Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/323830343a353138633a3a2f33322d313238203d3e20323638343539.roa
File:                     323830343a353138633a3a2f33322d313238203d3e20323638343539.roa (raw, json)
Hash identifier:          XN5bonTMzyMWpUhuJizBWhOI+we+4OSJGpCDJZt+DdY=
Subject key identifier:   FE:78:B4:01:51:7F:BC:64:E8:97:5B:B7:BF:1F:FA:83:76:50:2E:50
Certificate issuer:       /CN=CA78BCB51F15F29BEBB3DA7281CF011AF4FB1582
Certificate serial:       766E86512BC30DB4289625D50FE4274BC9665082
Authority key identifier: CA:78:BC:B5:1F:15:F2:9B:EB:B3:DA:72:81:CF:01:1A:F4:FB:15:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA78BCB51F15F29BEBB3DA7281CF011AF4FB1582.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/323830343a353138633a3a2f33322d313238203d3e20323638343539.roa
Signing time:             Wed 22 Apr 2026 19:16:33 +0000
ROA not before:           Wed 22 Apr 2026 19:11:33 +0000
ROA not after:            Wed 21 Apr 2027 19:16:33 +0000
asID:                     268459
IP address blocks:        2804:518c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/CA78BCB51F15F29BEBB3DA7281CF011AF4FB1582.crl
                          rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/CA78BCB51F15F29BEBB3DA7281CF011AF4FB1582.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA78BCB51F15F29BEBB3DA7281CF011AF4FB1582.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:6e:86:51:2b:c3:0d:b4:28:96:25:d5:0f:e4:27:4b:c9:66:50:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA78BCB51F15F29BEBB3DA7281CF011AF4FB1582
        Validity
            Not Before: Apr 22 19:11:33 2026 GMT
            Not After : Apr 21 19:16:33 2027 GMT
        Subject: CN=FE78B401517FBC64E8975BB7BF1FFA8376502E50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a2:c3:cc:8f:aa:e5:53:ba:59:c4:da:c5:85:
                    eb:c6:5e:bc:69:c4:55:2f:cc:66:50:cf:e7:d0:94:
                    09:ca:dd:da:01:9d:41:96:3f:56:e8:58:49:7c:e3:
                    1c:53:84:c6:ee:55:f4:4a:02:f7:15:f6:09:42:c2:
                    3d:c4:84:f9:03:a8:f9:01:86:19:eb:83:d9:23:5f:
                    f1:f1:cf:7c:bc:bc:88:97:7d:08:12:d1:1c:b9:2b:
                    f6:ff:0d:97:fa:98:e3:cb:19:89:25:eb:68:8d:fe:
                    5e:31:4f:5c:97:eb:9a:d3:41:e6:c2:1f:d0:85:29:
                    01:58:ad:cf:d3:c5:d7:3a:0a:6b:46:89:86:8d:a8:
                    16:27:d9:54:15:8d:c3:e6:6f:f7:71:ee:2b:ae:73:
                    3c:3c:3e:a2:4e:a6:fe:6c:83:99:15:42:48:c9:aa:
                    bc:89:8f:75:a4:76:a9:42:68:2c:1f:37:b5:75:78:
                    a8:3a:cb:52:4e:3d:8e:21:c2:f6:d9:3f:46:38:f1:
                    08:7f:87:52:cc:7c:14:cb:6b:81:c4:1a:18:c9:69:
                    10:7d:51:b5:3f:d5:78:50:c0:9e:f0:e1:02:41:1e:
                    db:a7:ff:1e:e3:60:47:09:6a:62:cf:f6:94:3e:66:
                    a5:37:b4:7a:ea:08:31:15:e8:10:21:82:24:70:ae:
                    76:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:78:B4:01:51:7F:BC:64:E8:97:5B:B7:BF:1F:FA:83:76:50:2E:50
            X509v3 Authority Key Identifier:
                keyid:CA:78:BC:B5:1F:15:F2:9B:EB:B3:DA:72:81:CF:01:1A:F4:FB:15:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/CA78BCB51F15F29BEBB3DA7281CF011AF4FB1582.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA78BCB51F15F29BEBB3DA7281CF011AF4FB1582.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/323830343a353138633a3a2f33322d313238203d3e20323638343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:518c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:3a:93:fb:36:f1:3c:6c:01:17:34:35:af:31:68:c1:aa:d1:
         8d:6c:4a:1f:98:37:ce:18:d9:af:d4:db:1f:52:91:3e:1a:7b:
         04:10:24:4b:e4:76:6f:aa:59:28:31:1e:71:0f:71:cc:e1:6d:
         1c:fa:25:c9:33:af:a3:18:30:d2:29:98:91:04:b8:b3:1d:a8:
         b4:b4:e2:fc:38:39:92:d9:27:99:3f:f4:17:a8:86:69:e5:bb:
         1f:ad:6b:bf:d8:5c:7c:a5:34:4b:58:d4:97:c8:a3:3c:ac:c1:
         3c:84:a3:8e:1d:e1:58:1e:e0:11:34:31:d3:4f:cf:d0:7a:eb:
         10:85:09:e6:b1:0b:fb:5d:18:98:38:4a:ac:b3:12:e7:62:c3:
         f2:19:7a:b9:e7:96:e8:c5:34:9e:a3:67:09:b0:b7:6f:f4:ae:
         ff:d4:ae:0f:75:ef:43:49:c0:d1:7a:9c:15:df:eb:ba:f9:ea:
         c7:8c:b8:ec:86:d0:be:95:a9:21:fc:54:3a:28:b9:2d:c8:31:
         04:5f:3f:08:8a:e2:0d:38:94:ff:63:98:9d:ab:67:89:10:21:
         9a:67:a2:f1:a6:46:2a:11:a4:da:f8:e3:7d:31:ac:4f:e2:24:
         83:6e:d6:f1:af:4a:3a:15:f4:3a:0b:e4:b1:9d:02:c9:dc:d5:
         7d:e8:38:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:19:37 2026 by rpki-client