Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/323830343a373763633a3a2f34382d3438203d3e20323731323030.roa
File:                     323830343a373763633a3a2f34382d3438203d3e20323731323030.roa (raw, json)
Hash identifier:          L/HpYTEzbuzGKVuyZwSsniTgmAjkI6lJWj6zIOgZqzY=
Subject key identifier:   9C:33:F6:87:EE:D0:26:C2:E1:4E:32:C5:0E:E0:91:00:AA:CE:8D:E1
Certificate issuer:       /CN=00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F
Certificate serial:       553E4E7FAFD899B876574BDEA190F3CF0B4FCAFA
Authority key identifier: 00:06:2F:0C:CB:27:4A:AB:3B:E9:5F:0D:A0:FA:1F:54:CF:F4:65:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/323830343a373763633a3a2f34382d3438203d3e20323731323030.roa
Signing time:             Mon 23 Mar 2026 17:09:51 +0000
ROA not before:           Mon 23 Mar 2026 17:04:51 +0000
ROA not after:            Mon 22 Mar 2027 17:09:51 +0000
asID:                     271200
IP address blocks:        2804:77cc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F.crl
                          rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:3e:4e:7f:af:d8:99:b8:76:57:4b:de:a1:90:f3:cf:0b:4f:ca:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F
        Validity
            Not Before: Mar 23 17:04:51 2026 GMT
            Not After : Mar 22 17:09:51 2027 GMT
        Subject: CN=9C33F687EED026C2E14E32C50EE09100AACE8DE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2c:85:10:38:38:84:33:2f:b1:6a:2d:9f:31:
                    0c:8f:d3:3c:18:9c:22:63:12:d1:34:c9:c3:9b:39:
                    04:2d:9d:46:56:3a:a7:26:8a:f6:80:eb:1f:74:a1:
                    3e:51:3d:bf:52:c3:dd:60:93:e5:3c:7c:f5:89:b0:
                    16:33:be:ad:07:77:36:b6:38:83:0f:be:ea:d6:ed:
                    f0:68:29:9f:f6:ac:a3:f8:2b:6a:8c:37:a9:fb:d5:
                    2d:b0:d2:a3:66:ef:ac:0c:8e:dc:3c:a1:68:84:4b:
                    94:52:cf:17:e5:ea:0e:02:04:bb:bd:75:4e:47:94:
                    27:84:d9:55:28:c9:4f:83:af:23:a5:ea:44:93:2f:
                    dd:c8:92:2d:27:64:20:3b:c8:4c:71:3a:fb:b7:0a:
                    2c:2e:62:3a:f2:73:ef:90:f6:77:46:02:7e:96:07:
                    d5:0f:f8:70:31:74:26:06:66:83:b7:64:e0:6e:b5:
                    32:8b:35:86:62:11:db:2d:d7:68:62:64:f7:0f:09:
                    1c:4c:5c:48:24:76:2a:0a:57:27:8b:5c:d5:16:66:
                    8d:e3:4f:25:17:c1:01:47:9a:4e:f2:3e:7a:0c:63:
                    8f:34:95:e9:53:7c:88:f2:3f:e2:d7:5c:76:9b:59:
                    57:56:8e:c9:67:f3:e8:86:48:1d:fc:64:0b:12:fc:
                    56:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:33:F6:87:EE:D0:26:C2:E1:4E:32:C5:0E:E0:91:00:AA:CE:8D:E1
            X509v3 Authority Key Identifier:
                keyid:00:06:2F:0C:CB:27:4A:AB:3B:E9:5F:0D:A0:FA:1F:54:CF:F4:65:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/323830343a373763633a3a2f34382d3438203d3e20323731323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:77cc::/48

    Signature Algorithm: sha256WithRSAEncryption
         c3:cc:cd:2b:22:a0:81:8c:ca:6e:95:50:4f:e7:57:cb:79:64:
         dd:50:ce:e1:04:1b:c6:8d:af:ee:6a:d0:18:9d:76:fe:5a:d6:
         c8:8f:f4:a3:bc:74:c0:d1:4f:7b:b1:9f:c2:c1:76:c1:1f:7a:
         53:ce:65:37:31:75:bb:0a:21:52:c0:13:ac:c7:a0:3f:52:c8:
         2d:93:d0:d6:3c:b5:7f:11:db:1e:c9:14:52:3a:7e:06:25:3f:
         af:25:cf:4e:b5:40:54:53:6a:c6:53:90:37:70:c3:bd:bd:32:
         bb:78:09:ca:d4:05:b9:16:dd:6a:cb:19:12:90:6d:6c:f1:82:
         44:68:36:84:03:44:dc:bb:2c:d4:16:d5:2f:60:99:16:bd:3b:
         b2:53:42:78:4d:64:68:93:80:85:72:2d:9d:05:ef:89:e8:5f:
         3f:89:b3:39:4c:fa:99:d5:95:d1:73:3e:c5:06:86:72:f8:76:
         c3:4c:6d:1b:59:65:e6:a7:c6:b4:e0:cd:bc:f5:42:85:eb:e1:
         3a:79:f3:1c:1d:9f:d8:2a:27:19:a4:9d:5f:38:f9:67:16:65:
         74:dc:11:c9:eb:63:6c:3a:84:32:c0:5a:97:35:ee:d9:55:2f:
         e7:03:e7:82:e6:c7:5d:10:68:9d:96:80:20:f3:a4:c5:c5:02:
         ab:c8:df:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:16:46 2026 by rpki-client