Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/323830343a323538303a65303a3a2f34332d3433203d3e20323634323834.roa
File:                     323830343a323538303a65303a3a2f34332d3433203d3e20323634323834.roa (raw, json)
Hash identifier:          sRV1qMEDw9BHOBuHdo8x4TwdAKOGq6rGq2g9RR4QsyI=
Subject key identifier:   A3:AD:9E:38:60:22:65:DF:FD:FC:95:48:77:77:05:22:3A:3B:FE:12
Certificate issuer:       /CN=D3674BC62244757D82BD45C85C9511AD511807E1
Certificate serial:       55763DD8842867DE618EE26488139B534D67B202
Authority key identifier: D3:67:4B:C6:22:44:75:7D:82:BD:45:C8:5C:95:11:AD:51:18:07:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3674BC62244757D82BD45C85C9511AD511807E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/323830343a323538303a65303a3a2f34332d3433203d3e20323634323834.roa
Signing time:             Mon 02 Mar 2026 22:47:57 +0000
ROA not before:           Mon 02 Mar 2026 22:42:57 +0000
ROA not after:            Mon 01 Mar 2027 22:47:57 +0000
asID:                     264284
IP address blocks:        2804:2580:e0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/D3674BC62244757D82BD45C85C9511AD511807E1.crl
                          rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/D3674BC62244757D82BD45C85C9511AD511807E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3674BC62244757D82BD45C85C9511AD511807E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 21:12:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:76:3d:d8:84:28:67:de:61:8e:e2:64:88:13:9b:53:4d:67:b2:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3674BC62244757D82BD45C85C9511AD511807E1
        Validity
            Not Before: Mar  2 22:42:57 2026 GMT
            Not After : Mar  1 22:47:57 2027 GMT
        Subject: CN=A3AD9E38602265DFFDFC9548777705223A3BFE12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:41:78:1a:ce:4c:cd:74:4d:e4:f4:58:a0:5f:
                    a1:10:88:c4:b6:83:34:e6:a4:d1:3e:e5:79:42:f4:
                    b5:74:77:ad:22:04:d3:3c:fb:a2:c5:e1:40:f7:49:
                    8c:3c:64:6e:1c:44:ca:fd:d8:1e:38:57:b6:ab:34:
                    b5:0a:01:29:7b:bb:09:fd:a2:58:fc:41:bb:0a:73:
                    e9:b2:1d:4a:5a:77:3c:d7:da:cc:ff:02:bd:cd:9c:
                    fa:13:5a:ec:b9:a2:76:e3:08:98:92:b4:2e:67:16:
                    ad:0c:5e:d7:5e:34:bd:79:aa:41:1f:ea:1a:69:d5:
                    e8:a9:bd:ac:c2:8b:7a:05:ef:43:6c:e4:53:ab:76:
                    c2:ca:1a:90:90:bc:8d:4a:f2:ec:68:69:94:78:ae:
                    12:2a:1a:9c:27:5e:36:aa:88:a7:af:81:73:ed:e9:
                    e8:22:bc:01:7b:5f:0b:ed:8d:a9:ff:e8:2b:d7:b3:
                    8e:90:d6:34:d2:b9:66:16:b9:87:b6:d0:de:77:dd:
                    c6:36:00:5b:73:56:78:2f:42:8e:e9:ef:3a:fa:81:
                    f8:e7:3b:90:b1:41:75:62:0c:9d:cf:92:49:1b:9d:
                    9d:b7:87:be:d0:76:05:ba:52:6a:3e:d1:79:27:00:
                    9e:6f:09:46:e9:b8:b4:19:65:f8:8b:2b:e7:16:c4:
                    1a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AD:9E:38:60:22:65:DF:FD:FC:95:48:77:77:05:22:3A:3B:FE:12
            X509v3 Authority Key Identifier:
                keyid:D3:67:4B:C6:22:44:75:7D:82:BD:45:C8:5C:95:11:AD:51:18:07:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/D3674BC62244757D82BD45C85C9511AD511807E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3674BC62244757D82BD45C85C9511AD511807E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/323830343a323538303a65303a3a2f34332d3433203d3e20323634323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2580:e0::/43

    Signature Algorithm: sha256WithRSAEncryption
         52:1d:1f:af:4c:bb:9d:91:21:5b:10:1e:00:c6:92:ee:c3:dd:
         4c:3e:eb:7b:4c:05:3c:0a:ca:c3:83:a9:9c:00:a6:e2:ac:68:
         77:62:f5:eb:c4:33:ea:f1:d8:d3:2c:61:d8:16:7e:d3:67:f6:
         4e:9d:64:76:ca:99:2d:bd:c6:e7:5a:73:18:02:e6:17:2c:5e:
         9b:04:98:81:dc:60:37:45:03:90:f9:10:99:bb:80:9b:1b:68:
         b7:ef:d8:40:1c:cb:67:fc:5b:e4:04:b7:ef:75:4e:7d:83:a2:
         54:0f:63:d8:1a:94:6d:3f:12:0b:ca:a4:f3:b5:57:fc:cf:16:
         4f:3c:02:21:d5:59:b9:5f:95:0a:c1:2a:6b:88:c4:0d:9e:3f:
         32:fe:4a:0c:d3:22:d2:19:73:ab:7c:25:bc:f6:19:75:0b:cd:
         94:fc:5c:d6:bf:c7:e2:67:d1:2a:3c:ba:09:06:31:0f:9c:51:
         ce:d0:84:72:77:02:f9:24:19:66:c5:67:3a:91:85:bb:0d:5a:
         ef:2e:0e:7f:62:ca:2e:4e:a6:5f:f9:aa:b8:cc:2a:fa:57:49:
         88:cb:a8:c1:2e:41:8e:2d:45:e3:59:a0:0f:45:13:bd:05:3b:
         ce:60:5a:0f:87:4a:f1:b4:ba:be:04:40:ac:4c:0a:6d:ba:85:
         30:0f:6b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:53:37 2026 by rpki-client