Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2r9xwJhVpyjBT5fmCXnyxNCVPLexMtVWF4QqprDRkbZK/1/323830343a336339633a3a2f33322d313238203d3e20323636323234.roa
File:                     323830343a336339633a3a2f33322d313238203d3e20323636323234.roa (raw, json)
Hash identifier:          oGU4CHBkNp20GUbnyClbtHDzkVSLI5ZS8QD4kxDiw34=
Subject key identifier:   8F:16:FF:E9:2D:99:39:4C:63:16:60:10:EA:18:8A:90:48:96:E2:29
Certificate issuer:       /CN=618318A8B569DF2B0A94521CDE2EC6E4D671AFF8
Certificate serial:       3AF0D881D38A033C83B0BD60959B7DD58E3F7FC1
Authority key identifier: 61:83:18:A8:B5:69:DF:2B:0A:94:52:1C:DE:2E:C6:E4:D6:71:AF:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/618318A8B569DF2B0A94521CDE2EC6E4D671AFF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2r9xwJhVpyjBT5fmCXnyxNCVPLexMtVWF4QqprDRkbZK/1/323830343a336339633a3a2f33322d313238203d3e20323636323234.roa
Signing time:             Fri 27 Mar 2026 17:33:29 +0000
ROA not before:           Fri 27 Mar 2026 17:28:29 +0000
ROA not after:            Fri 26 Mar 2027 17:33:29 +0000
asID:                     266224
IP address blocks:        2804:3c9c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2r9xwJhVpyjBT5fmCXnyxNCVPLexMtVWF4QqprDRkbZK/1/618318A8B569DF2B0A94521CDE2EC6E4D671AFF8.crl
                          rsync://rpki-repo.registro.br/repo/2r9xwJhVpyjBT5fmCXnyxNCVPLexMtVWF4QqprDRkbZK/1/618318A8B569DF2B0A94521CDE2EC6E4D671AFF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/618318A8B569DF2B0A94521CDE2EC6E4D671AFF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 01:50:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:f0:d8:81:d3:8a:03:3c:83:b0:bd:60:95:9b:7d:d5:8e:3f:7f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618318A8B569DF2B0A94521CDE2EC6E4D671AFF8
        Validity
            Not Before: Mar 27 17:28:29 2026 GMT
            Not After : Mar 26 17:33:29 2027 GMT
        Subject: CN=8F16FFE92D99394C63166010EA188A904896E229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a5:fb:98:6a:eb:75:1b:75:84:94:5c:c6:41:
                    49:28:63:f1:33:5a:74:3e:17:be:d3:47:82:84:12:
                    fd:06:04:60:ea:2f:09:23:c1:b8:ac:c4:22:6a:3e:
                    c7:0a:be:4a:71:c8:30:fc:b1:08:40:20:de:50:84:
                    b4:bf:00:e3:aa:13:2c:2e:b1:08:72:2d:e6:cc:38:
                    d4:7a:3c:c5:2b:bd:d0:af:a0:53:0a:04:86:b3:16:
                    67:06:b2:a8:62:c9:9b:40:b4:1f:74:3b:37:7c:e9:
                    e8:fa:cc:ac:6c:de:63:63:d1:06:87:a4:87:44:49:
                    0a:38:c9:5a:d3:2c:28:11:4f:bc:08:18:d4:25:63:
                    49:bc:34:e8:fa:1d:1a:1d:47:04:d6:d0:27:7f:c0:
                    91:6e:9b:ca:83:a0:54:09:11:60:a6:6e:a0:cb:b5:
                    96:64:45:f1:21:0a:25:f9:dc:b1:36:8b:4b:7f:9e:
                    26:d9:f8:72:ba:97:bb:52:57:f0:5a:b3:0d:9b:cb:
                    aa:f4:ea:c9:51:09:43:66:c5:07:cf:02:b1:0e:9b:
                    b0:2a:4c:e1:9b:70:06:0a:62:28:0f:fa:e9:04:6e:
                    77:ae:2e:fd:e9:89:c5:fc:01:8f:1d:55:47:15:3e:
                    c4:4b:17:e9:f3:e5:85:cd:28:83:76:bc:34:19:c1:
                    a7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:16:FF:E9:2D:99:39:4C:63:16:60:10:EA:18:8A:90:48:96:E2:29
            X509v3 Authority Key Identifier:
                keyid:61:83:18:A8:B5:69:DF:2B:0A:94:52:1C:DE:2E:C6:E4:D6:71:AF:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2r9xwJhVpyjBT5fmCXnyxNCVPLexMtVWF4QqprDRkbZK/1/618318A8B569DF2B0A94521CDE2EC6E4D671AFF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/618318A8B569DF2B0A94521CDE2EC6E4D671AFF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2r9xwJhVpyjBT5fmCXnyxNCVPLexMtVWF4QqprDRkbZK/1/323830343a336339633a3a2f33322d313238203d3e20323636323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c9c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:d3:e3:2a:26:80:e8:03:cb:f5:4a:38:e5:34:e1:67:8e:74:
         41:17:b2:d7:09:7e:ea:f7:c9:e4:ba:18:6c:57:89:73:92:8b:
         31:45:82:16:b3:f0:d2:5c:49:d0:6f:99:a1:65:6d:23:a1:aa:
         79:28:b4:7b:3f:23:f6:65:3b:36:ad:43:1d:26:ee:3e:ed:c1:
         78:89:67:21:51:f1:0e:44:6b:c5:34:37:dc:69:1f:07:93:80:
         41:d6:9a:4c:d1:45:0d:a6:bb:40:dc:3d:7f:04:49:8f:0f:5d:
         07:6a:8a:10:8a:ea:46:bd:9a:16:8e:06:0c:03:65:31:e3:c5:
         0c:d9:03:a9:a4:d6:33:23:bb:5d:06:9a:42:8a:64:5d:ca:4b:
         a3:3d:c8:d0:1e:2a:9b:10:a0:78:d9:b6:b7:ba:47:04:80:dc:
         f5:59:cd:d0:ed:d2:80:67:f1:d7:9d:8c:26:10:ad:1c:af:74:
         df:15:a6:85:75:12:56:a0:0d:51:da:de:30:f8:9e:fb:43:fd:
         82:eb:be:04:b4:ff:37:c9:86:fa:7f:52:d6:a8:bb:0e:15:be:
         b2:89:1c:ea:e5:cd:44:8a:9e:cf:24:e9:7d:2b:b0:d6:63:52:
         ef:77:0a:78:4a:62:57:64:93:73:cd:02:ee:a4:e6:7d:48:1f:
         c3:ee:1e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 12:48:06 2026 by rpki-client