Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/323830343a356534343a353030303a3a2f33362d3336203d3e20323639303232.roa
File:                     323830343a356534343a353030303a3a2f33362d3336203d3e20323639303232.roa (raw, json)
Hash identifier:          QeJ8cH+hjc4D9QVKkfvoDWp3t/LhXRHNAB98WPIiVbA=
Subject key identifier:   66:41:97:0C:74:19:70:9F:46:F6:B6:69:A9:3F:75:8D:1A:85:35:68
Certificate issuer:       /CN=CDCD83F4405AFD2B52943F9838374A340858512F
Certificate serial:       27B6A22FC923E1BE033438B9A4C2329E60AFBB83
Authority key identifier: CD:CD:83:F4:40:5A:FD:2B:52:94:3F:98:38:37:4A:34:08:58:51:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCD83F4405AFD2B52943F9838374A340858512F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/323830343a356534343a353030303a3a2f33362d3336203d3e20323639303232.roa
Signing time:             Mon 02 Mar 2026 15:47:38 +0000
ROA not before:           Mon 02 Mar 2026 15:42:38 +0000
ROA not after:            Mon 01 Mar 2027 15:47:38 +0000
asID:                     269022
IP address blocks:        2804:5e44:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.crl
                          rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCD83F4405AFD2B52943F9838374A340858512F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 16:51:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b6:a2:2f:c9:23:e1:be:03:34:38:b9:a4:c2:32:9e:60:af:bb:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDCD83F4405AFD2B52943F9838374A340858512F
        Validity
            Not Before: Mar  2 15:42:38 2026 GMT
            Not After : Mar  1 15:47:38 2027 GMT
        Subject: CN=6641970C7419709F46F6B669A93F758D1A853568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:19:88:df:8a:6a:ac:b2:7e:c0:38:2f:b0:6c:
                    6d:0a:be:15:e4:0c:a4:cd:b0:bb:d8:20:44:f2:ba:
                    54:c1:a5:3c:08:33:cd:2f:09:89:7d:b2:e1:74:f0:
                    0c:f0:29:14:15:b0:56:22:60:30:6c:ba:7d:fb:d0:
                    be:e9:1f:0d:af:37:c9:27:df:61:49:44:32:21:14:
                    49:43:93:27:8d:43:be:9b:0e:3b:26:ba:28:49:ef:
                    41:75:e6:ac:22:68:c1:ee:0d:8a:fd:88:da:ab:0b:
                    52:e4:91:85:f1:4b:69:09:97:97:e4:bd:e0:6a:97:
                    a2:4f:f4:2f:a4:c1:08:61:5e:07:e7:91:b0:13:40:
                    ba:bc:0c:b6:43:7a:50:d2:f7:ab:d7:40:a1:50:26:
                    3f:4e:5c:54:f7:e0:48:3c:75:d9:4c:24:91:6f:59:
                    0a:0b:13:55:6b:eb:36:dd:b1:e0:c9:3a:83:d2:b2:
                    64:ef:a9:f0:1c:fa:41:d0:7d:34:a4:46:21:1c:d0:
                    a6:ca:54:3a:2a:e5:7d:59:af:c9:59:24:d8:c8:40:
                    db:c1:8f:13:2d:08:83:7d:62:2c:9b:90:a1:cf:97:
                    79:2e:b2:cf:45:c7:cd:8d:79:04:d2:9b:e2:b0:2c:
                    8c:d5:e9:c6:49:38:19:dd:92:77:3e:62:4a:4f:1d:
                    47:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:41:97:0C:74:19:70:9F:46:F6:B6:69:A9:3F:75:8D:1A:85:35:68
            X509v3 Authority Key Identifier:
                keyid:CD:CD:83:F4:40:5A:FD:2B:52:94:3F:98:38:37:4A:34:08:58:51:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCD83F4405AFD2B52943F9838374A340858512F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/323830343a356534343a353030303a3a2f33362d3336203d3e20323639303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e44:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         63:b7:b8:37:3d:91:f1:5b:7d:e7:05:48:c3:9e:51:7e:af:4c:
         90:5f:33:74:81:66:2b:e8:44:48:33:b9:9a:78:63:12:bd:b9:
         27:03:98:10:b3:b6:44:44:5f:16:c1:5b:f8:1b:5f:ed:af:75:
         cb:3a:76:6a:97:77:52:85:31:26:b2:48:7b:f4:73:a6:8b:80:
         8c:13:1c:2f:ef:35:5c:e2:31:ab:a6:61:34:4b:2e:44:bc:31:
         de:79:e8:d7:09:45:90:cb:44:27:24:fa:14:9b:be:80:a7:c6:
         77:9f:19:94:5c:55:fc:ba:d0:01:08:4b:a4:f5:c8:2d:2e:3b:
         5f:9f:dd:c0:8c:60:40:48:6d:d2:b9:f4:2a:c5:8c:b1:0a:3b:
         5e:8a:ca:88:d9:3c:50:8f:0c:4e:ad:ad:ac:65:af:6a:cd:86:
         63:26:d2:60:07:1f:5f:c0:c2:16:88:d2:2f:91:98:66:45:65:
         45:22:a3:0f:fb:0b:7d:04:48:4b:9f:81:b0:3a:f8:d9:ab:3e:
         70:6e:92:0d:59:12:1a:aa:e2:ec:ac:17:3c:38:f6:2c:65:23:
         a6:f8:25:45:8a:8a:e3:a9:ba:5c:cc:de:42:24:30:83:9c:4b:
         7c:06:38:2f:cd:61:05:45:2d:5e:d9:68:86:ac:29:05:f7:c0:
         c8:00:75:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:12:09 2026 by rpki-client