Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/323830343a353334343a3a2f33322d3430203d3e20323638353733.roa
File:                     323830343a353334343a3a2f33322d3430203d3e20323638353733.roa (raw, json)
Hash identifier:          N8q8excI18Lr/L6Z6x1FHBvQEQlLmP7nnllauJyFq7w=
Subject key identifier:   79:62:C8:5D:6D:51:5D:95:CC:C0:15:A2:04:74:20:35:3A:B9:6B:E9
Certificate issuer:       /CN=75155F6533A280D13727D38801E8DB54640195A7
Certificate serial:       238A48CCD617A8B13C84D0388FD09EE79B41DC22
Authority key identifier: 75:15:5F:65:33:A2:80:D1:37:27:D3:88:01:E8:DB:54:64:01:95:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75155F6533A280D13727D38801E8DB54640195A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/323830343a353334343a3a2f33322d3430203d3e20323638353733.roa
Signing time:             Tue 03 Mar 2026 12:59:47 +0000
ROA not before:           Tue 03 Mar 2026 12:54:47 +0000
ROA not after:            Tue 02 Mar 2027 12:59:47 +0000
asID:                     268573
IP address blocks:        2804:5344::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/75155F6533A280D13727D38801E8DB54640195A7.crl
                          rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/75155F6533A280D13727D38801E8DB54640195A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75155F6533A280D13727D38801E8DB54640195A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 15:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:8a:48:cc:d6:17:a8:b1:3c:84:d0:38:8f:d0:9e:e7:9b:41:dc:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75155F6533A280D13727D38801E8DB54640195A7
        Validity
            Not Before: Mar  3 12:54:47 2026 GMT
            Not After : Mar  2 12:59:47 2027 GMT
        Subject: CN=7962C85D6D515D95CCC015A2047420353AB96BE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4e:cc:70:12:30:b1:e5:18:52:c9:73:a0:72:
                    b8:e6:4b:c7:24:44:4f:27:6f:fa:e4:27:68:57:42:
                    3f:54:9d:ee:e2:55:4a:c0:05:e9:31:57:22:9e:71:
                    c8:f1:78:0d:7d:b5:75:10:e9:e9:c2:ae:4a:3f:e4:
                    b0:40:ba:22:40:1c:78:6c:91:2c:82:59:14:e1:d9:
                    5b:d7:bb:f4:d6:17:36:9b:1e:4e:56:7d:59:1b:71:
                    3f:ab:d2:22:45:08:2c:21:44:50:ee:a8:a7:17:2d:
                    8d:dc:1d:85:b3:48:21:1c:1e:25:c8:3f:12:53:1b:
                    df:b2:05:e5:6a:f3:72:96:a5:b5:29:fc:62:26:6d:
                    38:6d:38:ac:7c:57:99:34:f4:64:27:d6:c2:83:1e:
                    29:bf:ce:d7:28:1f:73:1d:94:a7:db:a9:01:18:d1:
                    f8:fc:70:a4:9a:11:13:c5:43:43:be:16:56:ac:b4:
                    f1:91:ae:f3:40:46:95:43:0a:50:57:1f:e3:de:c2:
                    28:fa:a2:db:3b:b4:ce:19:4b:ce:8a:65:c8:c0:54:
                    66:98:c7:0b:c6:f6:dd:d3:e7:8f:e5:c5:81:02:74:
                    e6:04:c9:bf:43:71:08:3b:c9:0e:47:69:be:5e:e3:
                    2b:b8:c6:f9:d6:4b:d2:f2:b4:52:2e:43:cf:dc:23:
                    e9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:62:C8:5D:6D:51:5D:95:CC:C0:15:A2:04:74:20:35:3A:B9:6B:E9
            X509v3 Authority Key Identifier:
                keyid:75:15:5F:65:33:A2:80:D1:37:27:D3:88:01:E8:DB:54:64:01:95:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/75155F6533A280D13727D38801E8DB54640195A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75155F6533A280D13727D38801E8DB54640195A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/323830343a353334343a3a2f33322d3430203d3e20323638353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5344::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:3c:cc:10:86:f4:4a:38:1f:ba:34:b6:d3:81:64:47:bf:15:
         3f:8b:f9:a6:e5:68:41:73:7d:27:35:93:d5:6e:64:fd:54:41:
         83:76:35:f7:fc:db:28:46:68:f6:5f:a0:29:6a:3f:57:c4:44:
         6f:60:bb:82:3c:cf:d0:b1:da:18:27:9c:30:17:b6:ef:03:0f:
         11:7c:60:0a:67:75:07:4a:22:63:78:db:22:7a:67:ed:a6:cf:
         1b:c1:98:d9:5f:ad:aa:67:04:ff:2d:00:67:fb:cd:e9:7d:36:
         69:e3:04:26:71:03:f5:be:55:17:2e:d8:12:e5:93:ba:c1:97:
         17:84:53:fe:f0:9e:99:ed:40:a0:6b:28:f0:1b:3d:3d:09:ef:
         db:26:d2:da:45:5a:38:df:98:91:62:63:8b:7e:56:db:44:91:
         a3:c4:3d:81:b5:95:1e:8a:8d:ee:10:bd:36:71:aa:81:17:67:
         c4:81:71:18:d8:76:87:7d:5b:f8:ba:4d:3f:a1:b8:27:d1:91:
         80:e4:ad:97:b4:14:26:f8:0a:fb:60:49:ee:14:af:6c:6f:f3:
         92:69:91:98:72:02:5e:3a:7e:d7:96:f5:2f:74:ea:f6:2a:c1:
         34:ad:f8:71:de:a4:05:c0:0e:d0:15:8a:31:f6:b6:8b:de:3d:
         5e:9d:48:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:14:31 2026 by rpki-client