Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/323830343a336237383a3a2f33322d313238203d3e20323636313531.roa
File:                     323830343a336237383a3a2f33322d313238203d3e20323636313531.roa (raw, json)
Hash identifier:          o0daLvhYrDi1QW0f3fw0sJcNQFVER+0V1082y8uQIUc=
Subject key identifier:   64:15:C2:FF:62:0B:27:95:CA:B8:A5:25:CD:20:51:22:63:50:F4:B9
Certificate issuer:       /CN=77D157822A54058798E472D529CD09C08A291356
Certificate serial:       246F9E41C6971098DEDB5F7E422F1BB2CA89490D
Authority key identifier: 77:D1:57:82:2A:54:05:87:98:E4:72:D5:29:CD:09:C0:8A:29:13:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77D157822A54058798E472D529CD09C08A291356.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/323830343a336237383a3a2f33322d313238203d3e20323636313531.roa
Signing time:             Tue 28 Apr 2026 02:37:02 +0000
ROA not before:           Tue 28 Apr 2026 02:32:02 +0000
ROA not after:            Tue 27 Apr 2027 02:37:02 +0000
asID:                     266151
IP address blocks:        2804:3b78::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/77D157822A54058798E472D529CD09C08A291356.crl
                          rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/77D157822A54058798E472D529CD09C08A291356.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77D157822A54058798E472D529CD09C08A291356.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 19:58:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:6f:9e:41:c6:97:10:98:de:db:5f:7e:42:2f:1b:b2:ca:89:49:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77D157822A54058798E472D529CD09C08A291356
        Validity
            Not Before: Apr 28 02:32:02 2026 GMT
            Not After : Apr 27 02:37:02 2027 GMT
        Subject: CN=6415C2FF620B2795CAB8A525CD2051226350F4B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ad:26:b6:2f:2e:fb:e6:6f:66:91:79:8b:73:
                    95:6f:1a:d9:37:0a:1f:b1:76:f1:40:f1:3c:be:fe:
                    fd:1a:64:dc:f2:48:1b:61:4c:0b:e4:24:46:0c:ee:
                    04:e5:1d:59:79:03:26:76:34:83:3a:83:25:da:81:
                    ac:9e:4d:01:23:f5:18:ba:d8:9a:00:14:15:bd:af:
                    fa:64:62:bf:a2:91:97:82:22:2a:a7:5e:53:7b:02:
                    01:74:2e:07:c9:e4:97:69:f5:1b:37:13:52:5c:b7:
                    a8:b1:73:d4:a3:e3:14:59:86:24:5c:87:2e:db:4a:
                    0d:fa:d9:0d:72:e0:a0:4e:7d:50:f7:d3:ef:05:e8:
                    09:6b:0d:c3:08:8b:a6:bc:94:2e:63:51:e5:60:44:
                    ae:d0:ec:af:7f:92:94:bd:b8:32:25:ee:01:bc:7e:
                    a3:a3:9a:9e:6b:80:b2:0a:24:fe:08:43:1c:42:3f:
                    c6:c9:cc:0f:d9:ed:17:f5:90:2d:24:4c:cd:3b:82:
                    dc:42:ee:4e:2b:cc:8f:47:ae:65:cf:69:8e:e1:56:
                    39:0f:c0:25:95:4a:d9:c8:43:1d:2f:5a:48:a7:92:
                    16:93:52:b2:4b:02:4c:9b:79:ea:a6:51:52:23:0e:
                    b7:77:78:c5:ef:ec:2f:75:cc:b0:dd:cf:f5:a5:e4:
                    01:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:15:C2:FF:62:0B:27:95:CA:B8:A5:25:CD:20:51:22:63:50:F4:B9
            X509v3 Authority Key Identifier:
                keyid:77:D1:57:82:2A:54:05:87:98:E4:72:D5:29:CD:09:C0:8A:29:13:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/77D157822A54058798E472D529CD09C08A291356.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77D157822A54058798E472D529CD09C08A291356.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/323830343a336237383a3a2f33322d313238203d3e20323636313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b78::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:4e:b0:3d:6a:22:72:3d:97:6e:ac:f1:59:f2:84:ba:32:e4:
         07:08:42:f8:91:20:59:64:14:4e:01:92:f2:af:f6:95:f7:8d:
         16:c3:d4:46:92:f6:31:7d:04:94:2d:6e:2f:c4:41:c6:9a:a1:
         ad:0b:90:31:af:40:19:5a:77:83:b9:5c:2c:c7:7a:39:60:35:
         01:22:2b:27:8d:40:cd:38:e3:b7:a3:23:10:eb:54:0e:a7:aa:
         31:88:e4:69:7f:06:2e:05:fd:cc:b8:85:57:df:59:3c:1d:62:
         fd:0d:07:c6:30:4e:ed:f1:78:36:f1:0c:35:2d:ff:06:8d:39:
         86:3f:81:30:74:ae:cc:ad:56:61:03:10:92:4d:e8:f6:cf:69:
         6a:22:12:d4:80:e8:d5:49:70:c5:67:eb:25:a0:57:d7:00:07:
         b7:87:3d:ca:69:e1:d8:84:b6:29:d7:36:15:e8:5b:a6:44:e3:
         f5:62:66:28:27:15:8f:cb:31:40:80:c0:6d:1e:5f:c7:77:e2:
         91:8d:b9:85:88:ed:85:a6:b0:64:db:83:3a:42:74:a8:38:0e:
         fa:73:a9:c5:07:27:61:97:39:dd:b3:e3:1a:6e:e9:92:51:13:
         ca:60:32:55:aa:ed:0c:f6:a1:9c:9d:72:f1:5d:8d:33:5f:51:
         4a:7f:79:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 22:16:15 2026 by rpki-client