Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/323830343a353431383a3a2f33332d3333203d3e20323638363238.roa
File:                     323830343a353431383a3a2f33332d3333203d3e20323638363238.roa (raw, json)
Hash identifier:          KbgYLn/WFCyObzQ7aBZzdns+TrS7iBM1ml1VXPBQqAs=
Subject key identifier:   37:F2:5B:09:AD:C0:3B:F8:87:E1:50:E8:D1:5C:50:DA:67:5F:3E:72
Certificate issuer:       /CN=EE205740FC49BA792B7557BB08E4BABC2F8EA27B
Certificate serial:       7E8FBB4774884196192BE15A3972E8F9B72F7B73
Authority key identifier: EE:20:57:40:FC:49:BA:79:2B:75:57:BB:08:E4:BA:BC:2F:8E:A2:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE205740FC49BA792B7557BB08E4BABC2F8EA27B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/323830343a353431383a3a2f33332d3333203d3e20323638363238.roa
Signing time:             Thu 16 Jul 2026 14:19:05 +0000
ROA not before:           Thu 16 Jul 2026 14:14:05 +0000
ROA not after:            Thu 15 Jul 2027 14:19:05 +0000
asID:                     268628
IP address blocks:        2804:5418::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/EE205740FC49BA792B7557BB08E4BABC2F8EA27B.crl
                          rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/EE205740FC49BA792B7557BB08E4BABC2F8EA27B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE205740FC49BA792B7557BB08E4BABC2F8EA27B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 04:57:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:8f:bb:47:74:88:41:96:19:2b:e1:5a:39:72:e8:f9:b7:2f:7b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE205740FC49BA792B7557BB08E4BABC2F8EA27B
        Validity
            Not Before: Jul 16 14:14:05 2026 GMT
            Not After : Jul 15 14:19:05 2027 GMT
        Subject: CN=37F25B09ADC03BF887E150E8D15C50DA675F3E72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:50:2b:ad:62:04:08:1e:b8:aa:96:5c:f2:04:
                    7f:c1:69:56:47:5e:2e:04:43:85:3d:3e:fc:e8:9b:
                    d7:ca:3a:db:e3:0b:f8:e1:7a:ec:fe:1f:a5:b1:3e:
                    1a:d5:5b:f9:58:c5:2e:7d:5e:f6:4b:02:3b:6c:15:
                    c8:32:58:45:31:ee:b6:f3:1b:bb:a9:24:7c:86:d5:
                    64:0d:39:a6:a4:82:85:f3:cc:1d:26:ec:31:98:cc:
                    18:3d:8d:96:69:f5:e0:9e:a7:2e:29:a1:1d:d7:8c:
                    48:14:0f:d9:0a:62:c0:79:58:c2:b4:42:81:3f:f5:
                    b1:e3:54:17:90:bb:a8:bb:7b:47:db:da:f7:62:e1:
                    02:e1:f0:88:d9:f4:42:88:a2:c3:74:27:11:04:9f:
                    24:b6:4e:23:6b:86:3c:70:7a:c7:0f:fb:ed:26:43:
                    f1:6a:b1:c2:6a:94:68:f7:90:fb:11:d7:87:54:3e:
                    f4:d7:1b:79:e3:0d:b9:d7:ea:76:c0:e6:b9:be:cc:
                    91:68:39:43:63:bd:27:62:73:62:8d:fb:7e:70:59:
                    10:a9:b7:af:fa:7b:96:e7:ac:1d:fa:03:0a:2a:a6:
                    0f:d5:35:d5:93:7c:b2:35:f3:c9:e9:48:76:7e:3e:
                    8c:b5:bf:2c:be:62:c3:b2:cc:0e:94:91:ef:fc:4b:
                    de:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F2:5B:09:AD:C0:3B:F8:87:E1:50:E8:D1:5C:50:DA:67:5F:3E:72
            X509v3 Authority Key Identifier:
                keyid:EE:20:57:40:FC:49:BA:79:2B:75:57:BB:08:E4:BA:BC:2F:8E:A2:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/EE205740FC49BA792B7557BB08E4BABC2F8EA27B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE205740FC49BA792B7557BB08E4BABC2F8EA27B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/323830343a353431383a3a2f33332d3333203d3e20323638363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5418::/33

    Signature Algorithm: sha256WithRSAEncryption
         a6:48:a3:1b:78:cd:e5:1e:ec:22:dd:a7:06:9f:b3:dc:e8:47:
         1f:bf:60:54:a0:c7:b1:0f:1d:63:db:6f:aa:a3:27:c3:d1:46:
         d9:97:4d:b1:e5:86:80:c5:ff:4b:a9:3d:22:45:c1:13:cb:0a:
         b7:7c:0c:44:a7:cb:e1:22:2f:34:c3:2a:9f:f7:0d:01:5c:82:
         4d:68:74:0d:46:39:e9:6a:72:97:b5:af:25:44:f8:2d:0b:5d:
         a8:46:81:58:e8:b3:9b:17:d7:d4:cb:bc:cc:eb:10:5c:1a:eb:
         0b:0a:91:41:be:1e:29:dd:a2:33:34:81:f2:d4:a4:3e:6d:17:
         5b:61:b7:7e:69:37:d3:90:e2:bf:25:1f:ec:43:e6:47:cd:5f:
         73:53:7a:ad:ab:dd:95:b5:a0:03:fc:77:c4:f3:fa:b0:40:a5:
         0d:e9:31:e4:77:a5:68:11:c9:81:d9:70:f4:12:db:89:1b:3e:
         58:0c:89:39:b6:44:02:38:9b:27:8d:45:b9:39:52:a3:8e:1a:
         7f:60:3d:af:e0:12:f3:55:12:16:cd:6e:ab:98:55:3e:ed:19:
         1e:53:f0:17:0c:4e:f9:18:87:7d:2c:f6:67:41:4e:ac:e8:e0:
         a5:9e:0b:e7:fa:2a:0e:73:48:8d:64:69:15:f3:73:37:a7:e9:
         45:9b:33:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:34:21 2026 by rpki-client