Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/323830343a316131343a3a2f33322d3438203d3e203238313533.roa
File:                     323830343a316131343a3a2f33322d3438203d3e203238313533.roa (raw, json)
Hash identifier:          GfpkacI6S+TUpQAb6Y8PL+SWkEkLHWHWIjQpf0e7YeA=
Subject key identifier:   8E:51:98:C4:E8:AD:91:8F:6B:4E:CF:72:B3:66:21:C2:CA:66:0E:AF
Certificate issuer:       /CN=5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50
Certificate serial:       4D32671F643630A0EFC807FEBD1C230DA2DE0839
Authority key identifier: 53:00:AE:48:AF:BB:B3:79:3D:0E:14:25:B8:FC:6D:38:F4:3B:DC:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/323830343a316131343a3a2f33322d3438203d3e203238313533.roa
Signing time:             Mon 02 Mar 2026 15:00:38 +0000
ROA not before:           Mon 02 Mar 2026 14:55:38 +0000
ROA not after:            Mon 01 Mar 2027 15:00:38 +0000
asID:                     28153
IP address blocks:        2804:1a14::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.crl
                          rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 15:43:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:32:67:1f:64:36:30:a0:ef:c8:07:fe:bd:1c:23:0d:a2:de:08:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50
        Validity
            Not Before: Mar  2 14:55:38 2026 GMT
            Not After : Mar  1 15:00:38 2027 GMT
        Subject: CN=8E5198C4E8AD918F6B4ECF72B36621C2CA660EAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b1:87:df:6e:0f:8c:ea:4b:92:b0:3f:dc:47:
                    a4:9d:c9:98:94:46:c2:01:40:20:d0:e6:ad:33:f0:
                    e9:e5:b3:13:28:ab:5e:37:7a:a7:26:c0:8e:27:35:
                    25:85:a0:3d:7e:ba:4e:d7:63:c2:26:28:bd:2b:85:
                    cf:c7:3c:60:0d:bd:49:9d:4c:6b:ff:23:fc:6f:62:
                    77:82:a3:3a:bd:cd:02:77:7e:9b:b6:ba:cf:d3:1e:
                    45:33:01:f2:74:d8:d8:6e:46:30:03:7f:6a:2f:07:
                    02:f5:15:d9:4b:23:d1:d6:3c:36:e7:05:a2:ca:71:
                    06:63:aa:6b:60:90:f8:20:d4:05:c0:fa:27:14:1d:
                    e5:24:eb:a6:5c:ee:e1:e6:7d:d0:38:84:72:4f:59:
                    ca:22:04:b5:23:d5:c0:8c:e8:8a:82:98:3a:da:fb:
                    90:1b:e1:f8:eb:38:08:d1:23:d1:82:89:24:10:27:
                    05:5e:02:04:33:00:45:c6:90:f5:b4:b7:db:8a:f0:
                    8d:f0:b7:95:34:77:92:08:0a:20:49:6e:9e:e1:da:
                    fb:50:36:4a:e1:9c:e0:ba:d7:d3:2d:58:bf:53:54:
                    0f:6f:59:89:fd:a6:db:9c:72:ef:c3:5d:7a:89:5a:
                    a3:50:cc:35:46:49:e5:82:15:0d:4d:0f:92:f3:f0:
                    00:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:51:98:C4:E8:AD:91:8F:6B:4E:CF:72:B3:66:21:C2:CA:66:0E:AF
            X509v3 Authority Key Identifier:
                keyid:53:00:AE:48:AF:BB:B3:79:3D:0E:14:25:B8:FC:6D:38:F4:3B:DC:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/323830343a316131343a3a2f33322d3438203d3e203238313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a14::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:60:43:7b:77:ed:91:61:a9:fe:7e:2a:bb:18:49:83:c7:52:
         e1:21:03:16:51:7e:1e:4b:da:85:62:6a:4a:cb:3d:a1:28:76:
         80:af:05:3d:4d:14:3f:86:11:c6:30:ec:af:52:ea:70:04:5f:
         29:38:ee:c1:79:2c:ca:3e:00:1c:af:0f:2d:da:1f:87:04:18:
         74:12:f0:fa:45:b2:ce:6b:eb:10:8a:d0:a8:0b:6b:08:5a:f0:
         7b:68:3d:82:2d:4a:56:01:94:6d:4d:a1:f3:27:7a:03:6b:ae:
         b7:62:69:dd:18:af:09:7e:e9:a7:9f:85:89:cc:bc:ab:50:7c:
         14:c1:e9:9c:aa:00:a8:28:05:4b:43:08:73:dc:be:fc:c9:ab:
         c7:24:ff:61:0b:6f:38:5f:88:fa:8f:59:33:8b:dc:f6:2f:fc:
         d6:8c:6a:e3:c0:63:d3:be:09:17:2c:1b:e9:6d:ba:ad:9b:6c:
         67:d2:53:7a:8c:01:ec:41:47:cc:82:74:aa:13:9e:0e:1c:4d:
         d7:57:e2:c2:4d:0e:ca:c1:7c:03:e1:d3:6c:5d:89:a3:02:33:
         5c:27:6d:ba:86:32:44:3e:c0:fd:9b:db:84:23:94:26:37:fa:
         9c:f6:92:1a:2a:65:e3:28:9c:73:6b:7d:cd:df:a6:cd:d1:70:
         24:f3:02:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:37:52 2026 by rpki-client