Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/323830343a346466303a343030303a3a2f33342d3334203d3e20323638323239.roa
File:                     323830343a346466303a343030303a3a2f33342d3334203d3e20323638323239.roa (raw, json)
Hash identifier:          70gL3WcgpaJtMfyOIuYdeZfmSXJ1YVYiqLzTZnEXmag=
Subject key identifier:   EF:88:42:6A:DF:82:BA:A3:A4:1B:FA:19:25:F1:9C:B4:9E:8E:DE:F8
Certificate issuer:       /CN=24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4
Certificate serial:       1E8AC682DBBB7CA08EFA8327E57C423B9B5F5EF2
Authority key identifier: 24:A3:CC:FD:6B:6E:5E:8C:FE:F3:99:22:F1:A6:ED:76:4A:91:35:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/323830343a346466303a343030303a3a2f33342d3334203d3e20323638323239.roa
Signing time:             Fri 27 Feb 2026 15:33:56 +0000
ROA not before:           Fri 27 Feb 2026 15:28:56 +0000
ROA not after:            Fri 26 Feb 2027 15:33:56 +0000
asID:                     268229
IP address blocks:        2804:4df0:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4.crl
                          rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 19:58:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:8a:c6:82:db:bb:7c:a0:8e:fa:83:27:e5:7c:42:3b:9b:5f:5e:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4
        Validity
            Not Before: Feb 27 15:28:56 2026 GMT
            Not After : Feb 26 15:33:56 2027 GMT
        Subject: CN=EF88426ADF82BAA3A41BFA1925F19CB49E8EDEF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ea:3b:39:a6:b9:b3:f9:3a:6d:ca:cd:6e:4d:
                    c1:7a:8c:51:e2:ba:d0:43:6a:4c:16:c9:49:58:c2:
                    82:4d:7f:5f:53:d7:25:c2:e4:d4:d4:3b:39:5c:cb:
                    73:a1:c9:74:57:ea:46:be:da:b9:c2:54:78:9b:f6:
                    19:bf:1e:5f:ec:d2:46:1f:4f:59:2e:1e:3c:69:64:
                    c6:f4:ff:14:d0:bc:44:b3:c8:97:65:f3:90:82:1e:
                    f2:91:af:3a:a2:3f:c6:bc:95:41:2d:20:ef:00:86:
                    f8:ac:88:54:51:92:49:2c:cf:fa:25:88:4f:cb:10:
                    40:69:9a:a7:de:df:fa:6b:99:39:74:0d:ac:c0:93:
                    37:de:50:93:00:0c:c3:5b:ff:b7:63:cd:1c:9f:d6:
                    62:38:6d:8f:17:18:70:02:24:85:38:e3:11:44:91:
                    ab:a5:ee:28:29:d7:53:a9:7f:cb:2a:1d:eb:1a:37:
                    bf:f4:74:cf:2a:11:50:ab:56:1c:e6:46:95:a2:2a:
                    1c:08:b0:7e:0f:c2:02:57:05:05:31:84:33:4c:23:
                    fb:76:5b:d9:99:45:74:6f:d1:f7:fb:b5:ac:f1:04:
                    e5:2a:35:14:12:70:f2:ca:a6:03:d5:23:21:d8:cf:
                    d1:26:fa:97:0d:75:4f:22:11:2c:ff:ec:12:65:b3:
                    c7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:88:42:6A:DF:82:BA:A3:A4:1B:FA:19:25:F1:9C:B4:9E:8E:DE:F8
            X509v3 Authority Key Identifier:
                keyid:24:A3:CC:FD:6B:6E:5E:8C:FE:F3:99:22:F1:A6:ED:76:4A:91:35:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/323830343a346466303a343030303a3a2f33342d3334203d3e20323638323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4df0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         02:2e:96:8a:d6:d0:98:23:54:cc:e8:2d:60:91:bf:c4:b5:6e:
         f6:84:f1:b7:81:25:de:b3:e7:33:a3:e5:0a:49:9a:e6:78:fa:
         65:af:ce:ad:8f:e1:7e:f9:bc:00:bd:2b:5c:fd:90:f8:35:1b:
         cc:8a:4e:4a:02:26:d1:ba:89:4f:72:14:92:32:64:4e:da:c7:
         7a:43:d4:a8:02:63:73:85:5b:39:a2:fe:de:66:65:bb:6f:5f:
         71:df:c7:7a:b1:ae:16:40:0e:dd:ea:84:87:09:7d:a0:4c:cb:
         99:16:77:90:a9:3a:e0:a1:52:e3:26:57:98:c5:18:f1:d3:80:
         d5:5b:b0:9a:30:c9:d8:53:b8:83:a7:0f:a6:b9:ac:e3:7e:bb:
         37:aa:7e:2f:cd:16:c4:99:7e:5f:04:a9:f3:de:01:99:94:6b:
         61:6e:b6:50:88:fe:19:14:eb:75:85:77:9f:90:50:f9:ff:ef:
         15:94:31:38:72:8f:91:51:52:fb:09:20:1e:dc:85:21:dc:61:
         1f:54:de:38:40:92:d9:79:eb:ec:32:2b:1b:78:62:5c:e9:a3:
         05:a6:a5:cb:b2:a4:81:59:2b:55:79:a8:a3:9b:10:d0:8a:17:
         e3:76:4b:6b:f5:07:76:73:65:99:f5:ef:10:f9:fc:82:f4:6c:
         5e:5e:ad:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:32:46 2026 by rpki-client