Route Origin Authorization

$ rpki-client -vvf rsync.nex3.com.br/repo/AS269115/0/323830343a356661383a3a2f33322d3333203d3e20323639313135.roa
File:                     323830343a356661383a3a2f33322d3333203d3e20323639313135.roa (raw, json)
Hash identifier:          hoxnyX9jApcTZmzQsguzeCOY564+at2atfP3N1a47Gg=
Subject key identifier:   C6:3C:E2:3E:08:9A:3B:19:D3:03:A3:B2:15:15:57:F5:3E:2F:C5:E5
Certificate issuer:       /CN=B775879547BAC5F677A7B482DDB82E88568B21AE
Certificate serial:       079FC67E3373A7CAE96DD8FBBEBB01279FFC0138
Authority key identifier: B7:75:87:95:47:BA:C5:F6:77:A7:B4:82:DD:B8:2E:88:56:8B:21:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/B775879547BAC5F677A7B482DDB82E88568B21AE.cer
Subject info access:      rsync://rsync.nex3.com.br/repo/AS269115/0/323830343a356661383a3a2f33322d3333203d3e20323639313135.roa
Signing time:             Wed 25 Mar 2026 01:10:10 +0000
ROA not before:           Wed 25 Mar 2026 01:05:10 +0000
ROA not after:            Wed 24 Mar 2027 01:10:10 +0000
asID:                     269115
IP address blocks:        2804:5fa8::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rsync.nex3.com.br/repo/AS269115/0/B775879547BAC5F677A7B482DDB82E88568B21AE.crl
                          rsync://rsync.nex3.com.br/repo/AS269115/0/B775879547BAC5F677A7B482DDB82E88568B21AE.mft
                          rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/B775879547BAC5F677A7B482DDB82E88568B21AE.cer
                          rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/C9FCFFF20FD7DAAFBAC583DB0991203A48E54F6F.crl
                          rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/C9FCFFF20FD7DAAFBAC583DB0991203A48E54F6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9FCFFF20FD7DAAFBAC583DB0991203A48E54F6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 19:30:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:9f:c6:7e:33:73:a7:ca:e9:6d:d8:fb:be:bb:01:27:9f:fc:01:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B775879547BAC5F677A7B482DDB82E88568B21AE
        Validity
            Not Before: Mar 25 01:05:10 2026 GMT
            Not After : Mar 24 01:10:10 2027 GMT
        Subject: CN=C63CE23E089A3B19D303A3B2151557F53E2FC5E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0c:82:38:62:2c:5d:c7:e4:bd:db:14:e2:b8:
                    24:97:c4:37:d2:8d:34:17:47:d3:ec:21:f8:b2:a6:
                    df:f7:19:21:c5:15:da:1e:9d:c7:f4:f6:b5:d1:b0:
                    6e:76:b2:45:00:84:8a:c2:b9:aa:a1:2b:b8:06:59:
                    b3:0c:70:6b:89:d0:72:44:e8:e0:7c:63:42:c4:ba:
                    f1:66:5b:1f:a9:ed:94:0d:96:bb:52:c2:e0:7d:ed:
                    92:de:fa:4b:b4:85:37:9b:a4:e0:13:40:86:24:d0:
                    76:b0:30:f1:17:e7:09:fa:6a:7e:19:d5:16:b4:0d:
                    8b:87:55:b9:e9:da:90:5a:26:09:f7:27:4e:a7:82:
                    be:05:6a:44:f9:cc:b0:e6:c7:ef:73:12:52:a2:05:
                    95:5d:2d:1e:ad:a6:4c:47:cc:02:62:3f:7c:72:c3:
                    8b:ab:c1:3b:ee:25:3c:af:7c:86:79:54:51:28:09:
                    b9:95:51:7c:4a:8e:da:b2:7a:cd:fb:4d:3f:e0:6b:
                    7a:40:9f:3a:4d:fb:ac:9b:4c:40:68:6a:b2:21:51:
                    2c:f7:14:98:3f:11:4f:1b:58:0d:ff:3d:39:6c:b2:
                    3b:59:5a:26:05:f6:fe:7c:e7:96:9e:dc:16:b2:f2:
                    59:ce:f1:bb:aa:48:ab:c8:f0:7a:93:24:42:cd:46:
                    7d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3C:E2:3E:08:9A:3B:19:D3:03:A3:B2:15:15:57:F5:3E:2F:C5:E5
            X509v3 Authority Key Identifier:
                keyid:B7:75:87:95:47:BA:C5:F6:77:A7:B4:82:DD:B8:2E:88:56:8B:21:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.nex3.com.br/repo/AS269115/0/B775879547BAC5F677A7B482DDB82E88568B21AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/B775879547BAC5F677A7B482DDB82E88568B21AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.nex3.com.br/repo/AS269115/0/323830343a356661383a3a2f33322d3333203d3e20323639313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5fa8::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:df:e1:1c:98:7e:6b:56:24:e7:fb:b2:63:f5:69:87:29:9c:
         bb:b2:4e:0e:14:2d:ed:77:a1:86:16:7a:76:ca:d1:7f:4c:ca:
         d8:fe:96:41:8d:ed:a5:a2:89:c2:12:9b:fc:cb:ee:39:d2:55:
         fc:18:eb:f0:7c:9b:44:99:b2:c1:e8:4e:e8:2d:3b:16:2e:b6:
         c8:c4:90:e8:51:46:cc:c4:1d:1e:a1:02:73:bd:73:2f:61:64:
         c8:bb:74:ec:ae:59:b9:ef:57:6d:3d:1c:f4:bd:94:11:1c:c5:
         66:e2:c5:9b:d8:c6:7b:6d:ea:fb:f2:78:b9:7d:29:3e:05:f0:
         79:c8:b6:66:5a:36:f3:f5:81:ca:0b:92:07:57:b0:96:93:c7:
         1c:9e:f3:37:9a:96:a9:0c:66:52:9b:d4:4a:49:43:06:a1:80:
         47:24:d1:2a:91:d0:a0:26:c5:c7:75:59:01:73:9f:3a:a7:7e:
         48:6e:b2:7a:cb:87:86:aa:38:aa:0f:24:61:37:8e:f9:49:68:
         f4:b6:22:42:f2:c5:28:a5:a8:cf:4d:0e:37:9a:dd:6d:45:09:
         96:ab:9a:9e:a3:3c:da:a1:27:84:a2:d0:50:88:3b:4f:42:d6:
         b9:8e:bc:52:ae:d8:55:10:2b:63:ce:86:d2:99:b7:fa:af:04:
         1a:83:34:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:54:19 2026 by rpki-client