Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a3a2f33332d3333203d3e20323633363237.roa
File:                     323830343a313034343a3a2f33332d3333203d3e20323633363237.roa (raw, json)
Hash identifier:          MdIAxmcm2NwecKRNU25JOlzJhC23h6PAIj1ECXjlDyQ=
Subject key identifier:   DA:AC:05:20:E5:5E:3D:29:09:12:E4:5D:1A:08:6E:10:60:C0:4A:ED
Certificate issuer:       /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial:       2664272687CD9B986998E3F8F476B3F42933AD09
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a3a2f33332d3333203d3e20323633363237.roa
Signing time:             Tue 24 Feb 2026 20:37:01 +0000
ROA not before:           Tue 24 Feb 2026 20:32:01 +0000
ROA not after:            Tue 23 Feb 2027 20:37:01 +0000
asID:                     263627
IP address blocks:        2804:1044::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
                          rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 22:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:64:27:26:87:cd:9b:98:69:98:e3:f8:f4:76:b3:f4:29:33:ad:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
        Validity
            Not Before: Feb 24 20:32:01 2026 GMT
            Not After : Feb 23 20:37:01 2027 GMT
        Subject: CN=DAAC0520E55E3D290912E45D1A086E1060C04AED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0e:5e:db:11:84:ce:af:99:07:c9:3c:8a:59:
                    03:b1:dc:65:7f:20:da:d8:8a:ca:3d:9c:bf:63:6a:
                    2d:8d:e1:c7:5a:a2:dc:c8:d0:da:6a:87:e0:11:13:
                    8d:ba:4f:3c:08:f6:45:9b:44:7a:1b:2f:4b:75:08:
                    98:6c:7f:30:44:66:a6:27:dc:5f:1c:85:2c:95:22:
                    64:84:3e:77:13:24:c0:5c:bb:d1:80:cd:d3:d4:a3:
                    5d:76:55:2a:05:d7:7d:25:36:f3:d3:d4:35:5c:d7:
                    c8:0f:12:62:0c:2e:94:65:48:bc:2d:3c:55:27:07:
                    49:d9:8f:6e:3d:82:06:19:ab:bd:70:d0:b5:28:53:
                    e3:aa:3b:7e:db:55:97:de:ad:32:3d:a7:80:7b:8d:
                    5d:a7:1f:96:66:7a:8a:9c:63:52:a2:a4:a8:06:7f:
                    bb:4e:5a:1c:57:f0:f0:18:6e:91:d2:de:c1:b1:06:
                    b2:7c:97:bf:23:c2:e9:ee:8f:b4:11:67:6b:65:af:
                    08:3a:0c:9b:95:07:ae:61:10:12:41:34:6c:97:44:
                    8b:db:28:18:61:56:a0:7e:0e:98:fa:8f:e5:7a:cf:
                    97:e7:65:7c:f6:da:d8:b7:0f:46:f0:4e:30:38:21:
                    b3:c3:1b:ad:6a:70:5f:1a:f4:8f:0a:5b:be:32:96:
                    11:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AC:05:20:E5:5E:3D:29:09:12:E4:5D:1A:08:6E:10:60:C0:4A:ED
            X509v3 Authority Key Identifier:
                keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a3a2f33332d3333203d3e20323633363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1044::/33

    Signature Algorithm: sha256WithRSAEncryption
         38:f3:23:b7:a0:b2:d7:ef:29:22:93:51:c3:43:2f:c7:77:ba:
         ee:85:d5:89:8a:65:fa:a4:84:88:0c:a2:62:90:be:1b:b6:a2:
         2a:e7:14:18:2f:1d:a2:40:56:06:bd:6e:3e:cd:ef:9a:1e:47:
         b7:fb:df:fe:a0:b3:7d:0d:b9:20:45:29:81:75:75:1c:81:18:
         de:64:08:ee:90:84:dc:ad:e5:f0:42:a9:98:88:10:d0:a6:2f:
         5a:bf:5a:66:8d:9f:91:bd:53:1b:b1:7d:1a:12:81:30:46:30:
         54:17:3a:21:b1:ab:4b:81:eb:e7:6c:31:27:b7:85:e1:80:bd:
         c1:48:48:73:b7:7d:7b:69:cd:e1:a8:12:1b:6f:6e:f2:1c:ed:
         34:db:d2:85:f3:e2:15:49:8f:ce:95:7d:1e:76:4e:54:cf:7c:
         55:32:c8:31:bf:1a:1d:0b:16:d9:f1:c4:eb:58:63:e6:55:6f:
         3b:79:53:a8:e7:c4:64:61:da:18:06:da:4e:03:ec:92:b4:13:
         f5:69:92:fd:16:02:b4:8e:c3:b7:d7:a4:e6:66:72:8e:a4:66:
         b6:6f:f0:5c:86:f0:f4:41:65:e8:1c:a0:a7:c5:75:e7:e9:aa:
         0a:b5:b8:13:9b:89:96:d9:a8:66:2b:13:d8:d3:2a:f9:7b:7a:
         41:c7:60:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:01:43 2026 by rpki-client