Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/323830343a363435633a3a2f33322d3332203d3e20323639343233.roa
File:                     323830343a363435633a3a2f33322d3332203d3e20323639343233.roa (raw, json)
Hash identifier:          2570qncpqCp8+viXtNq82rAhB+M+nRGwS8vxAwzgv6w=
Subject key identifier:   1D:FF:EE:D0:6E:76:9F:14:10:0D:A1:5E:8C:53:9E:C4:C9:C5:D7:AA
Certificate issuer:       /CN=F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0
Certificate serial:       11AC9FAE6E0205818A99C92901F477F6B40D9A59
Authority key identifier: F0:E2:45:D2:CA:D0:9D:3E:65:9F:55:20:93:C7:FF:CB:E1:D2:5D:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/323830343a363435633a3a2f33322d3332203d3e20323639343233.roa
Signing time:             Thu 05 Mar 2026 18:40:38 +0000
ROA not before:           Thu 05 Mar 2026 18:35:38 +0000
ROA not after:            Thu 04 Mar 2027 18:40:38 +0000
asID:                     269423
IP address blocks:        2804:645c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.crl
                          rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 11:51:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ac:9f:ae:6e:02:05:81:8a:99:c9:29:01:f4:77:f6:b4:0d:9a:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0
        Validity
            Not Before: Mar  5 18:35:38 2026 GMT
            Not After : Mar  4 18:40:38 2027 GMT
        Subject: CN=1DFFEED06E769F14100DA15E8C539EC4C9C5D7AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:60:0e:59:c4:f7:71:85:fc:12:56:2b:44:ca:
                    4f:6a:9d:c7:5f:56:95:87:dc:78:71:28:df:12:6b:
                    f7:ed:9b:96:bf:37:fb:47:47:50:ab:b2:a1:86:36:
                    cd:be:a8:52:52:6a:0d:29:c6:0c:36:af:9b:50:ec:
                    6a:02:0f:85:99:d0:21:89:8a:4f:f2:92:95:6d:82:
                    f8:6c:8d:ca:e3:e2:47:83:f7:c1:a6:1a:a0:69:05:
                    a1:97:d7:9a:cd:2c:05:f6:92:88:7e:55:cc:bc:0f:
                    83:da:7e:7d:41:07:1e:fc:88:bb:6b:59:28:a8:29:
                    31:d9:78:78:46:d7:94:13:a9:54:b5:5b:f4:91:08:
                    06:2a:01:1b:8b:f1:77:04:44:07:64:a1:ae:ad:fc:
                    71:84:ba:e5:1b:23:af:38:d6:5e:47:ad:5e:a0:72:
                    42:cf:1a:bb:b8:f6:5b:4e:2f:e2:bf:e7:ae:8c:ea:
                    40:ce:f7:e8:e6:75:1f:ad:2c:73:0e:b0:ba:62:18:
                    9b:bb:ab:a9:98:a1:e4:e0:c9:44:14:07:cd:22:0a:
                    70:bd:f9:e1:f4:96:3f:b4:8d:8c:8e:1b:24:b0:cc:
                    48:83:35:b8:31:dc:4e:35:18:a1:ba:c5:dc:52:b1:
                    94:1a:ee:f2:c5:92:c6:ac:a1:0f:52:65:cc:f9:f1:
                    10:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FF:EE:D0:6E:76:9F:14:10:0D:A1:5E:8C:53:9E:C4:C9:C5:D7:AA
            X509v3 Authority Key Identifier:
                keyid:F0:E2:45:D2:CA:D0:9D:3E:65:9F:55:20:93:C7:FF:CB:E1:D2:5D:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/323830343a363435633a3a2f33322d3332203d3e20323639343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:645c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:79:6d:97:69:dd:f9:62:84:b7:41:4f:d7:12:8f:b2:ae:4b:
         b5:f0:85:e7:84:56:be:e3:83:b4:a0:f7:0e:be:c0:d8:b0:62:
         ad:48:01:89:f2:62:36:d8:db:1d:81:cf:0a:cf:a5:b0:58:c9:
         59:6f:85:0d:80:a6:ec:03:5c:90:85:a8:ed:16:18:fb:fc:8a:
         22:89:3c:28:a0:8b:f5:10:32:c0:96:bd:50:5d:df:ad:b7:7c:
         98:80:91:d0:e3:a6:16:4b:f4:b5:f2:e8:00:96:ff:03:bb:0f:
         c6:6a:4a:e5:c3:e7:70:f0:bf:4b:ec:fd:fe:44:de:fa:b7:ff:
         9b:e3:46:f5:6f:a0:c3:f9:99:fb:b4:08:9a:bc:32:f1:0f:d3:
         b4:79:08:c1:f2:bc:9c:0e:fa:64:d7:e9:de:dd:07:a1:af:1e:
         3e:47:95:8f:6d:58:05:36:26:db:90:4f:e1:b2:1b:ba:32:ec:
         c0:42:8a:89:26:51:87:b9:7a:e1:32:d8:ca:e3:80:79:3d:ea:
         99:be:04:49:74:74:94:fe:b5:3a:00:d9:ff:c1:ef:7f:fe:1d:
         1b:c6:90:71:7a:73:05:62:cd:ed:64:f3:cf:c8:ec:d9:fa:24:
         4d:26:63:bd:cc:01:9a:18:16:4e:74:d8:bb:ac:06:7f:a2:b3:
         9c:31:f3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:05:18 2026 by rpki-client