Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a663030303a3a2f34302d3430203d3e20323634313230.roa
File:                     323830343a323263303a663030303a3a2f34302d3430203d3e20323634313230.roa (raw, json)
Hash identifier:          12pcn13zkxy6+Yj84QUtL0aVyVY5ok5Fwa0RoO5P4vo=
Subject key identifier:   26:F4:EE:01:61:FE:DF:5D:E6:D8:CA:05:AD:BF:F5:18:57:B8:2B:5C
Certificate issuer:       /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
Certificate serial:       3E2299A5D80F49D94D9F78F2056AB31F3EE2A57F
Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a663030303a3a2f34302d3430203d3e20323634313230.roa
Signing time:             Mon 02 Mar 2026 15:36:35 +0000
ROA not before:           Mon 02 Mar 2026 15:31:35 +0000
ROA not after:            Mon 01 Mar 2027 15:36:35 +0000
asID:                     264120
IP address blocks:        2804:22c0:f000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl
                          rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 17:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:22:99:a5:d8:0f:49:d9:4d:9f:78:f2:05:6a:b3:1f:3e:e2:a5:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
        Validity
            Not Before: Mar  2 15:31:35 2026 GMT
            Not After : Mar  1 15:36:35 2027 GMT
        Subject: CN=26F4EE0161FEDF5DE6D8CA05ADBFF51857B82B5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0f:9f:3e:ec:84:db:28:7c:e0:e8:77:37:e8:
                    b8:89:38:7a:2f:3d:5f:1a:b5:8a:77:9b:36:41:5b:
                    47:75:ef:2b:b2:c2:4c:4a:c5:c5:b6:ea:1f:f6:77:
                    88:dc:87:c0:37:59:dc:aa:9d:d1:ce:9c:7f:15:bf:
                    84:95:dd:78:39:11:27:09:04:a8:1b:5a:c0:49:8b:
                    17:1d:b0:dc:29:27:e4:0a:6e:e1:d4:38:b4:0a:30:
                    58:44:b4:70:25:ec:ce:c9:9a:9c:10:01:fa:a4:b0:
                    47:28:25:cf:7f:e8:b6:7a:66:48:b7:62:6d:70:76:
                    83:d8:e6:40:02:e7:ff:8d:b6:2a:2e:b7:35:da:ee:
                    dd:fe:94:c4:b1:35:de:90:f5:77:33:f4:c0:31:c2:
                    0a:86:3d:4a:f9:55:34:3a:0e:bb:58:74:2c:b1:b3:
                    d4:f5:a7:b9:79:96:5b:e0:b9:8b:73:c5:75:5b:89:
                    71:bf:4d:48:b5:38:8c:cb:76:12:bf:7c:df:b7:9e:
                    3a:dd:ae:e8:d4:ce:f5:06:ad:5e:c8:ab:16:ca:08:
                    5d:db:a0:41:f6:ad:6a:c7:c9:69:a8:07:75:37:9e:
                    88:25:b0:a0:d4:21:b6:95:ce:27:0f:6a:c9:97:8f:
                    a4:03:02:50:ad:59:b7:55:29:7a:d3:51:55:aa:ab:
                    7a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F4:EE:01:61:FE:DF:5D:E6:D8:CA:05:AD:BF:F5:18:57:B8:2B:5C
            X509v3 Authority Key Identifier:
                keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a663030303a3a2f34302d3430203d3e20323634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22c0:f000::/40

    Signature Algorithm: sha256WithRSAEncryption
         a6:1c:98:29:95:57:4f:a4:0e:ae:13:4e:24:b7:1d:9c:7b:5d:
         02:7c:4b:b1:d6:5f:5f:dc:89:03:03:c5:10:92:2f:92:ac:17:
         03:0b:c5:b4:e1:9f:24:8b:29:a7:76:13:29:2e:2f:0b:6b:32:
         8f:02:a3:4a:56:da:12:17:6e:63:aa:02:a0:84:67:6c:72:9d:
         7d:b3:0f:b4:99:f5:cb:0f:a6:0b:a5:7c:8b:6f:f0:fc:ae:26:
         2a:4c:f4:6c:1f:e5:d8:73:3d:86:3d:f4:99:d4:45:71:06:0c:
         33:36:d6:45:9a:7e:07:5d:3e:7f:fe:2c:89:a7:14:20:2f:70:
         b8:2a:63:bb:c5:77:22:a8:95:e2:23:af:1a:8d:2a:2f:5c:dd:
         cc:f0:19:8b:71:d4:16:f8:f9:e1:74:1b:18:82:b0:67:10:76:
         67:30:11:6a:63:2b:a6:f7:0f:98:00:5e:1d:93:59:ff:62:00:
         ae:af:36:b7:46:db:3c:b7:dd:8b:90:48:23:dd:a3:c2:ff:3e:
         d8:a6:7b:f1:a8:6f:21:83:e6:7a:ef:55:c3:03:7a:5c:c7:12:
         ce:da:23:df:70:78:f6:f4:44:f6:80:9a:08:1e:a5:db:5a:4f:
         ba:00:ea:9b:8e:3a:29:4b:4e:83:2d:d3:c2:e3:47:99:a5:9b:
         fc:b8:79:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:53:15 2026 by rpki-client