Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XfDfQGsp6eTz2P4g7UQmtzPGwgVj2sLKmQqoJReN8kf/0/323830343a363664383a3a2f33322d3334203d3e20323639353836.roa
File:                     323830343a363664383a3a2f33322d3334203d3e20323639353836.roa (raw, json)
Hash identifier:          EdEoSRQNtJp8GptGynQ2iuCqakkFGelzxq4kQUoFycc=
Subject key identifier:   F3:C0:E4:6B:55:C6:6A:1D:32:9E:7A:E3:BA:74:C2:C2:B6:B7:A8:17
Certificate issuer:       /CN=BDC08AE9BB1CB80ABF25D51519F7026F0CBAB84E
Certificate serial:       474F84BA6096B4A82E30A152D0C64DF50568E606
Authority key identifier: BD:C0:8A:E9:BB:1C:B8:0A:BF:25:D5:15:19:F7:02:6F:0C:BA:B8:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC08AE9BB1CB80ABF25D51519F7026F0CBAB84E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XfDfQGsp6eTz2P4g7UQmtzPGwgVj2sLKmQqoJReN8kf/0/323830343a363664383a3a2f33322d3334203d3e20323639353836.roa
Signing time:             Mon 30 Mar 2026 21:14:49 +0000
ROA not before:           Mon 30 Mar 2026 21:09:49 +0000
ROA not after:            Mon 29 Mar 2027 21:14:49 +0000
asID:                     269586
IP address blocks:        2804:66d8::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9XfDfQGsp6eTz2P4g7UQmtzPGwgVj2sLKmQqoJReN8kf/0/BDC08AE9BB1CB80ABF25D51519F7026F0CBAB84E.crl
                          rsync://rpki-repo.registro.br/repo/9XfDfQGsp6eTz2P4g7UQmtzPGwgVj2sLKmQqoJReN8kf/0/BDC08AE9BB1CB80ABF25D51519F7026F0CBAB84E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC08AE9BB1CB80ABF25D51519F7026F0CBAB84E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 04:30:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:4f:84:ba:60:96:b4:a8:2e:30:a1:52:d0:c6:4d:f5:05:68:e6:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDC08AE9BB1CB80ABF25D51519F7026F0CBAB84E
        Validity
            Not Before: Mar 30 21:09:49 2026 GMT
            Not After : Mar 29 21:14:49 2027 GMT
        Subject: CN=F3C0E46B55C66A1D329E7AE3BA74C2C2B6B7A817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:53:b8:eb:86:b7:4d:c3:de:38:f4:3a:9c:9e:
                    aa:fe:68:c5:02:15:fe:ed:4c:ae:00:dd:20:38:f2:
                    d9:ca:b7:20:6c:66:bd:9a:b4:33:e7:0d:dd:37:74:
                    da:f9:cf:53:c9:3f:7a:de:3c:07:d6:3a:ad:f6:4f:
                    5d:30:a4:85:c9:57:87:86:c5:6b:f9:d8:32:30:cd:
                    45:92:69:34:fd:e2:dd:52:95:1b:b1:7d:75:c1:fd:
                    3d:da:6e:e1:47:6e:3e:11:3a:86:c4:3a:09:c1:a6:
                    b4:06:47:96:06:c8:74:d3:4c:92:b9:95:44:7b:b2:
                    a1:b3:29:90:48:54:a2:cd:89:85:5c:21:57:51:5e:
                    b9:35:3f:7d:7b:b7:11:4b:a9:57:52:e4:49:dd:ae:
                    82:1c:be:56:5a:3a:7b:b5:51:2a:27:a7:e9:73:c7:
                    fb:f9:b0:32:43:88:44:3a:d1:9c:bf:29:02:30:3f:
                    f6:da:bf:2c:8b:4c:e2:8c:8b:4a:22:2f:b1:9a:50:
                    2d:be:48:6c:58:c3:a8:49:6e:27:4b:2b:d1:7a:64:
                    02:4c:ba:12:12:28:a5:2d:5b:59:e3:a1:bc:48:74:
                    f0:d1:98:55:3a:73:86:f9:4c:4e:82:11:9f:c6:16:
                    26:3b:17:78:c9:da:d0:b8:ad:a7:b8:a4:64:cf:67:
                    53:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C0:E4:6B:55:C6:6A:1D:32:9E:7A:E3:BA:74:C2:C2:B6:B7:A8:17
            X509v3 Authority Key Identifier:
                keyid:BD:C0:8A:E9:BB:1C:B8:0A:BF:25:D5:15:19:F7:02:6F:0C:BA:B8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XfDfQGsp6eTz2P4g7UQmtzPGwgVj2sLKmQqoJReN8kf/0/BDC08AE9BB1CB80ABF25D51519F7026F0CBAB84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC08AE9BB1CB80ABF25D51519F7026F0CBAB84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XfDfQGsp6eTz2P4g7UQmtzPGwgVj2sLKmQqoJReN8kf/0/323830343a363664383a3a2f33322d3334203d3e20323639353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:66d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:04:81:4c:36:51:d4:83:b0:e1:9b:93:d7:5a:73:ab:09:b4:
         35:a3:55:b9:a9:a1:4a:74:ea:6d:eb:53:e2:6c:80:c4:c5:a2:
         5e:95:ae:fc:f8:df:d8:c7:23:33:7a:2b:c0:b0:18:da:ae:fa:
         b4:d1:89:10:5f:79:9a:ef:9b:34:3d:79:ab:ee:fe:47:14:26:
         92:ab:4a:10:6e:c1:6c:03:3f:a1:69:f7:c1:27:35:ba:52:6e:
         7f:2d:c6:4e:40:eb:4c:f4:69:9d:81:90:c4:61:a5:e8:d2:97:
         57:50:58:b4:93:f1:4e:42:76:71:31:9a:95:0e:4e:2c:63:e2:
         b2:08:23:71:d9:6f:90:b2:ac:6b:e0:81:73:7a:d7:49:f9:4b:
         9a:b6:7c:5a:f5:d0:cc:6a:47:38:1c:3c:2b:b0:00:47:bd:0e:
         36:53:d3:e5:91:ec:9d:3a:01:c5:2d:23:2e:8f:8f:4c:de:aa:
         8c:88:fa:22:2d:ae:c0:13:24:1b:6c:03:1c:0f:54:aa:7e:55:
         8b:f1:cb:d4:eb:e4:fa:8f:09:e8:b1:f2:5e:36:bc:39:55:36:
         bd:c2:73:06:ee:59:28:8c:2a:17:05:fd:0f:8b:e1:13:e8:bd:
         f0:ec:7e:1e:ac:c1:02:54:dc:0e:8c:e9:50:ab:5c:a6:3a:48:
         bb:fb:1e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 12:48:21 2026 by rpki-client