Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/bdK1FsQ5gxjmUp8eS7Jf7L5EJDVSxVcTqsBEhwSSHZ2/0/323830343a333232343a3a2f33322d3332203d3e20323635303539.roa
File:                     323830343a333232343a3a2f33322d3332203d3e20323635303539.roa (raw, json)
Hash identifier:          xgTVuh0CjFQPFGsuphAXL2lh99hASGVDlcr/aOOXOAU=
Subject key identifier:   F1:F1:84:1D:7C:0E:FF:3E:56:34:4B:30:D4:00:5F:E4:47:B6:E2:5D
Certificate issuer:       /CN=F63A0B539596FAF1D7E4F7E6EE36443246C24BE1
Certificate serial:       5FA01146317F20174586CCACCBB70C5C8B4946A7
Authority key identifier: F6:3A:0B:53:95:96:FA:F1:D7:E4:F7:E6:EE:36:44:32:46:C2:4B:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63A0B539596FAF1D7E4F7E6EE36443246C24BE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/bdK1FsQ5gxjmUp8eS7Jf7L5EJDVSxVcTqsBEhwSSHZ2/0/323830343a333232343a3a2f33322d3332203d3e20323635303539.roa
Signing time:             Thu 12 Mar 2026 18:24:54 +0000
ROA not before:           Thu 12 Mar 2026 18:19:54 +0000
ROA not after:            Thu 11 Mar 2027 18:24:54 +0000
asID:                     265059
IP address blocks:        2804:3224::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/bdK1FsQ5gxjmUp8eS7Jf7L5EJDVSxVcTqsBEhwSSHZ2/0/F63A0B539596FAF1D7E4F7E6EE36443246C24BE1.crl
                          rsync://rpki-repo.registro.br/repo/bdK1FsQ5gxjmUp8eS7Jf7L5EJDVSxVcTqsBEhwSSHZ2/0/F63A0B539596FAF1D7E4F7E6EE36443246C24BE1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63A0B539596FAF1D7E4F7E6EE36443246C24BE1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 15:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a0:11:46:31:7f:20:17:45:86:cc:ac:cb:b7:0c:5c:8b:49:46:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F63A0B539596FAF1D7E4F7E6EE36443246C24BE1
        Validity
            Not Before: Mar 12 18:19:54 2026 GMT
            Not After : Mar 11 18:24:54 2027 GMT
        Subject: CN=F1F1841D7C0EFF3E56344B30D4005FE447B6E25D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7a:a8:08:4a:49:5f:0a:17:9e:a5:56:7f:eb:
                    18:7e:3b:0d:34:a5:4e:87:c8:e0:69:44:1e:20:60:
                    73:c3:e5:35:2c:e5:5b:e6:0a:99:e8:10:e5:76:5e:
                    90:bf:6d:34:2f:34:b9:ce:15:d8:46:df:7a:50:27:
                    85:f2:b3:d6:3f:b1:14:b2:95:03:69:31:cd:21:6d:
                    ca:ce:6d:a2:98:ee:f8:37:8c:79:6a:75:38:f1:67:
                    6f:04:78:3c:04:9f:2d:fb:ec:5c:aa:68:75:0d:f5:
                    9f:20:13:25:5a:c4:4a:ba:76:30:cb:8b:19:bb:20:
                    b9:92:a3:df:81:31:16:12:13:b6:b5:80:f8:ed:29:
                    5d:62:fb:cd:8a:64:c0:f2:6e:3c:80:b9:42:2d:3b:
                    df:58:71:0d:49:67:43:a2:1b:ae:a0:d2:d5:3e:14:
                    ec:5a:75:a9:3e:96:41:94:c2:a7:bc:74:81:6f:80:
                    48:1d:14:50:d9:4e:a4:56:01:39:1a:f5:5a:90:4d:
                    12:29:83:ca:af:b7:4d:21:37:d8:d4:0c:6d:ad:20:
                    60:a3:65:05:6c:77:48:ab:23:ee:a0:d3:33:92:3d:
                    8a:db:bf:1b:49:78:d2:96:96:fe:a3:ce:e0:5a:68:
                    58:db:12:d7:63:e5:e8:bd:9e:1c:bd:a5:c0:cf:d2:
                    ad:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F1:84:1D:7C:0E:FF:3E:56:34:4B:30:D4:00:5F:E4:47:B6:E2:5D
            X509v3 Authority Key Identifier:
                keyid:F6:3A:0B:53:95:96:FA:F1:D7:E4:F7:E6:EE:36:44:32:46:C2:4B:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/bdK1FsQ5gxjmUp8eS7Jf7L5EJDVSxVcTqsBEhwSSHZ2/0/F63A0B539596FAF1D7E4F7E6EE36443246C24BE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63A0B539596FAF1D7E4F7E6EE36443246C24BE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/bdK1FsQ5gxjmUp8eS7Jf7L5EJDVSxVcTqsBEhwSSHZ2/0/323830343a333232343a3a2f33322d3332203d3e20323635303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3224::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:f8:d9:34:f0:f9:9c:7f:0e:aa:36:b0:5c:c9:5d:7e:38:ad:
         ac:ef:70:42:b0:9b:b5:bf:49:8f:25:47:80:07:b7:7b:c0:ef:
         f0:20:db:45:4c:5f:61:70:86:cc:61:c8:07:4c:b2:f1:c6:ef:
         20:2d:c4:d6:4c:1e:0d:d8:20:27:77:93:09:12:b1:14:20:7f:
         09:1e:83:99:e8:e2:3d:d7:03:74:c7:a8:a5:19:3e:36:4c:b9:
         68:d4:78:c5:89:77:ec:37:ba:40:d3:43:71:12:5f:24:a5:e5:
         6c:ee:4e:7f:50:63:83:d0:04:57:b5:b2:b7:7b:bd:c1:01:c1:
         63:fa:09:8d:42:75:3c:a3:a5:42:98:81:10:7f:40:39:73:1f:
         b0:b1:f5:e8:6e:a5:20:2e:a9:d3:a9:90:51:ea:4a:6b:5b:fb:
         52:5c:9c:04:82:f6:c0:78:75:53:41:ef:89:0b:eb:fb:91:4f:
         13:7c:38:6d:31:7c:d7:db:bd:a1:60:3d:2d:ea:cf:57:70:10:
         82:75:b4:05:ff:8c:9b:14:7f:87:3e:ea:43:d0:63:f7:4c:4e:
         a0:c5:3d:90:10:f9:69:f2:0f:4e:df:08:38:56:da:b8:96:19:
         1e:2c:8e:d1:72:ee:24:0f:3d:94:1f:90:58:3a:9c:18:a6:95:
         66:84:23:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:19:55 2026 by rpki-client