Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/323830313a38303a3734303a3a2f34382d3438203d3e20323633353638.roa
File:                     323830313a38303a3734303a3a2f34382d3438203d3e20323633353638.roa (raw, json)
Hash identifier:          phlxUkISdNjJuln+QQwktzSFYuQE9nVpEaEj1D0OpG0=
Subject key identifier:   A8:DC:47:5A:85:8D:B8:34:3B:4C:38:4D:F4:FA:CD:AB:7B:7A:AD:DD
Certificate issuer:       /CN=EC8C5177426EBAD56894C2BA770DB2AAB119516F
Certificate serial:       31E6D7DAFF410D7E63CFC0EDC6A5976E8CCA1179
Authority key identifier: EC:8C:51:77:42:6E:BA:D5:68:94:C2:BA:77:0D:B2:AA:B1:19:51:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC8C5177426EBAD56894C2BA770DB2AAB119516F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/323830313a38303a3734303a3a2f34382d3438203d3e20323633353638.roa
Signing time:             Wed 18 Mar 2026 12:09:01 +0000
ROA not before:           Wed 18 Mar 2026 12:04:01 +0000
ROA not after:            Wed 17 Mar 2027 12:09:01 +0000
asID:                     263568
IP address blocks:        2801:80:740::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/EC8C5177426EBAD56894C2BA770DB2AAB119516F.crl
                          rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/EC8C5177426EBAD56894C2BA770DB2AAB119516F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC8C5177426EBAD56894C2BA770DB2AAB119516F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 10:57:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e6:d7:da:ff:41:0d:7e:63:cf:c0:ed:c6:a5:97:6e:8c:ca:11:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC8C5177426EBAD56894C2BA770DB2AAB119516F
        Validity
            Not Before: Mar 18 12:04:01 2026 GMT
            Not After : Mar 17 12:09:01 2027 GMT
        Subject: CN=A8DC475A858DB8343B4C384DF4FACDAB7B7AADDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:12:ef:0f:80:17:e3:ca:8d:fc:f1:f3:59:ef:
                    ea:7b:99:47:c5:65:93:e3:a1:5c:12:e0:7d:ff:6a:
                    d4:73:18:e7:71:37:7c:d2:36:57:73:bd:68:a3:bc:
                    c4:c7:4d:bf:9f:b6:0b:69:b1:e8:f3:ec:c9:41:45:
                    4a:c0:96:ed:84:59:39:39:28:74:ce:17:35:ea:33:
                    4c:4d:f3:6b:ed:f0:e4:a2:36:7f:90:45:3b:be:ff:
                    4b:5a:fe:9e:0e:e2:a2:f8:70:67:d0:0d:a4:ca:4e:
                    0c:b0:5b:3e:38:72:03:9f:00:14:bb:8a:d2:71:e2:
                    e1:bd:87:2b:3b:86:90:05:56:8e:03:75:b5:e8:8a:
                    a1:33:91:a1:83:65:0a:0f:7b:68:dc:4b:0a:63:b6:
                    28:82:78:03:f1:41:e4:b5:94:9a:f2:72:69:c5:7b:
                    b3:27:fc:ce:ea:5a:40:91:38:03:80:11:ec:89:81:
                    b0:77:b5:d7:a9:ad:65:4b:1f:79:8e:67:19:dc:48:
                    85:76:c0:43:10:46:d2:ef:dd:01:46:29:6f:3e:65:
                    32:47:eb:54:1f:af:3e:7e:e3:9d:0d:b3:a0:9a:39:
                    6c:bb:d2:ab:c8:4f:62:09:46:99:0a:07:76:4c:52:
                    86:5a:93:9f:b7:95:d8:82:32:82:68:29:78:7f:42:
                    7e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:DC:47:5A:85:8D:B8:34:3B:4C:38:4D:F4:FA:CD:AB:7B:7A:AD:DD
            X509v3 Authority Key Identifier:
                keyid:EC:8C:51:77:42:6E:BA:D5:68:94:C2:BA:77:0D:B2:AA:B1:19:51:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/EC8C5177426EBAD56894C2BA770DB2AAB119516F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC8C5177426EBAD56894C2BA770DB2AAB119516F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/323830313a38303a3734303a3a2f34382d3438203d3e20323633353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:740::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:fd:ab:20:33:0b:c9:74:d2:6a:98:2e:62:e4:26:0e:44:d6:
         33:30:2e:04:e8:95:f6:d6:60:72:2d:1d:f3:f7:0d:a2:b7:75:
         b6:2f:20:e4:a5:b3:77:9e:28:8a:bf:14:8e:26:03:a6:dc:59:
         62:27:79:f9:a7:f6:67:53:39:9c:68:57:ed:a7:f6:b7:1e:dd:
         29:f1:bd:33:ae:35:70:c9:6b:55:59:21:15:eb:e5:77:e7:a5:
         21:1c:ed:cf:6b:70:05:fe:32:64:00:01:41:3e:de:35:23:bb:
         e5:5e:be:37:54:60:29:b0:fe:c8:7b:17:b4:a0:bf:f1:79:1d:
         6c:0d:f6:c9:28:37:a4:a2:ff:ef:42:3c:bf:3e:35:38:f8:20:
         45:86:e1:49:56:bd:85:12:f3:14:0d:d3:53:6b:ae:bd:dc:91:
         c8:14:e2:a7:fb:5e:f5:e5:db:48:e1:46:4f:a1:69:42:ac:ad:
         70:f1:db:4b:2f:4c:99:1a:68:ce:29:c7:d2:d8:0f:e1:e6:2f:
         57:1e:df:ae:e7:fc:50:10:06:74:c3:1a:82:69:98:bf:2f:91:
         a2:66:9a:c6:31:bd:0e:b3:4b:d4:68:02:21:b6:70:6f:e1:34:
         ce:67:ad:12:0d:38:c8:49:77:ec:14:e2:d3:50:9d:0b:41:db:
         00:39:00:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:21:14 2026 by rpki-client