Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a3a2f33342d3334203d3e20323633363237.roa
File:                     323830343a313034343a3a2f33342d3334203d3e20323633363237.roa (raw, json)
Hash identifier:          NQw2aGYNvhrly7RthyYmtEZGvPGxqkwyLRkW0TkFwAA=
Subject key identifier:   DE:A5:08:86:A3:68:48:A7:28:35:D9:ED:82:F4:C1:A8:86:BC:18:38
Certificate issuer:       /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial:       35D95C44BBA24BFBF905A7FD4CE17E7901C1784D
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a3a2f33342d3334203d3e20323633363237.roa
Signing time:             Tue 24 Feb 2026 20:37:01 +0000
ROA not before:           Tue 24 Feb 2026 20:32:01 +0000
ROA not after:            Tue 23 Feb 2027 20:37:01 +0000
asID:                     263627
IP address blocks:        2804:1044::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
                          rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 04:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d9:5c:44:bb:a2:4b:fb:f9:05:a7:fd:4c:e1:7e:79:01:c1:78:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
        Validity
            Not Before: Feb 24 20:32:01 2026 GMT
            Not After : Feb 23 20:37:01 2027 GMT
        Subject: CN=DEA50886A36848A72835D9ED82F4C1A886BC1838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:12:16:d9:fc:3d:ac:cd:7a:8c:24:c6:43:ef:
                    ff:8c:ff:03:dd:95:ec:ad:7e:49:6e:96:2b:8f:dd:
                    b9:a2:59:23:b7:8e:a2:59:8c:6e:5f:c7:02:56:bf:
                    56:68:94:6e:4c:8d:66:c7:77:39:65:f9:53:c9:d2:
                    30:05:92:2c:4a:12:7e:2b:25:a4:05:15:5e:26:5e:
                    4f:88:03:46:c3:d3:af:3a:bd:b6:c4:fd:68:7a:11:
                    0c:52:93:46:af:c7:df:e0:4f:8a:c5:f3:7a:90:7e:
                    76:10:d4:5a:7e:da:13:d2:62:8c:19:04:07:4c:9a:
                    d8:6e:bc:83:1f:73:b4:65:cc:0d:a3:84:d2:43:03:
                    70:16:b6:7e:9c:ed:36:bf:5a:7e:b0:fc:d4:89:39:
                    f8:c6:bd:d0:4b:e2:c0:4c:b3:cc:b6:41:a9:26:19:
                    f2:a1:d6:4e:01:a5:cc:5d:bb:e5:f0:45:88:9e:93:
                    30:d7:8f:a8:e1:3f:0a:43:64:24:c6:83:56:45:f5:
                    2a:8c:ff:38:c9:17:14:30:64:63:ae:7f:28:f5:15:
                    56:d8:32:c9:6b:ff:47:dc:a9:44:e2:f7:ef:0c:67:
                    1c:06:92:70:ea:38:9e:bc:43:f6:b9:04:e1:34:80:
                    de:4e:bb:40:fb:b2:fc:8f:da:0e:1d:af:28:b7:58:
                    a2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A5:08:86:A3:68:48:A7:28:35:D9:ED:82:F4:C1:A8:86:BC:18:38
            X509v3 Authority Key Identifier:
                keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a3a2f33342d3334203d3e20323633363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1044::/34

    Signature Algorithm: sha256WithRSAEncryption
         4b:2b:a9:2f:5f:3a:e5:2b:f2:93:d0:33:43:94:69:7a:52:c2:
         17:ca:f9:69:0f:76:e1:a7:3a:b1:9b:53:f7:f3:ec:6b:b9:e7:
         29:43:be:b3:8f:7d:01:2e:0b:12:f0:35:c6:c0:d8:5b:91:fa:
         4e:f4:0d:7f:4c:90:e8:9e:9c:5c:06:55:7a:bc:60:a1:5f:c0:
         97:ef:7c:95:a7:ec:c6:b9:6f:33:a1:d3:f0:5f:e2:c8:13:2b:
         6c:d0:ac:2d:48:eb:84:f3:6f:54:3b:af:08:c2:e7:61:74:c7:
         d4:e4:b6:6c:c1:1d:23:98:d0:a6:e2:1c:35:84:fe:42:33:cc:
         88:7a:43:f1:5c:c1:12:dc:7e:37:e8:08:11:c5:ed:82:e3:9d:
         9a:28:66:f3:6f:2f:e3:68:38:04:66:6d:f0:00:2c:8e:9c:97:
         dd:dd:be:d8:a1:3b:01:06:bb:67:e5:14:c1:09:30:60:b1:d0:
         00:3d:d5:54:7f:17:04:ce:bf:01:c4:c0:b3:f0:6c:e3:07:73:
         69:14:be:e7:9f:27:1d:de:a0:98:6f:ba:15:94:b2:20:9f:04:
         27:14:2c:80:00:9b:bf:45:8b:ac:25:0c:22:9c:19:cc:54:f9:
         ef:3f:91:47:f9:31:8d:28:c4:7f:14:33:7a:3a:83:01:e6:1e:
         01:9d:1f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:01:25 2026 by rpki-client