Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5pz6TuzMtGudmNTakGipVXVW8gdPk3AEVxy67mS4d1tB/0/323830343a386637343a3a2f33322d3438203d3e20323733343931.roa
File:                     323830343a386637343a3a2f33322d3438203d3e20323733343931.roa (raw, json)
Hash identifier:          XiiUZf6G88r0nheMFd40+nz5SATHsiAmQd04uAyuZcI=
Subject key identifier:   D7:0D:51:1D:4E:03:EF:3B:1F:F7:D3:46:8E:44:7C:81:A1:9D:8B:C3
Certificate issuer:       /CN=0C21E068D03E87F8CBB2D211667E6008F6FBEAFF
Certificate serial:       55F709A4AD3CCF2916F825DA130E7645A37D950C
Authority key identifier: 0C:21:E0:68:D0:3E:87:F8:CB:B2:D2:11:66:7E:60:08:F6:FB:EA:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C21E068D03E87F8CBB2D211667E6008F6FBEAFF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5pz6TuzMtGudmNTakGipVXVW8gdPk3AEVxy67mS4d1tB/0/323830343a386637343a3a2f33322d3438203d3e20323733343931.roa
Signing time:             Sun 29 Mar 2026 05:16:48 +0000
ROA not before:           Sun 29 Mar 2026 05:11:48 +0000
ROA not after:            Sun 28 Mar 2027 05:16:48 +0000
asID:                     273491
IP address blocks:        2804:8f74::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5pz6TuzMtGudmNTakGipVXVW8gdPk3AEVxy67mS4d1tB/0/0C21E068D03E87F8CBB2D211667E6008F6FBEAFF.crl
                          rsync://rpki-repo.registro.br/repo/5pz6TuzMtGudmNTakGipVXVW8gdPk3AEVxy67mS4d1tB/0/0C21E068D03E87F8CBB2D211667E6008F6FBEAFF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C21E068D03E87F8CBB2D211667E6008F6FBEAFF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 11:12:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:f7:09:a4:ad:3c:cf:29:16:f8:25:da:13:0e:76:45:a3:7d:95:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C21E068D03E87F8CBB2D211667E6008F6FBEAFF
        Validity
            Not Before: Mar 29 05:11:48 2026 GMT
            Not After : Mar 28 05:16:48 2027 GMT
        Subject: CN=D70D511D4E03EF3B1FF7D3468E447C81A19D8BC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:99:5d:f5:7d:5f:41:4b:d9:e9:39:e3:e6:62:
                    7e:a6:13:1f:2c:03:95:94:c0:51:24:84:74:5b:4a:
                    60:66:7f:fa:70:ce:d0:64:15:ec:a4:60:10:97:1e:
                    08:63:03:6b:7f:0e:e7:e4:fd:e9:55:00:69:82:64:
                    8c:f5:2c:42:b4:65:b9:8d:c4:52:af:9d:3a:61:6b:
                    de:a2:2c:41:24:21:a1:d3:a5:d0:2e:b9:96:e2:ac:
                    53:1e:7d:d8:36:79:7f:16:95:a4:61:7e:f5:c5:19:
                    be:18:7b:8d:78:59:20:a8:4d:9b:79:34:92:76:03:
                    7a:9b:bd:dd:d6:ce:b8:58:e6:31:6c:aa:cd:b1:52:
                    9d:ce:87:3d:8e:b4:ef:95:7a:e5:25:69:b6:86:fb:
                    22:b2:f8:76:cb:34:2a:0f:ea:4e:76:06:21:b4:69:
                    4d:8c:3f:b4:b6:9c:d3:ec:45:0f:ed:4f:6f:b8:a2:
                    91:17:02:b4:e9:0b:87:55:a9:94:f2:43:7a:b6:1e:
                    4e:db:ee:34:c1:4f:0a:38:ae:53:30:57:55:af:d1:
                    91:8d:93:56:57:0a:9b:9b:17:80:74:53:5e:31:d2:
                    17:3a:c9:bd:26:73:a9:60:40:da:62:32:42:fc:9c:
                    7d:25:65:2a:26:f7:b1:09:9b:25:0c:d0:53:c3:50:
                    b7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:0D:51:1D:4E:03:EF:3B:1F:F7:D3:46:8E:44:7C:81:A1:9D:8B:C3
            X509v3 Authority Key Identifier:
                keyid:0C:21:E0:68:D0:3E:87:F8:CB:B2:D2:11:66:7E:60:08:F6:FB:EA:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5pz6TuzMtGudmNTakGipVXVW8gdPk3AEVxy67mS4d1tB/0/0C21E068D03E87F8CBB2D211667E6008F6FBEAFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C21E068D03E87F8CBB2D211667E6008F6FBEAFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5pz6TuzMtGudmNTakGipVXVW8gdPk3AEVxy67mS4d1tB/0/323830343a386637343a3a2f33322d3438203d3e20323733343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f74::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:f6:a7:45:e7:d1:48:d7:74:e8:1d:71:af:2a:82:15:10:ed:
         72:0f:1e:3b:be:20:55:16:fa:4b:34:75:69:cc:5f:8d:7c:e4:
         4e:6d:1a:81:38:77:81:c2:17:dd:2a:76:ca:a3:a2:fc:8f:5e:
         e0:c6:d5:27:a5:fd:74:08:1c:bf:db:22:8c:17:61:5a:d7:1b:
         86:72:5a:1b:47:b5:b9:62:55:55:c2:87:f2:e7:ff:1b:78:39:
         8e:29:ad:b4:a8:0e:91:f6:fd:5f:2c:78:1a:c9:dd:a1:ca:12:
         1a:c8:93:1a:bb:11:bd:cc:3d:2e:11:dc:a9:77:28:c9:b6:92:
         ea:10:0a:8f:d6:94:63:2b:21:fc:5c:37:48:63:a5:05:f2:97:
         ab:2d:4e:d7:f7:f6:ce:ae:a5:45:b6:69:73:b6:92:2b:ba:34:
         2e:6b:c5:84:d9:5d:70:6a:bf:ae:02:bf:93:db:6d:ed:c7:e6:
         6c:bc:7a:cb:14:0a:4f:4b:cb:91:bf:cb:1f:57:b2:8a:71:fc:
         13:6a:f9:d2:69:12:e9:fa:bc:4d:c0:6c:11:b9:e5:d0:21:76:
         ac:f0:4e:4e:7d:f8:8f:90:79:6e:04:1e:f2:0b:21:b4:ff:cb:
         8d:9f:3d:f9:34:88:ef:a1:74:56:1d:c2:29:0e:14:03:8a:2a:
         d0:16:38:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:11:58 2026 by rpki-client