Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/323830343a356134633a3a2f33322d3438203d3e20323638373633.roa
File:                     323830343a356134633a3a2f33322d3438203d3e20323638373633.roa (raw, json)
Hash identifier:          lb5DzZb1k/lfs1Neo9iYB/HSk7ZRijw4MiJ7e6pirYA=
Subject key identifier:   C8:90:83:27:26:BB:DB:9C:8D:8E:78:9A:C6:D2:22:7F:93:12:0C:D6
Certificate issuer:       /CN=759056D29FFF39251355512175D35C57E1A33318
Certificate serial:       727C87736F2D6A91E1A380C23E4285D575BA11B4
Authority key identifier: 75:90:56:D2:9F:FF:39:25:13:55:51:21:75:D3:5C:57:E1:A3:33:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759056D29FFF39251355512175D35C57E1A33318.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/323830343a356134633a3a2f33322d3438203d3e20323638373633.roa
Signing time:             Tue 24 Mar 2026 16:52:45 +0000
ROA not before:           Tue 24 Mar 2026 16:47:45 +0000
ROA not after:            Tue 23 Mar 2027 16:52:45 +0000
asID:                     268763
IP address blocks:        2804:5a4c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/759056D29FFF39251355512175D35C57E1A33318.crl
                          rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/759056D29FFF39251355512175D35C57E1A33318.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759056D29FFF39251355512175D35C57E1A33318.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 06:29:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:7c:87:73:6f:2d:6a:91:e1:a3:80:c2:3e:42:85:d5:75:ba:11:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759056D29FFF39251355512175D35C57E1A33318
        Validity
            Not Before: Mar 24 16:47:45 2026 GMT
            Not After : Mar 23 16:52:45 2027 GMT
        Subject: CN=C890832726BBDB9C8D8E789AC6D2227F93120CD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e0:68:ce:59:87:d8:ef:41:fa:0c:e4:b8:ad:
                    05:f9:e7:8b:aa:4a:56:49:f0:19:91:4e:1b:cc:19:
                    1d:41:12:11:7a:d0:db:a0:df:74:f9:fe:81:7e:ac:
                    ad:fb:5c:94:d1:cd:6b:68:ef:74:c2:ec:02:48:21:
                    32:b3:7f:61:87:c0:66:88:d1:3e:dc:fa:bb:9a:4a:
                    41:56:ee:22:c1:db:00:c2:79:a1:5f:04:1a:fc:c1:
                    b3:e7:86:05:b1:e2:3f:5a:1f:5f:51:16:78:0d:50:
                    97:4c:52:59:92:6a:d2:37:e6:e0:bf:90:cc:4e:7b:
                    eb:9c:c4:a7:39:bf:85:39:59:b4:50:b5:ea:4e:fd:
                    50:b6:b5:d8:d3:19:b1:d2:51:b4:84:26:5d:03:78:
                    9c:b1:b1:7e:3e:24:7a:ce:9e:2e:00:e4:51:76:de:
                    6d:c5:e7:06:ac:9a:6a:6a:b9:53:1c:a8:52:fd:dc:
                    58:6f:61:57:3c:a9:fa:10:8a:a1:1b:20:bc:32:0f:
                    8a:de:c8:76:5c:df:38:01:d2:56:85:ac:a9:19:54:
                    3a:ac:af:be:69:d8:ad:c4:84:b7:dd:6d:b6:2e:79:
                    42:a3:72:6d:84:5c:0f:c7:6e:a5:1b:06:a2:c2:4a:
                    71:6d:84:7b:f0:5d:f2:5c:40:db:1e:0a:48:9f:34:
                    f0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:90:83:27:26:BB:DB:9C:8D:8E:78:9A:C6:D2:22:7F:93:12:0C:D6
            X509v3 Authority Key Identifier:
                keyid:75:90:56:D2:9F:FF:39:25:13:55:51:21:75:D3:5C:57:E1:A3:33:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/759056D29FFF39251355512175D35C57E1A33318.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759056D29FFF39251355512175D35C57E1A33318.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/323830343a356134633a3a2f33322d3438203d3e20323638373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:b2:e2:e6:7c:0a:b3:16:1f:37:04:8e:f1:a6:d9:76:1a:32:
         34:49:4c:a4:fe:e4:f6:91:47:12:94:82:bf:77:4e:ff:ef:14:
         c9:1b:75:1a:d8:70:31:3a:55:30:e5:07:e4:53:ad:9d:43:ce:
         1f:a0:fd:a4:87:ef:b5:38:e4:87:7a:ef:f8:e2:da:9d:5e:24:
         46:7b:aa:80:69:fe:5b:74:18:86:73:68:9b:0f:85:5e:37:13:
         fa:25:42:05:93:4f:94:ff:9f:3b:9a:63:59:93:21:53:df:2f:
         9a:9e:37:11:42:58:87:e1:b2:46:35:06:b7:1e:ca:e3:38:3f:
         b3:83:a7:12:19:8e:c3:b3:17:58:75:86:e7:34:b1:85:72:1a:
         4e:fc:d1:e3:0c:c8:bb:47:cb:82:76:54:7c:e7:41:6f:cc:58:
         5d:56:a4:77:a8:50:f1:96:47:8f:8c:6a:3e:f6:27:d3:bb:48:
         97:94:74:1f:92:dc:38:1f:69:63:3a:57:cb:ff:6a:bb:be:62:
         2a:39:20:bc:bb:aa:03:2f:8a:4d:b1:95:7c:6b:27:72:51:1e:
         e3:b3:a8:87:ba:fc:80:4c:82:8f:b7:66:10:03:08:ed:75:68:
         96:bf:da:5d:58:ec:d0:e4:67:a2:14:47:d2:ba:72:2d:23:17:
         f8:46:f8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:32:34 2026 by rpki-client