Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/323830343a376531383a3a2f33322d313238203d3e20323731363032.roa
File:                     323830343a376531383a3a2f33322d313238203d3e20323731363032.roa (raw, json)
Hash identifier:          I6CrKREpR3G1zKzM+l1uY0N/pDdfMeCiMRGy+koVDpE=
Subject key identifier:   16:00:FB:29:CE:C1:C6:4C:06:63:27:E5:3B:1F:49:A9:51:5C:85:5A
Certificate issuer:       /CN=7ADC4A0F30F84A13F06E94A86F034E04BF92B875
Certificate serial:       5A55D3A3F700634F791A1AB89CA85DD1AC2E0D7C
Authority key identifier: 7A:DC:4A:0F:30:F8:4A:13:F0:6E:94:A8:6F:03:4E:04:BF:92:B8:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/323830343a376531383a3a2f33322d313238203d3e20323731363032.roa
Signing time:             Mon 02 Mar 2026 21:17:48 +0000
ROA not before:           Mon 02 Mar 2026 21:12:48 +0000
ROA not after:            Mon 01 Mar 2027 21:17:48 +0000
asID:                     271602
IP address blocks:        2804:7e18::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.crl
                          rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:55:d3:a3:f7:00:63:4f:79:1a:1a:b8:9c:a8:5d:d1:ac:2e:0d:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ADC4A0F30F84A13F06E94A86F034E04BF92B875
        Validity
            Not Before: Mar  2 21:12:48 2026 GMT
            Not After : Mar  1 21:17:48 2027 GMT
        Subject: CN=1600FB29CEC1C64C066327E53B1F49A9515C855A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:28:1b:72:39:b8:16:23:12:05:3f:c8:69:eb:
                    b6:5b:56:a5:95:21:08:f4:04:6d:5e:59:e9:43:66:
                    a8:12:3d:b4:09:93:16:bb:68:f9:c3:f2:3f:cd:bb:
                    0e:51:17:d4:ae:e2:e5:17:2f:85:67:05:b5:9c:e8:
                    f7:51:bb:9a:66:27:e9:c5:6e:6f:f8:37:a6:88:77:
                    9b:de:f7:6e:44:0c:4e:d6:70:f0:c1:ed:dc:cd:24:
                    b3:80:99:f1:e4:21:39:72:6e:88:e2:d0:55:51:94:
                    55:55:59:d5:84:12:25:bb:48:a0:72:7d:1a:45:f1:
                    51:65:d5:c8:be:a3:0e:b7:7d:3b:87:85:e5:a3:bd:
                    b3:b3:5c:28:45:62:d4:a6:21:67:f5:67:9b:00:3e:
                    d6:eb:81:91:3a:10:01:bb:d8:44:9e:9f:8d:db:32:
                    0c:ce:fb:65:cf:6c:c6:f2:14:60:e4:7f:f8:bd:99:
                    23:15:e1:b7:ab:c2:7b:74:0d:c2:4f:5a:21:4d:25:
                    87:0e:21:72:aa:26:72:1f:6e:75:4b:47:58:e9:f0:
                    a2:f6:68:cf:cd:ba:18:63:fb:8b:e1:d1:d3:16:a3:
                    8e:34:bb:6b:27:a7:68:25:2d:90:84:73:1f:8f:fc:
                    fb:b3:39:50:2c:78:ad:ad:8f:d1:86:bc:28:7b:f1:
                    37:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:00:FB:29:CE:C1:C6:4C:06:63:27:E5:3B:1F:49:A9:51:5C:85:5A
            X509v3 Authority Key Identifier:
                keyid:7A:DC:4A:0F:30:F8:4A:13:F0:6E:94:A8:6F:03:4E:04:BF:92:B8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/323830343a376531383a3a2f33322d313238203d3e20323731363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e18::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:eb:a8:58:55:43:fd:ae:b2:7e:35:b7:31:56:37:78:fe:bb:
         ed:28:a2:77:3a:e0:d9:45:dc:84:1e:5e:3c:0f:f0:16:68:87:
         13:e9:05:63:60:f8:ec:26:4f:7b:51:d8:8f:fc:86:aa:26:29:
         ae:46:1b:31:ba:6c:32:72:85:88:8a:82:13:8c:fd:57:52:85:
         ce:b9:d5:ec:b3:61:bc:8d:8b:31:13:fa:2f:05:14:32:82:7c:
         d5:8b:36:16:97:b6:81:aa:41:48:cf:0a:fd:14:15:fd:7c:54:
         10:f2:f4:04:11:c7:41:e8:af:cd:26:01:57:b0:99:28:fa:59:
         f6:98:1d:08:de:80:ac:ad:cb:42:26:d4:c6:ab:40:08:16:d9:
         0d:cb:61:43:7c:13:fe:63:3c:e3:f4:49:4c:fa:49:43:16:31:
         09:19:09:e8:ca:e9:17:e9:95:2f:f0:ac:92:f0:ec:1a:ab:8b:
         12:29:56:23:9b:43:3d:08:28:6d:5b:77:e7:97:20:c8:93:e4:
         38:2d:51:94:bb:9e:50:fb:9b:ff:ea:19:95:42:6a:b7:a2:0b:
         12:5e:e3:47:0a:d4:1d:29:6b:62:51:29:0d:db:eb:99:78:af:
         9c:3e:a2:58:d8:13:0c:d2:34:7c:3a:76:d8:1e:44:e5:99:ac:
         82:94:b6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:51:13 2026 by rpki-client