Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/323830343a313838303a3a2f33332d3333203d3e203631393336.roa
File:                     323830343a313838303a3a2f33332d3333203d3e203631393336.roa (raw, json)
Hash identifier:          /3/OJgJ8+LLgOnty5Slm9oGHJNWiK3pIsy4J6fk8dlk=
Subject key identifier:   B6:DB:89:E0:1E:2B:D9:58:6E:C5:B3:A9:D6:20:EF:1F:DF:5D:3D:C1
Certificate issuer:       /CN=422625563D5C776AFD91FC7267113152605F299D
Certificate serial:       107311BCFA365EAE5A81A167CD33B7CB64C889FB
Authority key identifier: 42:26:25:56:3D:5C:77:6A:FD:91:FC:72:67:11:31:52:60:5F:29:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/422625563D5C776AFD91FC7267113152605F299D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/323830343a313838303a3a2f33332d3333203d3e203631393336.roa
Signing time:             Thu 19 Mar 2026 18:12:14 +0000
ROA not before:           Thu 19 Mar 2026 18:07:14 +0000
ROA not after:            Thu 18 Mar 2027 18:12:14 +0000
asID:                     61936
IP address blocks:        2804:1880::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/422625563D5C776AFD91FC7267113152605F299D.crl
                          rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/422625563D5C776AFD91FC7267113152605F299D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/422625563D5C776AFD91FC7267113152605F299D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 07:33:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:73:11:bc:fa:36:5e:ae:5a:81:a1:67:cd:33:b7:cb:64:c8:89:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=422625563D5C776AFD91FC7267113152605F299D
        Validity
            Not Before: Mar 19 18:07:14 2026 GMT
            Not After : Mar 18 18:12:14 2027 GMT
        Subject: CN=B6DB89E01E2BD9586EC5B3A9D620EF1FDF5D3DC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:76:b2:01:c4:c6:e1:b0:16:60:e2:a8:80:83:
                    7b:ae:cb:04:ad:59:7e:30:79:d3:54:ff:2f:52:37:
                    a5:99:67:e3:f3:5e:0b:b1:28:17:e8:31:89:fb:a0:
                    92:53:d0:91:91:76:a9:d2:71:4b:04:83:b5:47:1b:
                    00:07:65:eb:6e:80:db:4e:be:c2:da:20:09:d7:d4:
                    d5:3e:e1:1c:b1:d6:32:5a:9e:eb:52:30:90:c8:cc:
                    82:83:25:a0:5c:e0:71:d8:12:a9:fe:0e:4a:78:30:
                    04:a1:9b:47:ba:12:c8:76:bc:3e:ac:d1:c0:1a:7e:
                    c5:b8:76:4c:1f:c4:5d:eb:d7:c7:03:b1:8b:a4:ad:
                    76:cd:4c:6a:bb:47:24:53:67:d8:96:96:dc:8f:e8:
                    92:24:c5:f0:82:61:04:f7:50:a4:ba:3f:98:b0:36:
                    82:da:f6:59:d9:3d:24:e0:c7:48:2a:4e:dd:c2:8c:
                    b0:98:fa:84:4e:f3:f5:9b:43:e7:0f:fd:e9:0e:07:
                    b3:d6:58:35:8f:e8:f4:b8:fe:93:b1:51:8c:3e:b8:
                    bb:5d:bf:1d:20:7f:cb:98:61:06:5e:69:a9:68:1f:
                    f3:66:aa:24:d3:8b:8b:81:72:01:c0:d5:86:84:23:
                    0d:bd:d4:8c:ad:a9:e3:99:92:bc:bd:55:4e:8a:b6:
                    61:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:DB:89:E0:1E:2B:D9:58:6E:C5:B3:A9:D6:20:EF:1F:DF:5D:3D:C1
            X509v3 Authority Key Identifier:
                keyid:42:26:25:56:3D:5C:77:6A:FD:91:FC:72:67:11:31:52:60:5F:29:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/422625563D5C776AFD91FC7267113152605F299D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/422625563D5C776AFD91FC7267113152605F299D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/323830343a313838303a3a2f33332d3333203d3e203631393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1880::/33

    Signature Algorithm: sha256WithRSAEncryption
         a1:28:8b:40:9f:31:d0:12:5d:3e:3b:b3:f8:aa:db:95:44:29:
         dd:04:56:8f:2f:5c:12:55:df:f4:85:3e:41:d6:a1:15:aa:e7:
         83:d8:8f:c9:e0:80:ec:3a:a6:72:fe:dc:6c:6a:42:de:94:7a:
         d1:73:4a:30:12:23:d3:84:e4:de:27:20:ee:5c:33:9b:4b:49:
         ef:3b:ea:f8:27:ed:b1:fc:cc:56:59:99:5f:47:25:94:8c:97:
         02:cb:91:1d:d2:c6:15:0a:7c:83:30:44:16:a9:01:30:02:0d:
         77:fe:2e:ab:da:f5:49:66:23:b6:04:93:0e:cc:75:2c:b6:e6:
         a4:95:ef:e9:db:dc:98:97:d4:d4:1e:a7:84:b4:7f:37:e1:bb:
         4f:8e:ee:1a:3f:7c:89:e4:68:ba:8b:6a:0f:ab:61:ce:62:80:
         b6:60:2a:21:45:d7:8f:da:4c:be:a8:50:a7:58:86:31:a1:be:
         64:0c:10:93:d7:1f:41:bb:4d:c6:10:34:2b:7d:ad:d8:3d:67:
         dc:ff:cd:08:04:8c:41:1d:df:63:c6:5d:e6:05:9c:2e:73:35:
         32:4c:84:1e:31:af:16:e9:82:24:80:14:f2:25:28:a1:54:c3:
         c9:95:fe:64:c9:13:40:10:08:4b:f0:a8:39:0a:69:e7:5b:04:
         68:cf:7e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:52:40 2026 by rpki-client