Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/323830343a313838303a383030303a3a2f33332d3333203d3e203631393336.roa
File:                     323830343a313838303a383030303a3a2f33332d3333203d3e203631393336.roa (raw, json)
Hash identifier:          0yWD5bcv2tii7mPN5WyC4X3gwOKnbeXmnx8g0dK9Hi4=
Subject key identifier:   4A:EC:81:9A:50:73:42:E5:4F:E8:55:66:50:A3:6E:1A:F0:07:62:1A
Certificate issuer:       /CN=422625563D5C776AFD91FC7267113152605F299D
Certificate serial:       7DC22B0C5D4E1B3D200DD0EE4F4F396B6BC7F3C5
Authority key identifier: 42:26:25:56:3D:5C:77:6A:FD:91:FC:72:67:11:31:52:60:5F:29:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/422625563D5C776AFD91FC7267113152605F299D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/323830343a313838303a383030303a3a2f33332d3333203d3e203631393336.roa
Signing time:             Thu 19 Mar 2026 18:12:13 +0000
ROA not before:           Thu 19 Mar 2026 18:07:13 +0000
ROA not after:            Thu 18 Mar 2027 18:12:13 +0000
asID:                     61936
IP address blocks:        2804:1880:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/422625563D5C776AFD91FC7267113152605F299D.crl
                          rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/422625563D5C776AFD91FC7267113152605F299D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/422625563D5C776AFD91FC7267113152605F299D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 07:33:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:c2:2b:0c:5d:4e:1b:3d:20:0d:d0:ee:4f:4f:39:6b:6b:c7:f3:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=422625563D5C776AFD91FC7267113152605F299D
        Validity
            Not Before: Mar 19 18:07:13 2026 GMT
            Not After : Mar 18 18:12:13 2027 GMT
        Subject: CN=4AEC819A507342E54FE8556650A36E1AF007621A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b9:6f:6d:0a:5c:14:cb:9d:ad:52:e6:57:ed:
                    ea:de:2e:ab:f6:48:78:d2:d7:0c:14:e4:e0:cc:56:
                    c2:a9:96:39:9e:ff:fb:a7:5f:1d:a5:e6:f4:5a:e8:
                    5e:63:e2:fa:60:93:27:ea:61:b0:30:db:96:c1:0d:
                    26:e0:62:bd:6a:a3:08:03:06:4d:c0:cc:bb:ed:98:
                    9a:e0:62:b8:b3:81:11:b3:60:d8:82:4f:31:92:f7:
                    33:13:94:52:76:4b:81:79:1d:61:22:20:51:62:5d:
                    fa:59:66:ba:4f:ae:ff:84:71:76:ae:91:c7:d1:50:
                    f7:0a:6f:05:55:29:04:b1:e3:e2:5b:bd:0f:7b:5b:
                    1f:64:75:b9:b0:bd:01:3c:0e:37:e8:74:88:92:4a:
                    87:fd:8a:2e:91:dc:3a:20:a8:5a:84:01:a8:cf:65:
                    9c:86:6f:b9:38:8f:96:8c:3f:5f:2d:2b:42:b2:86:
                    d9:47:df:19:a4:b8:77:a3:48:c8:fa:38:6f:01:42:
                    92:03:45:4d:c9:88:b1:55:d6:29:67:0c:6d:c4:a8:
                    e8:38:7b:b1:29:ab:75:52:ca:35:62:87:e0:26:d4:
                    a5:27:c1:a8:24:bb:e0:39:65:8f:f0:6c:f8:e5:86:
                    df:2d:ef:bc:e0:7c:ae:5c:ce:bf:ac:f4:e6:f4:13:
                    77:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:EC:81:9A:50:73:42:E5:4F:E8:55:66:50:A3:6E:1A:F0:07:62:1A
            X509v3 Authority Key Identifier:
                keyid:42:26:25:56:3D:5C:77:6A:FD:91:FC:72:67:11:31:52:60:5F:29:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/422625563D5C776AFD91FC7267113152605F299D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/422625563D5C776AFD91FC7267113152605F299D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/323830343a313838303a383030303a3a2f33332d3333203d3e203631393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1880:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         9d:e4:51:33:03:7f:61:e7:5f:bf:1d:28:e2:e2:f5:bc:38:4e:
         9a:ea:e9:13:a8:bb:61:ce:04:9a:08:15:45:86:30:8f:fa:6d:
         01:26:b3:c9:c8:23:62:40:a2:1e:0b:99:d0:a9:db:76:37:b2:
         6d:47:f1:33:ee:62:e3:1a:fc:e1:90:95:a9:32:1b:c9:fe:af:
         ed:12:08:48:84:99:3b:d7:5c:29:0c:b0:03:6c:5f:a1:cd:3b:
         68:6a:23:c6:3d:55:2c:c5:82:4f:0f:34:f2:6e:04:29:94:26:
         42:d4:e6:30:c0:d3:5c:35:bd:50:f1:00:0d:68:43:53:ef:fa:
         80:bd:6a:69:7e:3c:b6:0f:b4:05:49:70:b3:ba:a5:8f:d0:f9:
         4d:79:41:00:f7:7b:31:31:66:d6:f6:cf:c0:29:de:d0:81:20:
         08:c8:f1:d1:39:cc:04:ca:5f:09:b6:cd:ea:bf:ad:09:ab:35:
         cd:29:73:31:1d:47:ea:b0:46:a3:c9:9c:f9:4a:22:95:b5:83:
         58:b7:85:7d:45:d7:92:20:9f:6d:d5:22:8c:3a:06:78:35:67:
         23:01:e7:23:a5:ac:c1:ef:ad:dd:8b:92:b8:f0:dc:50:23:41:
         91:74:2f:44:59:46:c5:2c:5b:23:de:6a:9d:4e:23:19:dd:c6:
         31:d0:e0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:19:39 2026 by rpki-client