Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a3a2f33322d313238203d3e203631353837.roa
File:                     323830343a333330303a3a2f33322d313238203d3e203631353837.roa (raw, json)
Hash identifier:          fk+OzvMaAJRRealYqLRQ+C1gMNnPs7TdQk9Uuy0ALos=
Subject key identifier:   43:5C:F9:D9:62:7F:92:E6:9C:E9:2F:CA:EF:DA:1D:4D:EA:AF:FA:80
Certificate issuer:       /CN=A8AB91CEEE9A5ADCB812E5C76B66DBE1B735692E
Certificate serial:       55E3ACA01A47BD5FE2A6F72C4A785B205B62E2CF
Authority key identifier: A8:AB:91:CE:EE:9A:5A:DC:B8:12:E5:C7:6B:66:DB:E1:B7:35:69:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8AB91CEEE9A5ADCB812E5C76B66DBE1B735692E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a3a2f33322d313238203d3e203631353837.roa
Signing time:             Mon 02 Mar 2026 19:14:39 +0000
ROA not before:           Mon 02 Mar 2026 19:09:39 +0000
ROA not after:            Mon 01 Mar 2027 19:14:39 +0000
asID:                     61587
IP address blocks:        2804:3300::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/A8AB91CEEE9A5ADCB812E5C76B66DBE1B735692E.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/A8AB91CEEE9A5ADCB812E5C76B66DBE1B735692E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8AB91CEEE9A5ADCB812E5C76B66DBE1B735692E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 19:52:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e3:ac:a0:1a:47:bd:5f:e2:a6:f7:2c:4a:78:5b:20:5b:62:e2:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8AB91CEEE9A5ADCB812E5C76B66DBE1B735692E
        Validity
            Not Before: Mar  2 19:09:39 2026 GMT
            Not After : Mar  1 19:14:39 2027 GMT
        Subject: CN=435CF9D9627F92E69CE92FCAEFDA1D4DEAAFFA80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e0:5a:18:0d:d7:ae:08:d3:af:73:39:e8:a8:
                    a7:e6:71:a3:48:70:70:dc:07:7d:60:04:f6:46:3b:
                    58:a5:7c:28:86:4b:35:d1:cc:be:b9:9f:e9:c8:db:
                    12:98:88:f7:a2:19:0f:8f:7c:b6:27:9a:60:03:36:
                    24:9f:b0:80:0d:70:76:4e:bf:2a:67:4f:45:50:2f:
                    00:02:01:cb:22:40:fe:7f:80:1b:dd:00:04:94:44:
                    22:df:71:b5:58:81:bc:26:e2:c5:72:f4:e5:86:85:
                    5d:e8:1e:56:27:1e:ee:39:9c:c4:f0:c4:bd:1c:17:
                    6a:0d:b9:f0:6c:e3:fc:ac:94:9f:9f:58:1b:b0:c7:
                    8e:31:dc:68:b9:21:12:10:94:bb:89:fb:c9:3f:7f:
                    32:ee:e3:18:70:d0:9b:6d:a9:67:3f:b4:ac:6a:85:
                    e1:dc:93:88:30:36:11:c2:00:d4:4f:1d:3f:53:4e:
                    d0:57:f3:30:e8:7f:ca:5e:71:51:ab:27:91:a2:e2:
                    aa:3e:68:bc:aa:62:3f:1d:52:5b:6f:dd:8d:6e:01:
                    df:26:53:2d:cc:30:e5:9f:b1:2a:c0:8b:b5:27:51:
                    03:fb:23:8f:e3:28:25:46:3c:d6:85:e9:a1:61:0f:
                    70:14:e3:7e:d8:a6:23:29:5e:09:a5:d1:e5:28:60:
                    75:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:5C:F9:D9:62:7F:92:E6:9C:E9:2F:CA:EF:DA:1D:4D:EA:AF:FA:80
            X509v3 Authority Key Identifier:
                keyid:A8:AB:91:CE:EE:9A:5A:DC:B8:12:E5:C7:6B:66:DB:E1:B7:35:69:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/A8AB91CEEE9A5ADCB812E5C76B66DBE1B735692E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8AB91CEEE9A5ADCB812E5C76B66DBE1B735692E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a3a2f33322d313238203d3e203631353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3300::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:62:c2:69:6e:3a:8f:e3:6e:06:41:a5:d8:f5:d8:b6:9d:5a:
         40:36:a4:a4:be:66:56:63:6f:9f:b3:10:47:e2:5a:62:39:a0:
         18:56:93:7f:c5:41:34:60:92:ce:44:65:26:43:60:c7:f6:d6:
         5f:6a:e1:3f:e6:e8:3f:5f:ff:d4:8c:89:9d:75:1c:56:60:92:
         99:a8:46:a9:6d:02:ae:6a:9f:5b:ca:08:1a:4b:13:7d:3b:61:
         1b:f5:41:07:31:74:13:c0:95:c3:1a:bb:2a:f5:96:a6:3a:6a:
         ce:fe:63:f1:af:ac:1e:cd:d9:49:d3:31:dd:43:8d:79:32:ee:
         6d:31:a3:ef:e1:23:58:ac:b5:6b:12:d1:21:54:d3:81:ee:33:
         25:cc:62:3f:79:24:e8:0c:53:8e:9f:b6:a7:3e:cf:72:ce:82:
         b3:12:58:e6:32:5a:b9:ef:ce:d6:67:f6:9c:a8:72:66:57:a9:
         8f:29:21:9e:8d:b6:28:40:2d:db:10:11:71:a4:2d:7c:60:f3:
         31:71:58:a8:e7:92:e8:2b:7e:de:c6:52:7f:7c:ef:7d:7d:cc:
         87:90:46:f0:6b:09:cb:5f:03:7d:6f:ad:73:f6:bb:02:d3:c2:
         c5:b9:57:3a:7e:fc:67:db:c4:da:0c:e7:6f:97:eb:fd:ae:d3:
         98:62:aa:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:28:23 2026 by rpki-client