Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/323830343a386562383a3a2f33342d3334203d3e20323733343434.roa
File:                     323830343a386562383a3a2f33342d3334203d3e20323733343434.roa (raw, json)
Hash identifier:          YbNaVtBXZ6tzitkB6UPOBR3jdyA0r7Uu2yfPvCtTI1o=
Subject key identifier:   E0:C2:33:14:9C:7C:A1:F2:2E:1C:93:4E:4A:E5:7A:AB:13:F7:51:4E
Certificate issuer:       /CN=B692A7E1C30A97E42D9E84CE0FC4E7E90719130F
Certificate serial:       14CF881859BB409312866177ABEEC5A9EE9F573C
Authority key identifier: B6:92:A7:E1:C3:0A:97:E4:2D:9E:84:CE:0F:C4:E7:E9:07:19:13:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/323830343a386562383a3a2f33342d3334203d3e20323733343434.roa
Signing time:             Tue 11 Nov 2025 15:47:50 +0000
ROA not before:           Tue 11 Nov 2025 15:42:50 +0000
ROA not after:            Tue 10 Nov 2026 15:47:50 +0000
asID:                     273444
IP address blocks:        2804:8eb8::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.crl
                          rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 07:18:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:cf:88:18:59:bb:40:93:12:86:61:77:ab:ee:c5:a9:ee:9f:57:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B692A7E1C30A97E42D9E84CE0FC4E7E90719130F
        Validity
            Not Before: Nov 11 15:42:50 2025 GMT
            Not After : Nov 10 15:47:50 2026 GMT
        Subject: CN=E0C233149C7CA1F22E1C934E4AE57AAB13F7514E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bc:36:82:4d:2f:eb:3d:cd:a4:ae:1b:61:47:
                    74:3c:a4:95:3f:92:e9:97:54:f0:4f:2b:48:23:4a:
                    fa:74:e6:a5:66:e4:51:ce:3b:8d:8b:6d:28:2c:20:
                    57:25:e0:6e:61:95:f7:3b:91:b6:15:66:ee:ca:90:
                    64:12:5c:e2:8d:97:b4:fe:d0:f8:93:be:dd:60:88:
                    2c:0e:a7:c0:9d:45:ff:65:17:c4:85:f9:b4:52:ba:
                    ac:37:66:f2:ed:fa:f8:4f:45:a1:10:b5:c2:fd:e7:
                    16:7a:b3:4d:20:23:f9:9f:9d:60:5b:f0:7b:d1:ea:
                    d5:7e:b8:0c:17:6b:f8:a7:e1:42:c4:10:bd:0e:5b:
                    ec:ed:91:c0:2a:70:38:c1:d8:65:f3:88:26:c1:13:
                    98:ea:65:21:04:0c:00:bd:1d:4d:6b:1e:22:95:01:
                    65:f4:3e:b4:2c:3a:48:03:01:88:d2:97:c8:db:85:
                    54:67:cf:c8:5e:24:3f:d3:6e:5e:3e:85:cb:be:6b:
                    11:f8:fe:54:49:11:14:1a:4f:e0:a6:63:6b:1d:d6:
                    64:a3:41:08:f6:78:f1:98:51:16:da:c5:52:0a:86:
                    dc:bc:3c:bc:c4:f5:29:e7:f6:9b:9c:73:72:5b:74:
                    14:f6:41:82:69:4e:6c:86:17:65:8c:46:c5:c9:50:
                    e8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C2:33:14:9C:7C:A1:F2:2E:1C:93:4E:4A:E5:7A:AB:13:F7:51:4E
            X509v3 Authority Key Identifier:
                keyid:B6:92:A7:E1:C3:0A:97:E4:2D:9E:84:CE:0F:C4:E7:E9:07:19:13:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/323830343a386562383a3a2f33342d3334203d3e20323733343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8eb8::/34

    Signature Algorithm: sha256WithRSAEncryption
         b2:10:b1:8e:21:41:19:25:56:14:38:8a:15:80:6e:d2:7d:a9:
         7c:ec:a8:54:71:8a:22:45:a3:2b:b5:aa:e8:f0:d3:29:52:e4:
         2e:cd:7c:97:65:c8:4f:d6:44:34:c9:89:a5:46:06:fa:4a:84:
         b4:1d:a3:53:98:dc:fd:c4:50:d9:a1:e6:71:97:1d:43:a5:bd:
         16:66:af:55:f7:d5:8d:ce:a1:94:ae:df:e7:23:ca:2e:4d:c5:
         2b:40:59:78:d6:7c:53:a1:ec:8a:aa:c3:a4:64:19:b0:49:08:
         da:45:f6:50:7e:71:9d:e6:24:24:7e:44:1d:d4:6a:8a:6f:e5:
         53:92:d8:ee:dd:5d:19:f3:ff:86:27:12:00:4a:87:f2:f5:c7:
         26:16:fb:f7:fb:0a:f0:e4:c6:ab:bc:c5:d6:b5:ab:6d:da:5b:
         5a:d2:bc:de:85:fd:0c:21:74:b8:8a:ab:19:23:a7:e4:26:a5:
         a1:12:59:ce:ca:2c:0a:40:53:23:4a:1a:04:90:7f:d7:f4:79:
         3b:91:0c:5f:87:d7:f9:c2:14:16:20:ad:b9:4e:c1:a0:be:6e:
         4c:54:a2:9a:30:6e:ce:40:4b:59:0d:f8:d8:b4:37:59:76:c1:
         41:90:2e:f7:5a:3b:a3:24:e1:3b:4f:e6:bb:04:54:4f:32:fe:
         37:57:24:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:43:17 2026 by rpki-client