Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J8eWCSkyVEg9jcu5vNLAKjJYfyMcdERTDm3DUd761e4X/0/323830343a373066383a3a2f33322d3438203d3e20323730373539.roa
File:                     323830343a373066383a3a2f33322d3438203d3e20323730373539.roa (raw, json)
Hash identifier:          kFBVIJ25qa31N6shQIA8jkv097h3g1GZ+uLJtSDhCHs=
Subject key identifier:   9A:D5:1B:0F:FA:F4:4F:55:BA:1A:57:14:D3:04:1C:C6:22:CC:B9:2B
Certificate issuer:       /CN=C390EE5683766E7B11B07016C9BE230069339A91
Certificate serial:       030D3A3CE4B05711A4C37A00199246435A2E6D64
Authority key identifier: C3:90:EE:56:83:76:6E:7B:11:B0:70:16:C9:BE:23:00:69:33:9A:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C390EE5683766E7B11B07016C9BE230069339A91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8eWCSkyVEg9jcu5vNLAKjJYfyMcdERTDm3DUd761e4X/0/323830343a373066383a3a2f33322d3438203d3e20323730373539.roa
Signing time:             Sun 08 Mar 2026 11:19:31 +0000
ROA not before:           Sun 08 Mar 2026 11:14:31 +0000
ROA not after:            Sun 07 Mar 2027 11:19:31 +0000
asID:                     270759
IP address blocks:        2804:70f8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J8eWCSkyVEg9jcu5vNLAKjJYfyMcdERTDm3DUd761e4X/0/C390EE5683766E7B11B07016C9BE230069339A91.crl
                          rsync://rpki-repo.registro.br/repo/J8eWCSkyVEg9jcu5vNLAKjJYfyMcdERTDm3DUd761e4X/0/C390EE5683766E7B11B07016C9BE230069339A91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C390EE5683766E7B11B07016C9BE230069339A91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 18:14:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:0d:3a:3c:e4:b0:57:11:a4:c3:7a:00:19:92:46:43:5a:2e:6d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C390EE5683766E7B11B07016C9BE230069339A91
        Validity
            Not Before: Mar  8 11:14:31 2026 GMT
            Not After : Mar  7 11:19:31 2027 GMT
        Subject: CN=9AD51B0FFAF44F55BA1A5714D3041CC622CCB92B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:60:0e:87:98:c3:f8:e5:a3:52:ad:45:6c:c0:
                    79:5d:15:e2:61:70:fa:81:15:46:ed:79:60:96:36:
                    34:11:41:db:aa:2d:57:5a:f6:dc:9c:13:cd:d8:5f:
                    b6:ea:f1:25:53:bb:ca:9e:60:15:7f:a8:60:75:ef:
                    b1:ab:5e:af:0f:2d:b1:c9:95:5f:ae:73:de:b0:2b:
                    a9:60:26:78:4b:74:7f:9b:77:48:a4:c9:64:2c:f4:
                    25:a1:2d:04:3e:0d:d2:9d:1e:89:e3:40:ea:a7:5d:
                    cf:f5:49:e6:c0:be:ad:7a:5d:a7:1a:0b:3e:0a:68:
                    59:76:77:54:f9:ac:35:53:67:52:54:8c:46:79:83:
                    b6:fb:5a:0a:0b:79:da:94:ed:e0:70:9c:17:29:52:
                    ef:10:56:38:1b:64:19:d3:0d:75:42:6d:14:6e:f1:
                    96:f4:57:0e:88:87:45:a7:29:1e:7b:03:3d:ec:2c:
                    51:b8:a2:9d:c3:73:bc:05:51:e2:15:e6:30:64:fc:
                    e7:81:3a:a4:61:5d:07:e2:9f:98:c4:db:8d:c9:d9:
                    ee:68:35:f8:65:44:16:00:a1:8f:61:50:a7:e0:1f:
                    96:07:0e:35:8a:7c:3d:86:27:7f:bb:e3:84:71:1d:
                    a9:eb:3b:10:0a:fe:01:41:83:50:93:e0:3c:90:67:
                    7b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D5:1B:0F:FA:F4:4F:55:BA:1A:57:14:D3:04:1C:C6:22:CC:B9:2B
            X509v3 Authority Key Identifier:
                keyid:C3:90:EE:56:83:76:6E:7B:11:B0:70:16:C9:BE:23:00:69:33:9A:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8eWCSkyVEg9jcu5vNLAKjJYfyMcdERTDm3DUd761e4X/0/C390EE5683766E7B11B07016C9BE230069339A91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C390EE5683766E7B11B07016C9BE230069339A91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8eWCSkyVEg9jcu5vNLAKjJYfyMcdERTDm3DUd761e4X/0/323830343a373066383a3a2f33322d3438203d3e20323730373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:4c:33:15:5b:af:5f:6e:80:99:ac:28:b6:b1:57:2f:2b:0b:
         96:81:f9:3d:bf:16:ba:20:11:97:df:bb:74:f0:fa:21:d0:cb:
         97:45:cd:46:f7:eb:e4:85:9b:5d:7b:7b:61:83:2a:c2:2f:8f:
         d3:60:d4:4a:78:44:5c:f8:04:a2:9b:d8:f2:d3:74:94:7f:b9:
         b1:bd:14:a7:61:f1:1e:dd:c1:27:b6:7d:0f:84:d0:07:a3:19:
         d7:33:f2:2c:f2:f1:97:65:cf:cd:08:0c:43:b2:2c:f1:22:14:
         2e:23:6c:74:d0:88:3a:95:02:1e:3f:9b:39:bc:5c:49:d4:42:
         e2:3e:d7:99:6f:ab:fb:49:c7:a4:34:18:8c:1e:56:41:e0:c1:
         6e:29:69:4d:a2:ec:d6:95:c2:a2:df:8d:87:b2:43:dc:59:d9:
         27:79:fa:26:90:30:f7:3b:34:8f:4b:cc:69:a7:21:9b:d4:f1:
         90:79:e5:f6:b4:e7:18:f6:f4:31:d9:cd:1f:d5:3c:7b:11:18:
         fa:6d:b3:7a:ec:30:0b:bc:da:25:dc:36:c9:d0:2c:bb:9e:4e:
         e7:16:a0:18:75:6f:e1:c1:05:c7:8f:c7:d8:52:30:2a:d1:c7:
         8c:5e:20:59:36:f7:6b:6e:0b:00:ea:1e:b9:bf:74:17:c1:04:
         2b:7d:6b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:52:08 2026 by rpki-client