Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/323830343a316136343a3a2f33322d3438203d3e203134343537.roa
File:                     323830343a316136343a3a2f33322d3438203d3e203134343537.roa (raw, json)
Hash identifier:          HxcU+WLCuy4/nA5yRo/F5bKy4uV0buTrZGrQmJBQb2Q=
Subject key identifier:   FC:6F:BE:A5:07:EA:49:2E:46:F1:1F:04:1D:5C:B0:EF:EB:B0:11:01
Certificate issuer:       /CN=1063B5203A1581839E177D89B6F58F1744A1E5D8
Certificate serial:       42892E2573FFC97E67DBD6E795D7B3C776373156
Authority key identifier: 10:63:B5:20:3A:15:81:83:9E:17:7D:89:B6:F5:8F:17:44:A1:E5:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/323830343a316136343a3a2f33322d3438203d3e203134343537.roa
Signing time:             Mon 02 Mar 2026 20:36:27 +0000
ROA not before:           Mon 02 Mar 2026 20:31:27 +0000
ROA not after:            Mon 01 Mar 2027 20:36:27 +0000
asID:                     14457
IP address blocks:        2804:1a64::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.crl
                          rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 12:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:89:2e:25:73:ff:c9:7e:67:db:d6:e7:95:d7:b3:c7:76:37:31:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1063B5203A1581839E177D89B6F58F1744A1E5D8
        Validity
            Not Before: Mar  2 20:31:27 2026 GMT
            Not After : Mar  1 20:36:27 2027 GMT
        Subject: CN=FC6FBEA507EA492E46F11F041D5CB0EFEBB01101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:55:f4:f2:4d:55:c8:b8:0f:bb:8c:a5:c4:f9:
                    42:cc:d1:2a:2f:74:c7:63:3b:58:77:10:3e:37:01:
                    6b:da:ce:b4:86:e4:bb:b3:af:55:d4:31:72:e4:6e:
                    4f:c0:a7:0c:17:5c:07:60:40:03:8a:44:ef:bc:62:
                    73:7b:5a:1c:0c:62:a3:77:b2:4f:b0:bb:80:b7:59:
                    69:bf:94:ea:e8:9b:61:1b:21:53:13:2c:63:f5:62:
                    31:02:36:0c:7a:40:8b:6d:11:05:1c:0f:cd:9f:08:
                    9c:a9:0f:6c:31:b3:3f:ac:9c:98:ac:03:fc:2d:a0:
                    c9:87:7a:88:e4:16:ae:10:58:b7:62:cb:84:10:71:
                    70:f0:7c:83:8c:f0:b8:e4:e1:6f:17:5b:05:4a:28:
                    6d:c5:83:8c:a4:81:54:24:46:da:cb:f9:26:6b:2b:
                    03:6a:f1:50:76:1b:30:c1:f0:48:e6:c0:77:20:05:
                    b4:75:5f:e0:1e:c2:f9:af:cb:91:57:21:73:de:c0:
                    9a:d5:6e:70:14:26:cb:75:02:0a:b0:f0:42:23:95:
                    76:b1:74:27:ec:d6:a7:4a:98:a8:00:36:c9:fa:43:
                    93:a4:66:f4:f7:b2:c8:e1:39:5f:4f:5b:5c:59:06:
                    eb:e9:c7:ab:38:da:79:8a:f4:b7:43:b4:8c:e8:4b:
                    3d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6F:BE:A5:07:EA:49:2E:46:F1:1F:04:1D:5C:B0:EF:EB:B0:11:01
            X509v3 Authority Key Identifier:
                keyid:10:63:B5:20:3A:15:81:83:9E:17:7D:89:B6:F5:8F:17:44:A1:E5:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/323830343a316136343a3a2f33322d3438203d3e203134343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a64::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:7d:d5:54:41:06:c9:61:2e:cc:e4:19:8b:13:ae:73:06:67:
         eb:07:68:aa:22:cd:04:74:98:55:41:9f:6b:f7:25:6f:87:c6:
         4a:11:4b:3e:f4:8b:86:12:27:7f:ba:e5:46:fa:7a:b5:d1:77:
         76:a7:c8:45:a2:ab:bc:bb:28:22:60:61:c3:58:1d:28:ad:2c:
         bf:41:3c:51:d0:45:0d:46:0b:3d:75:5e:a6:86:6c:bf:ea:b1:
         77:74:a6:d7:b6:c7:aa:84:06:62:cf:af:5d:c9:60:7e:0b:08:
         7b:36:c0:10:2a:a3:da:a5:89:1c:ba:ba:7f:97:fa:51:38:85:
         06:67:0a:46:2a:0a:1b:89:73:06:b6:41:55:f1:b2:64:d4:e7:
         87:97:1d:8e:df:e2:54:a5:a5:cd:12:cf:34:22:27:d0:85:68:
         79:90:07:4c:af:8f:ba:f5:60:18:d7:a1:52:5c:e6:8d:87:73:
         12:99:8b:4d:15:ab:e1:19:d7:a1:00:0d:34:e1:1a:a9:d3:a3:
         aa:02:aa:5b:ab:6a:f2:85:70:e2:6c:e0:bc:d9:49:0f:08:36:
         cc:21:5e:8c:80:98:61:72:2c:8b:01:e7:59:a5:91:f6:d9:1b:
         6a:bc:c0:af:f3:4c:3f:e2:ff:64:30:0c:c7:45:53:78:81:76:
         65:62:e3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:18:03 2026 by rpki-client