Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/0/323830343a386661383a3a2f33322d3438203d3e203631363137.roa
File:                     323830343a386661383a3a2f33322d3438203d3e203631363137.roa (raw, json)
Hash identifier:          6iaQHUnKdLPIwjicncsmdgP+MTad/WZfO0tPQaeqrGo=
Subject key identifier:   F0:7A:E6:41:E7:31:E0:7A:F0:A3:C3:D5:8A:1E:3E:EE:9B:6E:56:1F
Certificate issuer:       /CN=304A3ACEA112A3C2EFC2FE69AD6E600EBA56B2D8
Certificate serial:       704DA294C73575D011569ACAADE2F1C821895F93
Authority key identifier: 30:4A:3A:CE:A1:12:A3:C2:EF:C2:FE:69:AD:6E:60:0E:BA:56:B2:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/304A3ACEA112A3C2EFC2FE69AD6E600EBA56B2D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/0/323830343a386661383a3a2f33322d3438203d3e203631363137.roa
Signing time:             Sat 28 Feb 2026 23:42:11 +0000
ROA not before:           Sat 28 Feb 2026 23:37:11 +0000
ROA not after:            Sat 27 Feb 2027 23:42:11 +0000
asID:                     61617
IP address blocks:        2804:8fa8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/0/304A3ACEA112A3C2EFC2FE69AD6E600EBA56B2D8.crl
                          rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/0/304A3ACEA112A3C2EFC2FE69AD6E600EBA56B2D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/304A3ACEA112A3C2EFC2FE69AD6E600EBA56B2D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 15:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:4d:a2:94:c7:35:75:d0:11:56:9a:ca:ad:e2:f1:c8:21:89:5f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=304A3ACEA112A3C2EFC2FE69AD6E600EBA56B2D8
        Validity
            Not Before: Feb 28 23:37:11 2026 GMT
            Not After : Feb 27 23:42:11 2027 GMT
        Subject: CN=F07AE641E731E07AF0A3C3D58A1E3EEE9B6E561F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:05:18:2d:d8:a4:74:ff:90:60:f7:7f:88:d5:
                    0d:50:c1:42:9f:e5:75:5f:45:a9:d9:89:b3:bf:40:
                    12:26:fc:e5:2e:23:9b:36:fa:be:86:04:ee:d4:61:
                    e2:8c:d5:2c:a7:6f:c5:82:1a:77:ac:8d:f8:c6:37:
                    9a:47:2b:22:e7:1e:c6:a5:71:e8:1b:e0:d5:e1:d3:
                    17:91:6f:19:19:2c:9b:71:31:26:90:16:20:a5:ac:
                    40:07:1e:57:d2:fa:33:90:9c:47:a3:9a:e8:54:6c:
                    7b:ef:c6:6a:3d:e5:51:80:df:3e:7d:0c:b4:43:e3:
                    10:a8:c0:ac:b2:97:b7:e8:7d:2c:0c:42:e0:1d:cd:
                    83:61:ce:87:c0:62:c2:bf:9d:54:87:ff:a8:ae:06:
                    64:1d:a1:50:31:f7:b9:68:f4:7a:06:3e:7c:88:72:
                    de:5f:7a:7b:41:c9:0b:d4:4c:b4:1b:12:7e:ac:4f:
                    88:a5:3a:de:5d:da:6e:ba:3a:ff:92:b7:8b:e0:e4:
                    df:4e:11:c8:ba:53:81:6d:15:05:ef:ed:e6:ba:af:
                    8a:f3:ee:10:18:04:7e:84:59:ea:b2:57:c8:59:56:
                    a5:57:73:74:62:0d:00:36:85:87:e9:3a:65:df:d1:
                    84:fd:a0:ef:1f:d6:d7:ba:ed:f9:f9:13:55:d4:61:
                    a2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:7A:E6:41:E7:31:E0:7A:F0:A3:C3:D5:8A:1E:3E:EE:9B:6E:56:1F
            X509v3 Authority Key Identifier:
                keyid:30:4A:3A:CE:A1:12:A3:C2:EF:C2:FE:69:AD:6E:60:0E:BA:56:B2:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/0/304A3ACEA112A3C2EFC2FE69AD6E600EBA56B2D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/304A3ACEA112A3C2EFC2FE69AD6E600EBA56B2D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/0/323830343a386661383a3a2f33322d3438203d3e203631363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8fa8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:d7:51:c6:7f:62:b6:22:cb:1d:df:0a:7e:a8:91:08:ab:cb:
         96:8f:fc:c0:a2:0d:87:1e:7d:b3:7b:b7:12:b9:00:ac:2c:f0:
         b6:0a:4f:42:01:9b:f9:0f:ca:e5:9c:59:a5:fd:87:8c:10:19:
         2c:35:b0:dd:27:cf:91:5e:22:af:d0:af:2c:64:12:fd:51:5b:
         07:fd:90:ba:d3:a5:b8:bb:e0:4b:24:39:cb:d0:fb:f8:09:12:
         d0:3f:0b:7d:dc:00:7d:8b:83:a9:6e:12:a4:cc:cd:54:be:b5:
         54:fb:a0:3a:a7:c8:3b:da:2b:3b:bd:ec:17:63:e6:f1:ee:b5:
         fb:85:81:bd:53:c3:5e:95:bd:81:25:e6:a6:64:b5:02:87:2c:
         ae:30:3b:74:c0:6a:25:53:43:0a:97:2a:ac:4f:f9:f7:c8:b1:
         54:33:9a:8c:2d:6c:2c:f6:c7:98:9f:c1:80:a6:da:fe:cc:52:
         d8:fb:8f:46:ef:d6:82:b0:a5:5e:8c:c6:e8:f2:b7:b1:3b:18:
         d5:dc:ea:52:71:37:41:84:5b:0a:f1:bf:7a:8f:a1:21:ff:b7:
         59:7d:a7:d2:46:20:05:d2:68:49:9e:3a:dc:d0:50:7a:be:04:
         9f:12:14:b8:bd:26:57:ff:64:72:c3:ec:e3:41:f6:b3:fe:8c:
         91:57:5b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:00 2026 by rpki-client