Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6zmCNqDss2eG7EVngnAZdmJJtTJdPN2XPsDqcUbK5VA3/0/323830343a356532633a3a2f33322d3336203d3e20323639303136.roa
File:                     323830343a356532633a3a2f33322d3336203d3e20323639303136.roa (raw, json)
Hash identifier:          gtFuy1x9pumXyC/BB/B1qwNiDvAxyjAKYF5aeeqj728=
Subject key identifier:   1F:C2:9A:E3:4F:78:4C:B1:45:E3:FB:82:FE:BE:15:B0:C2:EB:BF:B1
Certificate issuer:       /CN=723A3AC522D049EB7A34C72DA60455F43A3C43A4
Certificate serial:       15A7254C6D2F0C19DFF8CBBDCEA855FCFA94D672
Authority key identifier: 72:3A:3A:C5:22:D0:49:EB:7A:34:C7:2D:A6:04:55:F4:3A:3C:43:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/723A3AC522D049EB7A34C72DA60455F43A3C43A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zmCNqDss2eG7EVngnAZdmJJtTJdPN2XPsDqcUbK5VA3/0/323830343a356532633a3a2f33322d3336203d3e20323639303136.roa
Signing time:             Thu 26 Feb 2026 00:22:06 +0000
ROA not before:           Thu 26 Feb 2026 00:17:06 +0000
ROA not after:            Thu 25 Feb 2027 00:22:06 +0000
asID:                     269016
IP address blocks:        2804:5e2c::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6zmCNqDss2eG7EVngnAZdmJJtTJdPN2XPsDqcUbK5VA3/0/723A3AC522D049EB7A34C72DA60455F43A3C43A4.crl
                          rsync://rpki-repo.registro.br/repo/6zmCNqDss2eG7EVngnAZdmJJtTJdPN2XPsDqcUbK5VA3/0/723A3AC522D049EB7A34C72DA60455F43A3C43A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/723A3AC522D049EB7A34C72DA60455F43A3C43A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Mar 2026 07:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a7:25:4c:6d:2f:0c:19:df:f8:cb:bd:ce:a8:55:fc:fa:94:d6:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=723A3AC522D049EB7A34C72DA60455F43A3C43A4
        Validity
            Not Before: Feb 26 00:17:06 2026 GMT
            Not After : Feb 25 00:22:06 2027 GMT
        Subject: CN=1FC29AE34F784CB145E3FB82FEBE15B0C2EBBFB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:de:f5:fc:fd:48:35:f5:a1:5f:ba:0b:4a:70:
                    ae:40:fd:76:81:0a:6d:ca:13:b2:a3:e1:98:24:e7:
                    fd:72:a4:bb:61:81:6b:19:5d:2e:8f:7e:fa:1d:7c:
                    b7:75:61:33:8c:74:68:81:f2:40:a4:84:94:dd:16:
                    b2:3c:11:75:bc:08:a3:75:19:02:10:39:6c:80:b8:
                    c1:49:96:d4:b2:d6:8d:18:a4:30:fb:f6:01:55:92:
                    7d:38:3f:80:47:8f:87:14:97:a5:69:f1:97:25:11:
                    df:2b:44:e1:d0:36:11:d0:93:b8:54:07:2a:0d:b3:
                    29:6e:88:ce:72:72:10:b8:7a:be:38:51:4d:c3:3c:
                    28:e4:f1:60:02:8e:15:f1:00:74:b5:fb:f4:6d:ed:
                    5f:85:95:3e:89:58:8e:eb:3b:d0:eb:7f:da:ba:f3:
                    25:7b:a8:a0:24:15:de:aa:ff:b2:c2:0e:d9:f5:7e:
                    43:b5:5e:1c:f8:39:97:e7:f0:b3:a9:f9:fd:a4:bf:
                    1c:76:82:ae:59:07:14:c1:ec:36:c5:be:fc:2e:bd:
                    68:3a:2e:32:7f:56:87:ee:af:d1:21:9a:a6:de:46:
                    0f:5c:e2:55:df:c2:23:f8:af:a2:0d:5e:54:20:1d:
                    73:cf:ae:ca:7f:9c:b9:7b:49:64:0b:34:63:c2:34:
                    25:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C2:9A:E3:4F:78:4C:B1:45:E3:FB:82:FE:BE:15:B0:C2:EB:BF:B1
            X509v3 Authority Key Identifier:
                keyid:72:3A:3A:C5:22:D0:49:EB:7A:34:C7:2D:A6:04:55:F4:3A:3C:43:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zmCNqDss2eG7EVngnAZdmJJtTJdPN2XPsDqcUbK5VA3/0/723A3AC522D049EB7A34C72DA60455F43A3C43A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/723A3AC522D049EB7A34C72DA60455F43A3C43A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zmCNqDss2eG7EVngnAZdmJJtTJdPN2XPsDqcUbK5VA3/0/323830343a356532633a3a2f33322d3336203d3e20323639303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:e3:f3:e6:83:5a:df:66:da:5d:eb:a7:8a:a9:72:1a:d0:46:
         93:47:52:40:af:8f:77:33:39:13:d6:8c:e7:8d:86:39:1e:c9:
         d9:e4:71:ec:d1:38:37:3d:73:9f:92:31:89:31:91:a8:0e:ef:
         bc:66:a2:0f:32:c9:c0:4d:8f:bf:c8:22:60:8e:2d:be:dd:05:
         d3:9a:c8:c3:a8:fe:30:3c:86:05:cb:fc:0c:60:97:01:e3:c4:
         da:8a:5a:d7:85:0a:57:df:f5:76:26:c1:97:b9:74:b9:fe:1d:
         50:d9:be:23:79:af:d9:46:af:6f:11:dc:d1:53:ff:41:7f:04:
         27:53:8a:9d:e2:d1:6f:a5:e1:be:91:8f:6c:6d:c1:e0:aa:14:
         46:3c:8c:c6:07:81:9d:b0:b6:5a:d4:90:6e:fe:77:69:65:6a:
         d4:42:e0:b2:b7:96:36:e8:9e:dd:a9:68:e5:8e:05:6e:dd:36:
         14:5b:65:2f:d7:78:cb:50:a6:34:5a:d8:bf:07:ec:30:61:0d:
         bd:95:c6:b0:45:85:c7:94:b5:93:45:4a:04:94:62:8e:34:74:
         e4:ae:90:7d:37:83:08:4a:ad:24:26:cc:a0:1f:06:d5:0d:d5:
         42:a2:1b:80:d7:ed:85:9d:d3:1c:9e:01:1e:24:8f:51:d3:43:
         95:2c:10:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 13:11:37 2026 by rpki-client