Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/0/323830343a363034303a3a2f33322d3438203d3e20323639313535.roa
File:                     323830343a363034303a3a2f33322d3438203d3e20323639313535.roa (raw, json)
Hash identifier:          0HhBoocSQ6jUzbwjYXIKQ/02XI8T3ReCwwQKg3G8Yfc=
Subject key identifier:   F3:D8:BA:16:E7:29:69:F8:C7:25:6D:BF:AE:77:87:C9:AC:AC:AD:F9
Certificate issuer:       /CN=871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51
Certificate serial:       2300DAF049AD794C4A1BB47AFFA5F8296662D7D7
Authority key identifier: 87:1F:39:52:5B:CE:88:E6:9A:5D:C2:0E:DB:A2:CB:FE:AE:DC:9E:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/0/323830343a363034303a3a2f33322d3438203d3e20323639313535.roa
Signing time:             Mon 23 Feb 2026 14:45:02 +0000
ROA not before:           Mon 23 Feb 2026 14:40:02 +0000
ROA not after:            Mon 22 Feb 2027 14:45:02 +0000
asID:                     269155
IP address blocks:        2804:6040::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/0/871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51.crl
                          rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/0/871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Mar 2026 01:21:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:00:da:f0:49:ad:79:4c:4a:1b:b4:7a:ff:a5:f8:29:66:62:d7:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51
        Validity
            Not Before: Feb 23 14:40:02 2026 GMT
            Not After : Feb 22 14:45:02 2027 GMT
        Subject: CN=F3D8BA16E72969F8C7256DBFAE7787C9ACACADF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ca:76:e6:cf:9d:9f:6a:38:6d:bb:d0:7c:d0:
                    63:60:1b:09:b6:28:96:ea:d2:88:4d:92:37:9b:e1:
                    f2:cb:1a:0d:f8:39:fc:d6:f0:41:00:7f:51:17:55:
                    d4:17:45:77:69:28:20:4d:5e:bf:48:ad:64:ad:41:
                    db:f1:59:c5:bc:6b:a7:ef:cf:64:cb:68:e0:53:4b:
                    e0:0a:f9:c4:d7:ff:98:37:42:80:f6:90:04:10:81:
                    4a:ca:b8:fc:26:7c:9f:dd:c8:49:fd:ff:7e:39:8d:
                    9c:43:f1:87:ff:00:31:9e:b0:75:7d:8a:78:82:97:
                    d5:aa:7e:0e:7a:4f:3f:a8:c8:e5:13:7a:fc:15:e1:
                    d6:80:fd:f6:63:f2:5b:23:7a:8c:f8:d1:e0:bb:26:
                    2a:93:23:aa:96:73:f0:48:92:c9:49:5a:13:6a:9c:
                    ce:01:2d:ac:df:0e:a5:3f:84:e6:a5:d0:32:3d:de:
                    67:7a:8f:ff:40:96:cb:af:30:6e:6f:2e:e3:d3:73:
                    27:d3:d1:38:6e:1e:c8:60:7c:90:89:a6:08:ed:25:
                    fc:ad:59:4c:43:9f:79:c7:7b:27:cf:fa:ee:ef:a0:
                    49:3e:d1:50:89:f5:80:b3:c8:ed:90:5b:9a:6d:4a:
                    3a:81:1b:3e:e4:3c:39:ed:52:73:0e:51:0a:2e:71:
                    a8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D8:BA:16:E7:29:69:F8:C7:25:6D:BF:AE:77:87:C9:AC:AC:AD:F9
            X509v3 Authority Key Identifier:
                keyid:87:1F:39:52:5B:CE:88:E6:9A:5D:C2:0E:DB:A2:CB:FE:AE:DC:9E:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/0/871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/0/323830343a363034303a3a2f33322d3438203d3e20323639313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6040::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:83:58:84:4e:95:b0:02:37:87:01:27:bc:4a:90:f9:43:25:
         7b:43:43:d5:b0:70:7b:83:10:5c:2a:dd:28:fa:66:77:f3:2f:
         23:e0:3e:68:41:59:14:38:f5:35:94:34:30:af:16:ed:17:79:
         66:f2:75:98:1b:db:8b:24:7b:06:2b:e1:f8:b8:62:10:57:a4:
         57:17:d6:f2:58:03:0a:9a:51:3c:e5:03:81:ac:d1:e5:9e:cd:
         b8:45:c0:d9:e2:da:40:6f:56:c8:32:b0:7e:f9:3a:90:1c:79:
         53:22:31:08:b5:84:cb:09:be:7f:0a:ef:cc:f4:62:f9:0d:c3:
         9c:c3:ea:72:6d:cf:66:c1:68:2d:bd:41:48:72:c5:f4:03:ca:
         fb:bf:f6:d9:d2:d9:42:f1:47:2a:ca:55:24:95:bd:5f:85:b4:
         04:8a:22:fe:7c:95:85:72:f2:78:f3:31:e9:98:c0:6d:a9:56:
         75:5f:4d:a7:30:5a:e3:4f:11:46:b2:7f:aa:05:f9:af:99:70:
         65:dd:e0:17:b6:29:9f:4f:a3:fd:e9:22:e6:b4:a9:29:5f:b6:
         0b:96:5b:1d:d7:4d:60:f2:6a:de:93:48:83:b4:b4:ee:92:da:
         75:bf:d4:90:b7:eb:84:b4:2b:80:88:69:16:0a:2a:2e:e5:f6:
         5e:e5:70:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:46:37 2026 by rpki-client