Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/323830343a373138343a3a2f33322d3438203d3e20323730373934.roa
File:                     323830343a373138343a3a2f33322d3438203d3e20323730373934.roa (raw, json)
Hash identifier:          KszEvIy+gxfdchtQLmK4dr0UFHdKOlg12qwG5juCB+g=
Subject key identifier:   2C:C6:66:2E:D7:0B:09:F1:F2:93:5A:73:7F:B1:6B:DF:F3:44:2E:F3
Certificate issuer:       /CN=75B7A73D35270C2BDBE7ED7C4C46D596FC4C37A0
Certificate serial:       79767EACC63DF4379E89FF974D8180FD3800DA3E
Authority key identifier: 75:B7:A7:3D:35:27:0C:2B:DB:E7:ED:7C:4C:46:D5:96:FC:4C:37:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75B7A73D35270C2BDBE7ED7C4C46D596FC4C37A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/323830343a373138343a3a2f33322d3438203d3e20323730373934.roa
Signing time:             Mon 23 Mar 2026 12:45:21 +0000
ROA not before:           Mon 23 Mar 2026 12:40:21 +0000
ROA not after:            Mon 22 Mar 2027 12:45:21 +0000
asID:                     270794
IP address blocks:        2804:7184::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/75B7A73D35270C2BDBE7ED7C4C46D596FC4C37A0.crl
                          rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/75B7A73D35270C2BDBE7ED7C4C46D596FC4C37A0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75B7A73D35270C2BDBE7ED7C4C46D596FC4C37A0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 13:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:76:7e:ac:c6:3d:f4:37:9e:89:ff:97:4d:81:80:fd:38:00:da:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75B7A73D35270C2BDBE7ED7C4C46D596FC4C37A0
        Validity
            Not Before: Mar 23 12:40:21 2026 GMT
            Not After : Mar 22 12:45:21 2027 GMT
        Subject: CN=2CC6662ED70B09F1F2935A737FB16BDFF3442EF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:32:6c:dd:99:1f:86:16:fa:e1:a1:56:b7:f4:
                    26:cd:7d:a5:58:11:1e:52:b6:e3:35:67:96:8c:b9:
                    c1:c7:bd:49:c2:f7:80:af:5e:f6:1f:c5:fe:15:a1:
                    93:95:30:68:3c:c9:8d:d6:36:c4:af:61:06:02:f2:
                    26:90:9f:84:53:25:d6:71:7f:38:47:9c:9c:fb:7c:
                    b0:53:c7:26:c1:ae:2c:6c:88:6e:28:d6:01:7c:c2:
                    f5:ad:29:33:83:51:df:be:97:cc:79:8e:5b:6b:47:
                    79:e5:16:51:99:6e:39:b6:61:4f:01:92:b8:46:1b:
                    c5:9c:fe:b1:c8:17:dc:a8:d5:d7:b8:79:22:ad:d2:
                    82:cc:81:9e:00:4c:02:a3:fb:0c:76:ef:86:09:94:
                    91:79:a5:33:b7:38:d0:a3:72:1d:79:b1:f4:d8:e2:
                    6f:7b:94:9d:74:33:57:d9:43:a9:e6:72:e1:a4:35:
                    d8:6a:cb:bb:c7:bb:de:9c:12:1a:ee:d2:67:d3:c6:
                    f4:82:7e:d0:24:fd:49:cf:ed:7b:1b:77:19:76:79:
                    d8:bf:7e:48:2d:ab:1b:05:67:32:f8:ee:2f:0b:ef:
                    61:52:c4:8c:b0:ea:c0:66:df:38:9d:24:3c:75:0e:
                    19:5e:9a:a7:87:ff:78:fa:b0:cf:07:44:36:ae:64:
                    84:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C6:66:2E:D7:0B:09:F1:F2:93:5A:73:7F:B1:6B:DF:F3:44:2E:F3
            X509v3 Authority Key Identifier:
                keyid:75:B7:A7:3D:35:27:0C:2B:DB:E7:ED:7C:4C:46:D5:96:FC:4C:37:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/75B7A73D35270C2BDBE7ED7C4C46D596FC4C37A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75B7A73D35270C2BDBE7ED7C4C46D596FC4C37A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/323830343a373138343a3a2f33322d3438203d3e20323730373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7184::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:d5:cd:05:99:16:f9:b9:9a:4d:32:a0:80:f5:0f:79:d6:45:
         f1:45:51:dc:24:23:e1:59:45:2c:29:7b:f0:11:16:ea:84:a3:
         c8:f5:fb:43:85:14:42:8f:b6:9e:6f:8e:73:fa:44:2c:d0:46:
         6f:d3:98:90:cd:ec:8f:87:a1:8b:a8:02:3d:4b:33:d8:87:89:
         77:4e:f4:8e:8c:af:4b:9e:4d:15:09:97:b4:b6:b5:f4:27:f1:
         1e:84:af:e8:20:89:cb:76:93:f3:81:d5:70:be:08:19:f0:09:
         94:a2:de:8b:d0:9d:b2:d7:b9:14:57:6e:54:13:c2:c3:7f:91:
         20:09:b3:58:2f:50:66:6d:35:7c:4a:e5:a2:23:6d:49:a2:1f:
         4e:68:e3:c7:dd:65:73:cc:58:65:c9:9b:4d:79:a5:ca:d2:aa:
         cd:dc:d4:76:c2:b7:78:bc:db:c2:1e:2a:6c:74:25:aa:0f:c3:
         36:9a:97:e8:06:bf:79:c3:64:d3:af:ab:e2:4c:cd:98:09:07:
         ec:00:3f:ef:c4:51:27:e6:5c:62:dd:a9:53:48:1c:f8:a4:65:
         9c:3c:d7:d5:9d:a5:1e:02:56:c1:bf:69:7b:ff:32:52:ab:f0:
         8d:83:ea:62:7b:3a:30:22:df:ab:9e:ba:66:0f:9a:6f:41:a4:
         5e:7c:e9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:18:46 2026 by rpki-client