Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrfbYbsTguUeMKwqV5TAiixYetRAKemiziCYiPTxACNg/0/323830343a373938633a3a2f33322d3332203d3e20323731333132.roa
File:                     323830343a373938633a3a2f33322d3332203d3e20323731333132.roa (raw, json)
Hash identifier:          nGmj3b5LcngckNUI6SySA5/8cregSLam+WGvEI3hH/Q=
Subject key identifier:   F7:8E:6D:C6:EE:13:CC:C6:97:CB:CD:B0:53:AA:58:19:C6:9C:62:8F
Certificate issuer:       /CN=D3E3B64C2CD0703CA658C2222A71EB5157345180
Certificate serial:       441213415DB17C37511446713CA549A2A3F65A02
Authority key identifier: D3:E3:B6:4C:2C:D0:70:3C:A6:58:C2:22:2A:71:EB:51:57:34:51:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3E3B64C2CD0703CA658C2222A71EB5157345180.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrfbYbsTguUeMKwqV5TAiixYetRAKemiziCYiPTxACNg/0/323830343a373938633a3a2f33322d3332203d3e20323731333132.roa
Signing time:             Mon 23 Feb 2026 17:15:03 +0000
ROA not before:           Mon 23 Feb 2026 17:10:03 +0000
ROA not after:            Mon 22 Feb 2027 17:15:03 +0000
asID:                     271312
IP address blocks:        2804:798c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrfbYbsTguUeMKwqV5TAiixYetRAKemiziCYiPTxACNg/0/D3E3B64C2CD0703CA658C2222A71EB5157345180.crl
                          rsync://rpki-repo.registro.br/repo/HrfbYbsTguUeMKwqV5TAiixYetRAKemiziCYiPTxACNg/0/D3E3B64C2CD0703CA658C2222A71EB5157345180.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3E3B64C2CD0703CA658C2222A71EB5157345180.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 14:27:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:12:13:41:5d:b1:7c:37:51:14:46:71:3c:a5:49:a2:a3:f6:5a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3E3B64C2CD0703CA658C2222A71EB5157345180
        Validity
            Not Before: Feb 23 17:10:03 2026 GMT
            Not After : Feb 22 17:15:03 2027 GMT
        Subject: CN=F78E6DC6EE13CCC697CBCDB053AA5819C69C628F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:88:0d:fa:3b:05:5c:30:4c:09:c1:93:34:99:
                    6d:2f:c2:68:56:6d:ee:34:54:35:47:2e:59:74:b3:
                    f4:87:ad:a4:ac:93:bc:38:c1:e9:b3:ba:6a:ad:54:
                    2e:4b:88:db:ca:27:dc:dc:ba:ae:5a:0d:bb:eb:ed:
                    4f:71:30:46:3f:e8:87:d8:c1:92:c6:0f:60:86:9a:
                    d7:8e:25:cb:61:02:64:49:00:04:f7:40:33:f0:b7:
                    c1:e9:72:22:c4:b3:d3:d2:e5:c6:48:c5:18:62:dc:
                    ec:db:61:61:d0:d8:50:33:b5:65:04:7b:32:1a:bd:
                    fa:bf:3c:a4:c1:5c:fc:3b:8c:97:d2:a1:b3:bd:b8:
                    8f:4e:ba:b5:7f:d5:fa:0c:73:60:79:c1:0d:0d:e5:
                    08:6f:97:c2:c2:f7:d6:6a:ee:e4:59:34:e7:e2:7f:
                    b5:27:7f:30:05:10:b3:4a:05:d9:ca:3a:a7:5c:b8:
                    de:09:f5:97:0b:9b:a2:cf:12:c4:22:43:8e:1d:5b:
                    07:b9:35:1e:eb:70:a7:b2:66:90:fe:bd:6b:ee:9e:
                    3c:9d:41:da:da:82:f1:8f:d0:d6:42:33:34:7f:bd:
                    cc:aa:22:e5:2b:54:38:a3:13:4c:b0:94:46:25:b4:
                    39:10:75:32:13:30:a4:8f:9e:a4:87:4e:62:15:aa:
                    21:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8E:6D:C6:EE:13:CC:C6:97:CB:CD:B0:53:AA:58:19:C6:9C:62:8F
            X509v3 Authority Key Identifier:
                keyid:D3:E3:B6:4C:2C:D0:70:3C:A6:58:C2:22:2A:71:EB:51:57:34:51:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrfbYbsTguUeMKwqV5TAiixYetRAKemiziCYiPTxACNg/0/D3E3B64C2CD0703CA658C2222A71EB5157345180.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3E3B64C2CD0703CA658C2222A71EB5157345180.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrfbYbsTguUeMKwqV5TAiixYetRAKemiziCYiPTxACNg/0/323830343a373938633a3a2f33322d3332203d3e20323731333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:798c::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:ec:e6:65:ad:b0:71:45:99:f2:60:cf:4b:53:8e:87:9b:2f:
         34:d4:dc:6b:13:17:07:aa:98:94:0b:f6:ad:ca:ac:29:58:09:
         0d:0a:e3:5e:02:8d:93:82:01:36:68:bd:0a:91:84:86:ba:52:
         d9:2c:95:9e:f3:c2:ab:2e:66:38:12:b4:34:21:ab:f2:f0:cc:
         b8:3e:9d:d6:07:73:53:2b:3c:46:c8:4c:65:35:bb:b5:2e:73:
         54:18:17:fe:97:93:64:82:a3:56:b1:19:90:b1:e4:51:4c:4c:
         9f:b1:90:cf:5a:64:69:23:21:29:1f:9e:ca:f6:92:05:2c:15:
         32:8d:e4:88:27:df:76:17:c0:24:22:26:a1:db:68:31:20:8e:
         fe:47:90:98:55:c8:3c:9d:9c:24:cd:d7:4f:ee:a0:bc:e6:26:
         04:30:63:f8:2d:0d:49:7e:b7:03:93:cd:60:8b:2c:6c:91:09:
         3b:e6:c5:a7:2e:4d:5c:91:8e:8c:86:d8:e4:b8:1a:0d:eb:42:
         a5:7e:44:9a:05:59:85:ed:97:1c:89:b2:db:c3:69:c0:00:67:
         d8:91:5e:67:d2:1f:0a:71:32:9e:9a:39:b8:a4:5a:c4:fe:78:
         d1:81:3e:1a:b5:c7:24:3b:af:ea:9a:6b:3c:2a:2a:17:c0:b0:
         27:ec:5f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:39:11 2026 by rpki-client