Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/323830343a356534343a343030303a3a2f33362d3336203d3e20323639303232.roa
File:                     323830343a356534343a343030303a3a2f33362d3336203d3e20323639303232.roa (raw, json)
Hash identifier:          XDdJBubxnQnIa3gJDfsl5o69gXDZG9PJFQZMS50O1mk=
Subject key identifier:   43:DF:C9:A0:6D:1C:66:A1:24:DA:39:B1:A3:0A:02:51:F4:85:DA:DF
Certificate issuer:       /CN=CDCD83F4405AFD2B52943F9838374A340858512F
Certificate serial:       7DB18C3DF5DB631E7E068460D29D08A3AE63CFA7
Authority key identifier: CD:CD:83:F4:40:5A:FD:2B:52:94:3F:98:38:37:4A:34:08:58:51:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCD83F4405AFD2B52943F9838374A340858512F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/323830343a356534343a343030303a3a2f33362d3336203d3e20323639303232.roa
Signing time:             Mon 02 Mar 2026 15:47:25 +0000
ROA not before:           Mon 02 Mar 2026 15:42:25 +0000
ROA not after:            Mon 01 Mar 2027 15:47:25 +0000
asID:                     269022
IP address blocks:        2804:5e44:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.crl
                          rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCD83F4405AFD2B52943F9838374A340858512F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 16:51:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b1:8c:3d:f5:db:63:1e:7e:06:84:60:d2:9d:08:a3:ae:63:cf:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDCD83F4405AFD2B52943F9838374A340858512F
        Validity
            Not Before: Mar  2 15:42:25 2026 GMT
            Not After : Mar  1 15:47:25 2027 GMT
        Subject: CN=43DFC9A06D1C66A124DA39B1A30A0251F485DADF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:65:28:02:b2:b9:7c:8d:d0:d7:e5:a7:13:62:
                    85:2f:a3:ce:af:41:a0:a7:54:8e:7b:32:96:db:6b:
                    a6:42:e9:a1:66:20:18:5e:49:bd:47:f1:ce:53:0d:
                    cd:67:19:38:d4:c6:29:42:fe:d4:13:b7:d4:c0:0e:
                    f8:43:ff:7b:bc:04:2e:5a:9d:d2:ad:66:83:5d:94:
                    5b:5e:dc:82:75:0e:ad:5a:d5:6b:db:14:8f:3b:8e:
                    07:5c:a8:93:5b:84:40:5b:54:27:cb:07:9a:97:17:
                    8a:1e:99:87:b4:db:c2:2e:2e:6b:2c:49:ca:32:b5:
                    ed:b3:62:84:3b:9c:00:95:37:96:bd:29:78:f1:ab:
                    d7:ae:df:00:fd:32:93:15:9e:99:91:09:de:99:af:
                    29:11:8b:80:9e:fd:6a:22:e6:22:b3:88:1d:3e:9d:
                    61:d1:1c:7d:66:53:32:e4:bb:f3:64:c3:98:99:27:
                    b3:17:5b:4f:9f:40:39:7f:c7:dc:93:b7:e1:dd:e6:
                    55:01:48:96:53:78:23:00:ed:47:ef:eb:39:26:7e:
                    14:8a:8b:c5:6a:dd:e1:cd:dd:85:8c:55:45:8f:0c:
                    f3:f2:83:6c:0b:e7:ec:ee:25:2d:c6:63:a2:8b:64:
                    4a:c5:a8:cf:00:22:0d:a1:19:6a:0b:19:cf:77:f5:
                    35:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DF:C9:A0:6D:1C:66:A1:24:DA:39:B1:A3:0A:02:51:F4:85:DA:DF
            X509v3 Authority Key Identifier:
                keyid:CD:CD:83:F4:40:5A:FD:2B:52:94:3F:98:38:37:4A:34:08:58:51:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCD83F4405AFD2B52943F9838374A340858512F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/323830343a356534343a343030303a3a2f33362d3336203d3e20323639303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e44:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         90:9e:26:33:96:0a:db:94:60:9b:63:d6:3f:29:de:01:6c:9f:
         a2:f5:49:4a:bf:c1:6b:ee:a1:7c:d2:1b:78:c3:e2:72:87:1d:
         ec:2c:2d:94:02:c3:d5:5f:ad:60:d6:c3:ef:0b:50:cc:5f:a4:
         db:8d:cf:17:03:6f:4e:04:ee:eb:07:ff:8b:b9:a4:a0:54:ff:
         89:ff:a6:50:cd:87:48:cc:2e:8a:26:ac:0d:2f:9a:11:0b:e9:
         11:c3:4d:22:e8:81:41:a1:54:5a:d7:e8:f1:8a:32:df:d4:2b:
         06:fc:54:3b:7e:db:07:c3:e2:b1:4e:fb:e8:e5:7d:c7:3f:e8:
         56:09:fa:36:eb:83:b1:e7:b9:64:1e:3d:6c:fd:f9:82:44:34:
         5f:65:51:bc:84:1a:cd:bf:cd:d3:7a:83:a0:1a:80:aa:c1:fc:
         db:50:66:e3:c2:43:84:3d:87:a9:ba:d2:a6:ed:11:64:c6:a3:
         5d:e8:8c:9a:00:b7:6e:7b:9e:7a:8e:ec:2c:e9:c3:6f:17:1f:
         9b:4e:59:89:c2:46:f2:6f:a3:15:e6:76:81:fc:52:0a:95:f8:
         6b:12:e9:f6:1d:13:b6:88:4d:00:9b:b8:56:cb:88:b2:6d:11:
         17:9e:7c:db:0d:e4:91:8b:d4:29:22:c9:17:bd:ba:9c:14:a2:
         5d:e9:52:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:12:10 2026 by rpki-client