Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/323830343a373763633a313a3a2f34382d3438203d3e20323731323030.roa
File:                     323830343a373763633a313a3a2f34382d3438203d3e20323731323030.roa (raw, json)
Hash identifier:          dNEwtp8btN1QRhXNu6FXRS19lvsSS9Peq/DIWKF3i+g=
Subject key identifier:   B7:32:67:00:FE:90:89:20:F2:F7:DA:B5:D1:60:50:1B:FD:88:CE:64
Certificate issuer:       /CN=00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F
Certificate serial:       3E4E16895CA37A5E0399EEEE6DD8D03942DD0957
Authority key identifier: 00:06:2F:0C:CB:27:4A:AB:3B:E9:5F:0D:A0:FA:1F:54:CF:F4:65:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/323830343a373763633a313a3a2f34382d3438203d3e20323731323030.roa
Signing time:             Mon 23 Mar 2026 17:09:55 +0000
ROA not before:           Mon 23 Mar 2026 17:04:55 +0000
ROA not after:            Mon 22 Mar 2027 17:09:55 +0000
asID:                     271200
IP address blocks:        2804:77cc:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F.crl
                          rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 20:13:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:4e:16:89:5c:a3:7a:5e:03:99:ee:ee:6d:d8:d0:39:42:dd:09:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F
        Validity
            Not Before: Mar 23 17:04:55 2026 GMT
            Not After : Mar 22 17:09:55 2027 GMT
        Subject: CN=B7326700FE908920F2F7DAB5D160501BFD88CE64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a8:ef:96:45:f2:4a:28:38:0a:f0:1c:2b:0e:
                    8b:05:7c:81:4d:c1:45:46:2b:66:76:6d:68:72:d2:
                    98:34:5f:20:2d:b9:d5:cb:cd:fa:71:0d:e8:46:d1:
                    9c:2b:d8:d0:9b:de:b9:d9:ca:05:6d:47:72:50:0d:
                    08:4c:49:3e:cb:41:14:40:8c:6b:de:65:4b:f3:8b:
                    ba:dc:7e:e1:e0:58:65:b9:88:c0:c3:86:e3:68:7a:
                    33:07:9e:ed:e4:f4:64:32:de:ea:d9:79:9a:2e:7e:
                    d8:b3:e9:19:42:0d:fe:d2:7e:03:b8:ee:5b:59:7f:
                    23:36:78:ec:ec:93:38:30:62:61:10:06:7a:1a:2b:
                    54:5d:c2:fb:e4:b5:d9:3e:33:97:76:ca:f9:dc:6d:
                    d4:ce:04:37:22:8c:8c:54:b3:4c:86:b2:0b:f5:65:
                    ba:06:ac:74:87:83:0c:7a:e6:c0:2e:9f:6d:35:b1:
                    d7:6c:83:e7:da:7c:59:c2:4e:ae:31:bb:93:cc:1a:
                    81:e8:bc:e6:54:e1:bb:50:6d:7c:ad:c1:7c:cf:8d:
                    8a:08:a2:42:10:cc:0e:43:58:af:d1:87:26:b9:f5:
                    fc:97:f1:82:fd:48:fa:81:f9:8d:05:25:cd:e8:73:
                    2a:61:a6:b3:61:e0:4f:aa:2a:c5:53:ff:28:f0:f4:
                    d6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:32:67:00:FE:90:89:20:F2:F7:DA:B5:D1:60:50:1B:FD:88:CE:64
            X509v3 Authority Key Identifier:
                keyid:00:06:2F:0C:CB:27:4A:AB:3B:E9:5F:0D:A0:FA:1F:54:CF:F4:65:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/323830343a373763633a313a3a2f34382d3438203d3e20323731323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:77cc:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:fd:af:43:17:69:9a:38:91:01:95:09:6e:35:59:5f:71:f7:
         77:ff:1c:dd:33:57:2c:46:b1:e5:bd:fd:ae:78:ab:c8:9b:2e:
         44:4b:51:61:72:83:0d:82:ff:73:07:8c:8f:c5:27:f0:a3:12:
         c4:cd:c2:73:d1:37:ce:81:0d:e3:00:c1:7b:b5:af:c8:96:95:
         00:86:76:9b:2b:07:4e:51:38:ec:9a:1f:65:06:9c:ab:e7:65:
         b7:7d:74:4a:0d:a4:d7:f6:7e:83:af:5f:cc:d5:ff:cd:65:3d:
         97:c6:fc:a0:2f:6d:62:b2:64:ef:7c:71:79:ce:b7:68:37:88:
         84:e2:9b:4a:7c:3d:6f:cf:9b:2c:1a:d8:a6:b0:f6:04:40:f1:
         45:4d:f2:ec:a3:ac:e5:ac:d8:70:f5:ec:58:f5:70:8d:39:9c:
         b9:23:1f:21:c2:fe:79:22:32:9c:f8:99:ac:63:92:12:f5:07:
         51:ea:5a:53:45:cb:95:74:34:b6:0c:d5:19:d8:ed:ce:92:4f:
         7c:4a:3a:03:cc:ca:65:a5:65:2a:f5:d3:34:6e:ee:f2:af:7f:
         07:21:9a:06:50:ac:c5:cf:94:b9:02:66:14:b0:84:6b:5a:e2:
         e1:c1:4b:63:ef:38:28:54:38:9c:b9:8b:76:86:88:7a:0c:4b:
         04:ec:a6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:52:29 2026 by rpki-client