28:c7:05:02:cb:de:4b:83:63:16:
         f9:55:a4:11:0d:57:c2:84:e3:f1:59:86:6d:4a:48:ad:de:46:
         d0:69:61:e5:9e:6d:d1:9e:f7:aa:aa:69:8b:d9:57:ef:a3:2b:
         8c:31:04:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:51:29 2026 by rpki-client