Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/323830343a353939303a3a2f33322d3334203d3e20323638373130.roa
File:                     323830343a353939303a3a2f33322d3334203d3e20323638373130.roa (raw, json)
Hash identifier:          H7CJpmPO9KYi+Vq6jKCbyTcdFDbnUWEpudbgUvYtP1Q=
Subject key identifier:   B3:FA:52:D2:90:E8:EB:5B:81:4E:B5:3F:D6:9D:07:FC:03:71:67:99
Certificate issuer:       /CN=72F03CACB57EC9C32DB97ABD797D81E2ABC8292A
Certificate serial:       1AD0B43AA10D4897B3F200856F5623E1DB645EFC
Authority key identifier: 72:F0:3C:AC:B5:7E:C9:C3:2D:B9:7A:BD:79:7D:81:E2:AB:C8:29:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/323830343a353939303a3a2f33322d3334203d3e20323638373130.roa
Signing time:             Fri 27 Feb 2026 18:27:52 +0000
ROA not before:           Fri 27 Feb 2026 18:22:52 +0000
ROA not after:            Fri 26 Feb 2027 18:27:52 +0000
asID:                     268710
IP address blocks:        2804:5990::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.crl
                          rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 21:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:d0:b4:3a:a1:0d:48:97:b3:f2:00:85:6f:56:23:e1:db:64:5e:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72F03CACB57EC9C32DB97ABD797D81E2ABC8292A
        Validity
            Not Before: Feb 27 18:22:52 2026 GMT
            Not After : Feb 26 18:27:52 2027 GMT
        Subject: CN=B3FA52D290E8EB5B814EB53FD69D07FC03716799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6d:cd:1b:3e:83:de:43:ce:72:bb:d6:12:2b:
                    37:b5:0f:a0:5a:7c:b2:d9:13:af:46:9a:6f:8a:6d:
                    aa:08:9c:ad:b3:5f:29:c7:6a:bc:ac:49:3a:eb:c3:
                    1f:cc:d2:0d:32:d2:1f:72:3d:a9:b3:f2:2a:9f:ec:
                    77:12:6f:06:a9:30:43:92:4c:6e:92:be:3a:e7:b5:
                    cb:30:28:ec:97:35:22:3e:ac:21:d3:53:37:d9:91:
                    4c:08:c1:2e:dc:b3:29:f9:41:53:9e:4b:38:3c:9b:
                    15:79:7e:c5:09:82:62:5a:3b:41:ee:51:ff:9a:d7:
                    63:8c:8f:e3:66:5c:83:ec:00:d1:8e:35:c1:f8:91:
                    fe:ca:6c:ae:d0:7f:7c:a3:fb:06:ec:90:e7:60:b2:
                    62:01:b7:35:b0:2f:5a:b0:e8:00:0d:9e:4b:a8:59:
                    34:72:78:38:5d:f0:aa:22:3e:4b:18:0b:2f:34:5b:
                    12:0f:c3:9f:09:03:bb:8f:34:41:10:a6:ab:5e:c9:
                    8f:d8:e8:5a:cc:02:e2:12:ab:3b:03:9b:67:50:08:
                    9a:c3:d5:8b:44:a5:b9:3c:19:13:8f:a2:35:43:3a:
                    b9:cb:02:2b:10:98:39:2d:16:f6:e9:61:c0:da:9e:
                    1d:9b:8c:d0:bc:68:11:f4:b7:c8:92:4e:73:58:7b:
                    50:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:FA:52:D2:90:E8:EB:5B:81:4E:B5:3F:D6:9D:07:FC:03:71:67:99
            X509v3 Authority Key Identifier:
                keyid:72:F0:3C:AC:B5:7E:C9:C3:2D:B9:7A:BD:79:7D:81:E2:AB:C8:29:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/323830343a353939303a3a2f33322d3334203d3e20323638373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5990::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:1a:ee:06:4d:72:1f:c5:b8:a0:2f:d0:a1:f9:f7:e9:14:d8:
         86:ff:d6:90:f9:38:e2:62:03:b7:65:0e:d6:c6:72:30:ed:00:
         8e:bb:d3:d6:cf:f4:54:fa:40:f8:d5:89:b7:8b:bd:60:4b:92:
         90:66:76:fb:da:b3:6c:17:68:b6:38:85:41:98:0e:21:e2:4c:
         72:06:17:b9:3a:b8:64:bd:c2:46:bb:be:4d:b5:b9:7e:6c:01:
         58:3c:2e:a3:2e:99:7b:1b:7e:81:3a:29:f7:99:af:51:ac:98:
         a2:e3:18:ee:e3:a6:a0:6e:74:41:0c:aa:14:85:36:4b:51:1e:
         79:00:ea:c8:33:1b:e6:ed:62:95:3a:03:61:df:cb:a0:59:f5:
         6a:c9:b0:ff:a1:c4:d1:cf:1a:87:94:01:92:34:d2:db:97:a3:
         4a:06:b7:fa:d5:73:ae:e0:9f:da:44:1d:a6:76:01:3c:87:23:
         d8:bc:94:38:17:6c:ab:68:d8:9c:96:25:f3:66:2a:a2:b2:a4:
         dc:6c:bb:33:6a:b5:a4:b0:0f:40:1f:56:44:d5:b3:4e:9f:bc:
         13:31:cc:35:ea:95:8e:58:d3:29:4a:d8:48:7c:d5:f0:55:d7:
         42:64:9f:a9:ec:d4:50:02:d8:1d:c3:af:c3:0d:db:57:3f:85:
         f4:86:56:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:01:07 2026 by rpki-client