Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/323830343a386562383a3a2f33322d3332203d3e20323733343434.roa
File:                     323830343a386562383a3a2f33322d3332203d3e20323733343434.roa (raw, json)
Hash identifier:          j2nvXVWMkrXd/qLn7u1Kfx8EAARl2P/noaeCjosfhoA=
Subject key identifier:   D3:FB:A0:C6:26:DF:E8:A6:C8:F2:78:DA:77:CF:D5:F0:CE:3B:E8:F0
Certificate issuer:       /CN=B692A7E1C30A97E42D9E84CE0FC4E7E90719130F
Certificate serial:       0AE121C53ED245484B6F603E85E1DD5161D8A346
Authority key identifier: B6:92:A7:E1:C3:0A:97:E4:2D:9E:84:CE:0F:C4:E7:E9:07:19:13:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/323830343a386562383a3a2f33322d3332203d3e20323733343434.roa
Signing time:             Tue 11 Nov 2025 15:47:51 +0000
ROA not before:           Tue 11 Nov 2025 15:42:51 +0000
ROA not after:            Tue 10 Nov 2026 15:47:51 +0000
asID:                     273444
IP address blocks:        2804:8eb8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.crl
                          rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 12:05:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e1:21:c5:3e:d2:45:48:4b:6f:60:3e:85:e1:dd:51:61:d8:a3:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B692A7E1C30A97E42D9E84CE0FC4E7E90719130F
        Validity
            Not Before: Nov 11 15:42:51 2025 GMT
            Not After : Nov 10 15:47:51 2026 GMT
        Subject: CN=D3FBA0C626DFE8A6C8F278DA77CFD5F0CE3BE8F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:02:ab:98:a9:ea:29:cd:fa:db:fa:9e:9b:9b:
                    b2:34:cd:e5:7e:99:d4:bd:da:e2:2e:fe:34:5e:0a:
                    f7:40:4a:94:6a:f6:97:d6:bb:22:fa:63:2d:07:9d:
                    8d:6c:47:a7:55:4e:eb:d6:d4:19:bb:b8:0c:32:a9:
                    ab:d5:f0:9f:77:4b:94:55:fa:a6:c6:68:43:10:d1:
                    b4:49:b6:82:93:cd:f1:3b:13:56:42:b6:c6:e3:24:
                    df:99:a7:37:83:69:59:7d:16:91:35:7e:25:06:5d:
                    9f:f8:b2:d1:78:2b:de:a4:75:8d:4f:69:ae:2b:0a:
                    65:ec:ab:51:73:a8:5d:aa:f3:2d:ad:a8:9a:6e:2d:
                    65:a0:e3:fd:16:c1:5c:9b:4b:73:44:ea:3c:3f:50:
                    a9:c1:14:94:22:ff:d1:c9:6f:e9:47:62:5f:b7:4f:
                    bb:bb:77:38:98:e1:af:cb:9e:d2:e3:b5:05:b4:58:
                    9b:4c:49:59:a2:3f:28:ce:3c:ce:8b:7a:58:16:14:
                    3c:fa:7e:1a:08:36:c1:56:da:4f:15:c4:47:1a:c0:
                    4a:3c:9a:61:38:12:89:15:88:02:9b:1c:ad:7f:3e:
                    09:da:a5:aa:b3:21:95:38:8d:96:16:1e:d4:e9:92:
                    54:5d:0d:18:e9:ee:a9:18:65:cc:2c:92:60:b7:62:
                    d1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FB:A0:C6:26:DF:E8:A6:C8:F2:78:DA:77:CF:D5:F0:CE:3B:E8:F0
            X509v3 Authority Key Identifier:
                keyid:B6:92:A7:E1:C3:0A:97:E4:2D:9E:84:CE:0F:C4:E7:E9:07:19:13:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/323830343a386562383a3a2f33322d3332203d3e20323733343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8eb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:9e:d0:86:44:29:1a:5d:1b:84:d2:c6:83:a3:b1:a7:75:a0:
         27:97:90:ca:42:64:89:7e:d4:b4:dc:43:c3:32:f3:8d:4c:68:
         da:3d:ca:ee:3c:e4:2a:86:8d:73:ee:e3:d8:ac:f0:e8:a2:1a:
         3d:44:8c:30:ea:b0:74:e6:8c:30:bb:e7:cc:7e:ff:69:6d:b4:
         fb:75:86:1f:29:17:55:24:2f:72:bc:a4:e1:dd:10:3c:11:4a:
         b2:16:8d:75:70:5d:59:8c:12:ef:6a:f0:4e:d2:75:db:0e:f3:
         63:da:4d:4c:8b:22:a7:6a:04:07:27:d9:f4:8e:c5:e6:4a:91:
         b4:c2:0d:49:04:c3:aa:80:4c:3e:24:b9:e9:24:18:e2:f8:3b:
         3b:76:2e:ea:8b:82:92:f3:05:df:7a:07:63:a6:b5:71:7b:05:
         76:51:c6:d0:56:f9:fc:c6:52:c9:1b:dd:7f:ef:b7:6e:f1:b7:
         a7:a1:f4:2c:c8:78:d2:78:00:dc:e2:19:bd:31:b8:b4:28:59:
         88:d9:5b:4c:4a:0c:cc:91:27:66:2e:d1:60:36:f8:d2:eb:a3:
         49:42:82:32:b4:c6:ea:1e:ce:9d:0c:05:dc:e6:ab:92:9f:2f:
         fb:74:08:94:88:ea:be:48:ef:20:92:ee:16:2e:f7:3f:2b:f0:
         25:af:54:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:38:59 2026 by rpki-client