Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/323830343a343764303a3a2f33322d313238203d3e20323637303738.roa
File:                     323830343a343764303a3a2f33322d313238203d3e20323637303738.roa (raw, json)
Hash identifier:          9jx3USZeQW3V29hKHqj4ot7hMLRW6YPcVHYh3WO3zPU=
Subject key identifier:   F5:69:87:1D:C0:94:49:39:21:ED:16:49:62:D6:FF:09:CC:85:56:57
Certificate issuer:       /CN=89981F30F6E27EB7EA02168C27E449645D5F7290
Certificate serial:       7E7506E07A7D62B1DC3BD2C2CADB8345D9079F04
Authority key identifier: 89:98:1F:30:F6:E2:7E:B7:EA:02:16:8C:27:E4:49:64:5D:5F:72:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89981F30F6E27EB7EA02168C27E449645D5F7290.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/323830343a343764303a3a2f33322d313238203d3e20323637303738.roa
Signing time:             Thu 19 Mar 2026 17:46:26 +0000
ROA not before:           Thu 19 Mar 2026 17:41:26 +0000
ROA not after:            Thu 18 Mar 2027 17:46:26 +0000
asID:                     267078
IP address blocks:        2804:47d0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/89981F30F6E27EB7EA02168C27E449645D5F7290.crl
                          rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/89981F30F6E27EB7EA02168C27E449645D5F7290.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89981F30F6E27EB7EA02168C27E449645D5F7290.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 13:13:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:75:06:e0:7a:7d:62:b1:dc:3b:d2:c2:ca:db:83:45:d9:07:9f:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89981F30F6E27EB7EA02168C27E449645D5F7290
        Validity
            Not Before: Mar 19 17:41:26 2026 GMT
            Not After : Mar 18 17:46:26 2027 GMT
        Subject: CN=F569871DC094493921ED164962D6FF09CC855657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ff:ef:68:1b:96:b7:61:5b:e5:5c:7b:2c:7b:
                    4b:5f:fa:85:83:2f:98:8d:e3:a0:94:ed:f7:e4:09:
                    f6:74:90:c7:02:d5:bc:da:4c:e1:13:e4:63:4d:49:
                    0e:2e:7b:5c:9a:04:ce:7e:c2:b9:64:8b:a4:03:38:
                    0e:b1:a5:eb:60:88:19:e5:d1:fd:ad:2d:3e:da:ae:
                    84:c4:eb:34:93:dc:fc:78:fa:25:a8:7f:78:f2:6f:
                    3c:61:78:e1:c9:7a:39:e1:e6:2c:25:f7:63:bb:f8:
                    7d:1d:80:1b:2a:85:0b:4d:c3:cc:2c:d5:33:0f:fe:
                    72:b9:2e:4e:44:ca:a4:19:b3:5d:97:bc:ba:09:76:
                    9d:e3:de:d3:23:cd:4a:01:69:67:37:2c:e5:6f:18:
                    94:5e:50:ba:f8:f7:68:3a:bf:84:12:b3:8b:7d:d4:
                    31:db:f9:3f:fe:24:76:70:e8:06:0e:a0:1a:a3:7b:
                    70:25:57:66:d5:bc:e7:14:a4:34:a8:49:d5:5d:9c:
                    36:60:49:5c:76:88:43:5e:84:8b:fe:b2:38:c8:ec:
                    53:e2:af:50:98:84:be:9e:67:f8:cc:bf:f1:75:cd:
                    d0:ad:a3:51:af:5d:ae:11:d9:c1:48:b9:a8:3c:fe:
                    ca:22:59:c1:7b:21:ca:2b:10:2b:b7:ed:7d:28:08:
                    60:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:69:87:1D:C0:94:49:39:21:ED:16:49:62:D6:FF:09:CC:85:56:57
            X509v3 Authority Key Identifier:
                keyid:89:98:1F:30:F6:E2:7E:B7:EA:02:16:8C:27:E4:49:64:5D:5F:72:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/89981F30F6E27EB7EA02168C27E449645D5F7290.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89981F30F6E27EB7EA02168C27E449645D5F7290.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/323830343a343764303a3a2f33322d313238203d3e20323637303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:64:c8:b0:83:f0:0b:08:05:81:83:0c:93:b3:78:51:34:52:
         61:dc:b2:0a:90:06:de:c7:7a:8d:c1:3e:e5:47:b4:d6:90:b7:
         48:c3:af:9c:a1:e6:3f:8d:91:4c:6e:81:f4:68:72:30:68:75:
         18:4c:f1:32:92:f7:ea:27:15:e9:e9:38:aa:4d:4d:dc:78:87:
         6e:70:04:c3:73:71:9a:46:d5:2d:c2:06:03:45:0d:43:30:4b:
         9e:b2:fa:66:24:94:6f:f7:9f:40:90:f6:b3:21:27:0b:59:1f:
         5d:82:80:0f:8a:0c:7d:29:be:d4:48:8b:3a:df:7f:d3:c4:dc:
         d1:b2:ff:9d:fb:65:78:e5:74:8a:d8:17:82:e1:d9:ec:7a:ae:
         23:31:93:d0:19:fc:50:3d:4f:e2:6b:23:e8:27:0d:08:0c:a7:
         26:16:b7:e4:eb:d4:70:61:48:bb:ea:90:99:2d:e1:3b:25:1f:
         c2:00:67:fd:28:be:41:f4:c9:3e:81:c1:d1:94:74:33:fb:3b:
         09:78:61:bb:90:f7:4d:24:29:9a:99:53:f5:13:f2:d1:ca:4e:
         d0:e4:9c:30:8e:38:32:52:b0:96:73:da:ac:62:77:a8:fa:de:
         29:16:7a:fa:84:30:18:52:ae:b8:0e:61:93:a6:eb:ac:a9:fa:
         4a:86:f3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:23:35 2026 by rpki-client