Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/323830343a323866633a3a2f33322d313238203d3e20323633393931.roa
File:                     323830343a323866633a3a2f33322d313238203d3e20323633393931.roa (raw, json)
Hash identifier:          EbSencphf8XTzxtrcGRXvigFAY6/CuWh98pDRnV8z2o=
Subject key identifier:   CC:E0:07:FC:01:19:44:D4:83:71:B5:C1:48:55:F1:7E:BD:6B:3A:7C
Certificate issuer:       /CN=85990FF5D49C5109F060F455F3B6EBC79F362861
Certificate serial:       5F66BE2D21D3091861753413F54E73B5AA557CCE
Authority key identifier: 85:99:0F:F5:D4:9C:51:09:F0:60:F4:55:F3:B6:EB:C7:9F:36:28:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85990FF5D49C5109F060F455F3B6EBC79F362861.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/323830343a323866633a3a2f33322d313238203d3e20323633393931.roa
Signing time:             Fri 27 Mar 2026 20:07:57 +0000
ROA not before:           Fri 27 Mar 2026 20:02:57 +0000
ROA not after:            Fri 26 Mar 2027 20:07:57 +0000
asID:                     263991
IP address blocks:        2804:28fc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/85990FF5D49C5109F060F455F3B6EBC79F362861.crl
                          rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/85990FF5D49C5109F060F455F3B6EBC79F362861.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85990FF5D49C5109F060F455F3B6EBC79F362861.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 03:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:66:be:2d:21:d3:09:18:61:75:34:13:f5:4e:73:b5:aa:55:7c:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85990FF5D49C5109F060F455F3B6EBC79F362861
        Validity
            Not Before: Mar 27 20:02:57 2026 GMT
            Not After : Mar 26 20:07:57 2027 GMT
        Subject: CN=CCE007FC011944D48371B5C14855F17EBD6B3A7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:6d:4c:f7:29:8d:32:3c:59:88:cd:18:0e:29:
                    d5:de:82:54:5a:7a:de:93:f2:57:3a:88:ee:97:74:
                    71:2b:00:1f:1c:b3:8e:77:b7:5f:7f:a1:06:28:a1:
                    56:93:c2:96:61:87:f8:1f:ed:a7:84:af:f2:01:60:
                    22:32:8f:39:89:ae:db:a3:b3:87:00:27:13:34:3b:
                    44:a9:3a:6b:84:d2:90:e8:16:61:49:ac:c8:3c:09:
                    1f:ee:75:f7:4a:06:a9:0e:b4:d7:9e:bd:8c:5e:96:
                    c1:aa:13:88:53:2b:4d:c6:e5:07:8d:fd:92:10:ef:
                    33:62:5d:43:38:99:37:e0:44:6a:b3:d5:39:5b:21:
                    e2:1d:19:f9:a7:7b:21:aa:e2:da:03:09:89:e6:88:
                    cc:8b:48:cd:19:9a:e6:53:73:8e:4e:2b:fc:d2:1a:
                    cb:56:77:55:e8:63:dd:6e:4c:fa:66:e9:aa:18:ac:
                    6f:84:8b:ef:ef:84:a4:a9:a6:98:df:0d:e5:6e:5d:
                    8d:20:7e:d8:f6:a2:2e:d0:a7:79:ff:58:6a:7f:45:
                    42:ab:4d:59:2f:9b:71:da:01:ea:21:85:95:3d:5d:
                    ea:79:1b:d5:c8:fb:a1:05:1a:65:67:d9:1c:35:8f:
                    16:44:30:b9:b9:28:b3:44:05:e5:ba:36:b3:5a:e9:
                    0f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E0:07:FC:01:19:44:D4:83:71:B5:C1:48:55:F1:7E:BD:6B:3A:7C
            X509v3 Authority Key Identifier:
                keyid:85:99:0F:F5:D4:9C:51:09:F0:60:F4:55:F3:B6:EB:C7:9F:36:28:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/85990FF5D49C5109F060F455F3B6EBC79F362861.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85990FF5D49C5109F060F455F3B6EBC79F362861.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/323830343a323866633a3a2f33322d313238203d3e20323633393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:12:91:41:ce:0e:be:f5:2f:e5:2e:07:a6:b0:86:f9:30:c2:
         1c:1f:e7:27:b9:04:97:ab:ae:51:0b:b7:fd:e6:33:d1:5b:28:
         7e:25:d2:b5:7a:ea:c8:ec:d2:66:f9:a7:57:fc:ea:0c:2c:25:
         85:f2:8a:5e:14:df:0a:7d:82:28:e9:01:79:7e:91:4f:21:32:
         8c:28:41:fc:1b:fb:5c:09:a6:1b:14:21:16:fe:d5:17:b8:fe:
         71:71:74:db:45:ae:e0:c1:2c:75:80:4a:4d:a5:9d:21:2a:35:
         d8:5b:18:dc:03:60:2b:77:03:5a:cf:ac:1b:ea:09:9a:e6:eb:
         c1:61:20:3a:bc:a1:49:d9:e0:83:b7:59:83:15:f0:c9:28:b6:
         6a:a0:8e:ed:5b:72:a4:8a:9f:d8:6e:96:fc:32:96:ac:8f:e0:
         8f:90:b0:6d:7c:32:b7:31:ae:c8:6f:72:a3:59:ca:3d:a8:34:
         7e:78:15:3b:38:8c:2f:02:42:ab:2a:4d:37:f1:6d:1a:44:e4:
         2b:3d:dd:84:bc:3c:63:c3:fc:7d:7f:b4:54:d4:ad:db:26:d4:
         0b:61:df:79:ce:e0:07:37:96:ac:39:fa:2a:5e:3b:58:d4:93:
         c5:f2:29:53:b2:e9:ba:a2:d9:65:30:d4:84:e5:31:2e:37:f0:
         bb:04:d1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:29:49 2026 by rpki-client