Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AjYcrDF2dYWmgNCPsmJ8muFe1kX2cU5C38sYaCzgqbaN/0/323830343a393537343a3a2f33322d3332203d3e20323734353139.roa
File:                     323830343a393537343a3a2f33322d3332203d3e20323734353139.roa (raw, json)
Hash identifier:          bms69gQpcU39DAwjtTZB+pnQ/Xv0qhqSCbTdA6lKDXA=
Subject key identifier:   1C:1F:59:34:56:BA:65:CB:F7:FF:26:2C:8D:CB:E0:44:F2:2D:1F:71
Certificate issuer:       /CN=FA334B21370023CCAA6BB74EBBF93C6BEF6405F5
Certificate serial:       5AB16D0D38B7039E6BD35F109A546922F8A838EF
Authority key identifier: FA:33:4B:21:37:00:23:CC:AA:6B:B7:4E:BB:F9:3C:6B:EF:64:05:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA334B21370023CCAA6BB74EBBF93C6BEF6405F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AjYcrDF2dYWmgNCPsmJ8muFe1kX2cU5C38sYaCzgqbaN/0/323830343a393537343a3a2f33322d3332203d3e20323734353139.roa
Signing time:             Fri 27 Mar 2026 21:20:40 +0000
ROA not before:           Fri 27 Mar 2026 21:15:40 +0000
ROA not after:            Fri 26 Mar 2027 21:20:40 +0000
asID:                     274519
IP address blocks:        2804:9574::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AjYcrDF2dYWmgNCPsmJ8muFe1kX2cU5C38sYaCzgqbaN/0/FA334B21370023CCAA6BB74EBBF93C6BEF6405F5.crl
                          rsync://rpki-repo.registro.br/repo/AjYcrDF2dYWmgNCPsmJ8muFe1kX2cU5C38sYaCzgqbaN/0/FA334B21370023CCAA6BB74EBBF93C6BEF6405F5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA334B21370023CCAA6BB74EBBF93C6BEF6405F5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 16:59:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:b1:6d:0d:38:b7:03:9e:6b:d3:5f:10:9a:54:69:22:f8:a8:38:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA334B21370023CCAA6BB74EBBF93C6BEF6405F5
        Validity
            Not Before: Mar 27 21:15:40 2026 GMT
            Not After : Mar 26 21:20:40 2027 GMT
        Subject: CN=1C1F593456BA65CBF7FF262C8DCBE044F22D1F71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9b:b3:f3:08:b7:f7:5d:74:fb:21:72:fc:46:
                    c4:57:98:7c:3c:71:5b:2b:51:71:a9:56:0f:5b:2e:
                    36:b5:d6:c8:1b:ad:b5:5c:fc:6d:cc:a9:bd:14:87:
                    27:e2:41:0a:d7:78:01:c7:96:40:8c:bc:50:14:39:
                    ea:16:5e:70:63:b1:4d:03:59:a4:2d:68:10:d8:3b:
                    ee:36:91:ee:ef:6f:09:62:cc:c4:aa:7a:16:c0:d6:
                    a5:5d:34:54:87:ac:75:2f:af:a2:6c:fe:8f:77:9a:
                    57:ee:86:7c:76:b6:86:fc:de:02:cc:42:8d:4b:ad:
                    f2:69:35:30:ab:5a:8e:4d:e9:c4:c5:06:06:76:9f:
                    1c:1d:e6:a8:72:9f:f5:7e:8b:6a:3a:0f:fd:53:b9:
                    57:68:cf:31:41:ec:fc:6e:94:32:e2:00:44:63:de:
                    05:85:46:31:b1:21:62:27:e5:7f:b9:35:5e:a8:81:
                    7f:80:46:de:ba:8d:04:e8:c6:86:4c:bb:b3:e2:10:
                    a8:8e:7b:34:9e:92:d4:da:43:9f:58:5d:81:95:7e:
                    e2:97:6d:50:be:2d:c7:64:f5:53:54:ab:bf:a4:85:
                    2b:e7:03:96:ba:76:89:ca:e4:79:67:49:fc:71:ff:
                    a5:af:c7:a2:4d:61:4d:b4:25:d9:96:46:c2:b5:ca:
                    83:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:1F:59:34:56:BA:65:CB:F7:FF:26:2C:8D:CB:E0:44:F2:2D:1F:71
            X509v3 Authority Key Identifier:
                keyid:FA:33:4B:21:37:00:23:CC:AA:6B:B7:4E:BB:F9:3C:6B:EF:64:05:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AjYcrDF2dYWmgNCPsmJ8muFe1kX2cU5C38sYaCzgqbaN/0/FA334B21370023CCAA6BB74EBBF93C6BEF6405F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA334B21370023CCAA6BB74EBBF93C6BEF6405F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AjYcrDF2dYWmgNCPsmJ8muFe1kX2cU5C38sYaCzgqbaN/0/323830343a393537343a3a2f33322d3332203d3e20323734353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9574::/32

    Signature Algorithm: sha256WithRSAEncryption
         c8:76:70:d9:e9:f7:57:73:30:1b:a9:5a:13:b1:c6:07:62:ec:
         72:a4:ce:f2:3a:37:30:49:4b:5e:97:d6:ba:b6:9b:e8:a1:d7:
         b0:3f:95:69:ae:68:bf:d8:51:70:e8:d8:47:ff:2c:17:52:ab:
         1e:b5:25:32:a7:dc:89:79:55:13:53:5c:a4:e1:1d:ed:74:d3:
         f5:a7:ca:8e:5b:61:57:29:24:40:24:3d:37:26:5f:61:59:00:
         e6:9b:88:6d:81:7a:50:8e:ef:47:ee:56:71:7f:70:65:81:c4:
         ef:56:4e:df:43:a1:97:c3:fe:85:f5:bf:41:22:04:c2:f5:1a:
         81:98:16:2d:01:3a:75:bd:89:8e:a7:a2:a7:74:fb:4c:ea:60:
         53:df:46:f9:65:9a:6d:48:e0:26:b7:6e:c1:1f:98:0a:85:bc:
         5f:a7:60:d7:4d:bf:25:26:4e:71:47:b8:dc:c8:40:5f:b2:2f:
         2c:b1:05:de:2d:04:9e:90:45:1e:fd:e7:90:d3:3f:bc:b0:6e:
         84:ef:c5:93:77:f8:37:6f:b4:db:9b:17:cb:b2:7f:21:3b:ac:
         81:c6:2a:c0:26:11:d5:92:f1:97:48:d5:9c:e8:9c:a5:9b:51:
         e9:63:34:98:3c:9f:8c:c7:bf:4a:79:89:08:21:d7:b1:31:34:
         ab:e6:b0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 17:51:33 2026 by rpki-client