Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/323830343a373763633a666666663a3a2f34382d3438203d3e20323131303837.roa
File:                     323830343a373763633a666666663a3a2f34382d3438203d3e20323131303837.roa (raw, json)
Hash identifier:          rqNeinjA8af1S+ZXCkSS2TdMi/O89JJs+MI05iLm0oc=
Subject key identifier:   C5:04:63:57:BD:35:23:72:2B:4C:C1:1C:EC:A0:E0:F3:D9:09:00:33
Certificate issuer:       /CN=00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F
Certificate serial:       43B0842917BE9745F0F72D0A78BEB7917029630E
Authority key identifier: 00:06:2F:0C:CB:27:4A:AB:3B:E9:5F:0D:A0:FA:1F:54:CF:F4:65:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/323830343a373763633a666666663a3a2f34382d3438203d3e20323131303837.roa
Signing time:             Mon 23 Mar 2026 17:10:05 +0000
ROA not before:           Mon 23 Mar 2026 17:05:05 +0000
ROA not after:            Mon 22 Mar 2027 17:10:05 +0000
asID:                     211087
IP address blocks:        2804:77cc:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F.crl
                          rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b0:84:29:17:be:97:45:f0:f7:2d:0a:78:be:b7:91:70:29:63:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F
        Validity
            Not Before: Mar 23 17:05:05 2026 GMT
            Not After : Mar 22 17:10:05 2027 GMT
        Subject: CN=C5046357BD3523722B4CC11CECA0E0F3D9090033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9e:83:a0:6d:fe:45:f2:58:48:51:5f:91:70:
                    da:98:86:cd:60:d9:13:9c:44:1b:c1:86:bb:81:f1:
                    14:8a:d6:07:3a:ee:bb:7f:79:b4:cf:32:da:4b:dd:
                    23:55:46:de:fe:c9:c4:c3:d7:b6:ba:9c:71:f5:b5:
                    1a:bc:3a:ab:98:87:32:25:f1:2c:cd:2e:08:3f:27:
                    a4:ae:55:5b:d1:b2:bc:44:f7:1b:6f:d5:1d:94:f4:
                    e2:b1:a8:70:8b:f9:6a:a0:2e:1e:6b:94:49:00:a5:
                    08:e4:cb:c9:51:58:54:d7:7b:cd:5e:ed:d9:b4:b8:
                    d6:c2:7c:1d:fd:8a:0e:b3:34:fb:23:3e:ca:63:cf:
                    8a:86:25:33:82:87:22:e5:95:a6:99:2f:36:ad:b5:
                    f7:4d:53:90:a0:d8:91:7a:78:41:4c:88:d8:60:51:
                    09:b2:06:f8:f7:66:54:c5:9a:75:78:26:2a:28:0d:
                    a6:ab:82:f1:54:1a:bf:37:bc:53:5d:73:66:51:0a:
                    d0:45:c4:dd:b7:b0:2b:a5:1a:8f:0c:30:58:09:77:
                    38:80:7d:79:8d:09:f6:37:17:51:1b:a9:95:8d:08:
                    97:62:77:1b:5f:a2:8e:73:fb:4b:47:f2:97:d8:a2:
                    2b:2d:11:80:f6:fb:86:15:86:c4:f9:7c:1b:7f:6f:
                    c6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:04:63:57:BD:35:23:72:2B:4C:C1:1C:EC:A0:E0:F3:D9:09:00:33
            X509v3 Authority Key Identifier:
                keyid:00:06:2F:0C:CB:27:4A:AB:3B:E9:5F:0D:A0:FA:1F:54:CF:F4:65:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/323830343a373763633a666666663a3a2f34382d3438203d3e20323131303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:77cc:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:2a:e9:a0:b3:65:6f:20:a2:06:b6:79:a9:33:b6:80:70:68:
         e7:df:0f:60:a8:13:e3:34:b9:38:27:c6:bc:da:ae:ff:48:36:
         6e:c1:14:5a:e0:93:63:3f:6b:05:93:3f:74:05:55:40:86:8c:
         e4:75:d3:1c:f1:a7:94:1e:ad:c9:c6:29:3c:da:82:0e:2b:91:
         fa:89:c0:99:a0:9e:bc:b7:ac:a6:4f:bf:79:dd:9a:53:f3:f9:
         85:b3:d4:ec:5e:f2:f1:21:25:6f:cd:ac:b1:25:e4:1b:68:bc:
         2a:cf:a0:a1:cf:1d:80:cb:75:20:c8:cf:c1:fd:5a:d8:e6:b6:
         eb:5f:7e:ae:d2:75:7b:a5:5b:10:7c:56:2d:c0:af:0d:33:94:
         86:cd:94:c2:a9:dc:4a:95:f3:4b:36:51:2a:19:39:60:27:ee:
         62:03:65:63:e1:13:c9:72:93:54:82:ab:20:13:26:cf:da:58:
         1a:66:ff:df:56:66:7c:5e:66:68:84:4f:af:47:1b:8f:26:9c:
         a3:63:9b:eb:13:8c:e8:79:c4:5a:4f:b5:26:a4:cd:4a:35:e4:
         a7:45:08:44:93:cb:50:b7:0a:17:96:73:35:39:41:28:85:37:
         10:fc:89:f0:2f:8c:65:9b:6f:b8:db:76:f4:30:de:86:73:d1:
         d7:23:b9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:57:31 2026 by rpki-client