Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/323830343a346466303a3a2f33342d3334203d3e20323638323239.roa
File:                     323830343a346466303a3a2f33342d3334203d3e20323638323239.roa (raw, json)
Hash identifier:          k5FJs3BlB0+pW4Ow+MFkESwAjuk4wv4YZCTrhk/6UPw=
Subject key identifier:   2E:EB:32:4C:E3:71:A4:59:41:79:26:28:72:30:A9:AD:E4:F3:30:CF
Certificate issuer:       /CN=24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4
Certificate serial:       5AF8CFA00190E183C23B327F753C7E41EAEA1DA2
Authority key identifier: 24:A3:CC:FD:6B:6E:5E:8C:FE:F3:99:22:F1:A6:ED:76:4A:91:35:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/323830343a346466303a3a2f33342d3334203d3e20323638323239.roa
Signing time:             Fri 27 Feb 2026 15:33:56 +0000
ROA not before:           Fri 27 Feb 2026 15:28:56 +0000
ROA not after:            Fri 26 Feb 2027 15:33:56 +0000
asID:                     268229
IP address blocks:        2804:4df0::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4.crl
                          rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 19:58:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f8:cf:a0:01:90:e1:83:c2:3b:32:7f:75:3c:7e:41:ea:ea:1d:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4
        Validity
            Not Before: Feb 27 15:28:56 2026 GMT
            Not After : Feb 26 15:33:56 2027 GMT
        Subject: CN=2EEB324CE371A459417926287230A9ADE4F330CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:85:2d:78:13:b2:b9:15:eb:70:d3:d8:51:3f:
                    d6:1a:3d:ad:95:68:d5:59:bd:94:f3:f6:96:ed:ab:
                    9d:c4:ff:e3:68:12:67:a4:e1:36:de:c3:ab:81:43:
                    33:0a:d0:23:94:e8:39:7e:30:45:bf:30:25:f4:a1:
                    9e:61:87:df:a6:85:53:e4:43:d3:3d:c0:e0:45:a7:
                    c6:3e:3a:f0:2f:ee:a5:96:7b:f1:50:28:3d:5b:ea:
                    18:af:75:5f:dc:13:bc:c7:e6:53:37:84:a5:0d:f4:
                    1b:b8:e4:99:d8:e2:dd:b9:96:00:b1:9c:01:15:60:
                    03:05:c9:66:f4:fe:f4:d8:cc:04:f0:4e:d6:5d:83:
                    9a:57:d7:b5:55:8c:76:3a:17:eb:65:1b:79:4b:27:
                    cf:7e:d3:68:fa:c8:f1:ce:45:37:3a:a1:aa:d4:08:
                    ff:57:58:75:3a:33:6f:47:81:32:63:08:bf:ae:dd:
                    c7:ba:eb:5d:ab:55:a0:53:11:21:8b:a7:a8:42:2e:
                    c1:90:93:f3:94:d8:f5:26:97:06:4d:37:cb:bc:5e:
                    19:e9:45:79:9e:4d:ac:ce:54:10:4f:05:21:28:49:
                    b3:63:ff:fb:92:87:d6:cd:60:bc:8e:13:46:03:47:
                    31:5e:d3:f4:2d:4f:13:a0:a3:da:6c:94:4c:0c:8b:
                    e2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:EB:32:4C:E3:71:A4:59:41:79:26:28:72:30:A9:AD:E4:F3:30:CF
            X509v3 Authority Key Identifier:
                keyid:24:A3:CC:FD:6B:6E:5E:8C:FE:F3:99:22:F1:A6:ED:76:4A:91:35:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/323830343a346466303a3a2f33342d3334203d3e20323638323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4df0::/34

    Signature Algorithm: sha256WithRSAEncryption
         7c:0a:36:0d:3a:ca:b0:dd:b7:49:16:80:f2:76:61:85:47:a9:
         48:63:39:65:a1:6d:a0:4a:e3:0a:94:ea:5f:ce:d9:12:c2:c7:
         b6:86:68:5a:8a:3d:4c:0f:05:0f:0e:46:0a:ff:29:42:e7:ba:
         4d:60:d3:ce:ae:a3:37:21:f0:9c:29:56:52:d6:dd:ad:b3:18:
         4d:56:16:a1:8f:f6:57:ff:48:5c:73:1a:70:d5:d0:8e:4e:75:
         f4:8c:94:ac:a2:61:20:99:c8:d1:02:40:0f:93:6a:b9:ea:15:
         75:39:0d:4e:e9:07:0e:b2:f9:d1:97:53:e7:06:ed:36:52:8f:
         73:38:ca:9c:e2:54:9a:e6:8b:b4:3b:c6:ba:0a:39:c1:36:16:
         f2:76:3e:f1:65:53:fd:9b:1d:e1:47:ff:69:01:8b:92:18:08:
         54:7e:db:a0:69:0d:5e:bb:f5:e7:7d:bb:fd:4c:f4:a6:b9:3a:
         64:6c:ad:1c:5b:11:43:6d:57:9b:7d:45:cc:55:35:cc:47:cf:
         ec:ad:5e:f8:b6:3e:78:40:88:a3:f8:0a:81:d5:53:31:95:d9:
         31:ab:c6:08:4c:9c:8c:a0:32:b2:a3:68:ab:08:28:44:27:d6:
         bd:15:42:3e:d5:e7:1f:37:ea:dc:6b:4d:ea:a3:82:f2:c5:56:
         47:1a:c5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:32:13 2026 by rpki-client