Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/323830343a363435633a383030303a3a2f33332d3333203d3e20323639343233.roa
File:                     323830343a363435633a383030303a3a2f33332d3333203d3e20323639343233.roa (raw, json)
Hash identifier:          LOfpEoKIHP0IXIx65yt9ksnCtujDp/z3wBloukGY2U8=
Subject key identifier:   F9:D9:3D:99:72:34:EF:EE:9F:62:74:A8:C3:EE:EA:51:02:84:5A:E7
Certificate issuer:       /CN=F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0
Certificate serial:       65B52CF0DF9F17F7E227ED6DA606E99447ECB533
Authority key identifier: F0:E2:45:D2:CA:D0:9D:3E:65:9F:55:20:93:C7:FF:CB:E1:D2:5D:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/323830343a363435633a383030303a3a2f33332d3333203d3e20323639343233.roa
Signing time:             Thu 05 Mar 2026 18:40:38 +0000
ROA not before:           Thu 05 Mar 2026 18:35:38 +0000
ROA not after:            Thu 04 Mar 2027 18:40:38 +0000
asID:                     269423
IP address blocks:        2804:645c:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.crl
                          rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 23:29:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:b5:2c:f0:df:9f:17:f7:e2:27:ed:6d:a6:06:e9:94:47:ec:b5:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0
        Validity
            Not Before: Mar  5 18:35:38 2026 GMT
            Not After : Mar  4 18:40:38 2027 GMT
        Subject: CN=F9D93D997234EFEE9F6274A8C3EEEA5102845AE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:67:76:3f:8c:07:91:0a:f7:10:2c:4e:59:fd:
                    b5:3e:ac:91:c7:76:fa:50:8b:71:33:51:98:f4:08:
                    44:5e:3c:ac:55:1f:35:1b:53:b5:73:fd:26:34:09:
                    ab:21:cc:c3:5a:1b:9f:6c:2b:7d:a5:e0:39:26:2c:
                    1b:bf:f5:e6:c3:74:9f:da:e7:e2:d7:ac:71:4e:84:
                    ee:9f:a3:f8:6e:cd:bf:f8:fd:97:34:29:1e:26:9f:
                    51:1a:38:fd:e0:49:db:54:c7:23:90:15:82:8f:05:
                    84:8d:e0:ba:5b:77:f1:d0:30:f4:9b:a7:56:c0:51:
                    9f:c1:a5:8d:fa:e5:61:e5:56:49:78:d6:35:6b:e5:
                    87:d3:74:03:3a:20:d2:a8:85:3b:0e:29:71:f8:54:
                    f2:74:8f:f3:c7:f5:b6:3f:25:69:bd:ab:80:eb:ec:
                    81:2f:9f:da:8b:72:dc:36:50:65:4a:ac:fb:67:27:
                    a5:60:86:99:8f:e2:ae:77:20:0b:17:6e:15:ca:47:
                    6d:f7:49:7c:4a:ba:ee:dd:9f:5c:cb:37:c6:ae:5e:
                    61:e2:84:06:08:13:89:69:55:ab:12:92:70:4b:7d:
                    9d:6b:94:ad:e1:27:92:97:7a:5a:c8:88:68:a6:a4:
                    bf:1f:18:d7:31:e3:44:80:64:a7:95:b0:f3:81:ec:
                    b7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D9:3D:99:72:34:EF:EE:9F:62:74:A8:C3:EE:EA:51:02:84:5A:E7
            X509v3 Authority Key Identifier:
                keyid:F0:E2:45:D2:CA:D0:9D:3E:65:9F:55:20:93:C7:FF:CB:E1:D2:5D:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/323830343a363435633a383030303a3a2f33332d3333203d3e20323639343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:645c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         55:4f:5b:24:86:76:0b:bc:f7:f4:fc:a2:48:43:fe:48:af:b1:
         1e:12:cf:37:a7:98:31:38:af:6d:98:e5:69:65:5b:31:c8:83:
         73:5b:7d:5b:7e:c2:ce:1b:7d:2c:e6:cd:70:a8:40:45:4d:6c:
         48:04:59:b0:83:55:71:cf:08:0b:47:8d:ad:e5:70:25:22:71:
         1a:33:7d:43:29:9e:f0:16:45:93:cf:55:b9:b0:39:f7:57:e3:
         20:d5:37:49:5d:67:9e:6e:7d:98:b5:69:d6:2e:a3:fb:3c:e8:
         bc:53:eb:8e:c7:1a:3b:69:cb:e2:0d:46:b5:da:f2:85:27:b0:
         f6:f8:ba:45:33:72:1e:45:c1:b4:ca:66:74:03:93:45:74:97:
         14:d7:0c:cf:e8:e0:a2:25:fd:65:26:8e:24:49:31:4c:95:84:
         e4:6e:df:cf:d6:db:53:35:69:25:09:63:3f:e2:6c:25:47:06:
         0d:e7:54:67:8b:74:be:b7:96:87:41:e7:25:27:89:0f:da:af:
         87:bd:a1:87:f9:65:5a:f0:b5:25:4f:76:fd:59:7f:cb:0d:eb:
         70:f7:36:98:ae:ac:ec:6e:08:c5:22:73:5b:a6:81:fa:f0:7a:
         9f:83:52:12:58:31:5a:52:f3:14:3c:e7:1e:03:86:f9:47:83:
         52:fc:7a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:19:03 2026 by rpki-client