Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/323830343a353138633a3a2f33322d313238203d3e20323638343539.roa
File:                     323830343a353138633a3a2f33322d313238203d3e20323638343539.roa (raw, json)
Hash identifier:          RbUQwYt4THo+tx3KJE3HVtUmv0KzN5Ya1yTB9OYntPo=
Subject key identifier:   60:2D:51:0B:E7:44:7B:3D:FC:CC:65:52:1E:2D:22:2B:D4:72:EE:18
Certificate issuer:       /CN=CA78BCB51F15F29BEBB3DA7281CF011AF4FB1582
Certificate serial:       3DD51F4C53BBDD9DB0DDB98E60CE418F94EFE40B
Authority key identifier: CA:78:BC:B5:1F:15:F2:9B:EB:B3:DA:72:81:CF:01:1A:F4:FB:15:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA78BCB51F15F29BEBB3DA7281CF011AF4FB1582.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/323830343a353138633a3a2f33322d313238203d3e20323638343539.roa
Signing time:             Wed 18 Mar 2026 20:40:39 +0000
ROA not before:           Wed 18 Mar 2026 20:35:39 +0000
ROA not after:            Wed 17 Mar 2027 20:40:39 +0000
asID:                     268459
IP address blocks:        2804:518c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/CA78BCB51F15F29BEBB3DA7281CF011AF4FB1582.crl
                          rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/CA78BCB51F15F29BEBB3DA7281CF011AF4FB1582.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA78BCB51F15F29BEBB3DA7281CF011AF4FB1582.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 15:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d5:1f:4c:53:bb:dd:9d:b0:dd:b9:8e:60:ce:41:8f:94:ef:e4:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA78BCB51F15F29BEBB3DA7281CF011AF4FB1582
        Validity
            Not Before: Mar 18 20:35:39 2026 GMT
            Not After : Mar 17 20:40:39 2027 GMT
        Subject: CN=602D510BE7447B3DFCCC65521E2D222BD472EE18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e9:ea:a6:a1:b4:d7:3a:3e:e3:96:cf:7f:95:
                    d5:e7:3e:c6:10:4e:2d:3d:2c:07:f7:fa:fc:57:11:
                    04:7b:56:e0:48:9c:50:70:7b:1b:e3:d5:9c:1b:03:
                    c8:ae:4d:7d:b0:b2:d8:a3:b8:9b:e3:06:c3:d2:74:
                    67:dd:fc:6e:8f:42:0f:49:bd:8c:a1:86:39:57:bb:
                    5e:3e:9f:ed:e4:03:21:98:39:70:ab:e2:3c:f5:56:
                    85:4e:49:1a:83:f7:6b:89:b7:59:98:52:65:58:f8:
                    df:a7:9a:63:f6:3e:8d:d1:6f:9d:d5:e6:b4:a2:1b:
                    4f:b2:d0:dd:4e:a1:b6:02:4a:3b:d9:31:f9:ab:32:
                    23:d3:66:15:97:4b:e1:5a:29:61:ea:6c:e9:68:12:
                    a2:79:a6:87:2d:8f:e7:43:f2:10:92:0d:cc:2c:3b:
                    75:b3:14:93:0b:ab:16:06:48:d5:ef:b0:ee:d8:bd:
                    f3:0d:31:20:0d:16:14:19:dd:7d:17:d8:fb:37:7c:
                    f5:d2:90:0e:fd:fc:4b:65:d9:33:13:14:de:94:78:
                    69:e0:25:a3:d9:46:56:9d:5d:0d:99:f7:5a:65:a7:
                    f9:0d:4a:b0:28:cd:e8:3e:1c:1c:59:04:a9:0d:49:
                    e3:36:7d:5b:03:af:8c:5e:f3:39:b3:83:79:78:ec:
                    c1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2D:51:0B:E7:44:7B:3D:FC:CC:65:52:1E:2D:22:2B:D4:72:EE:18
            X509v3 Authority Key Identifier:
                keyid:CA:78:BC:B5:1F:15:F2:9B:EB:B3:DA:72:81:CF:01:1A:F4:FB:15:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/CA78BCB51F15F29BEBB3DA7281CF011AF4FB1582.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA78BCB51F15F29BEBB3DA7281CF011AF4FB1582.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/323830343a353138633a3a2f33322d313238203d3e20323638343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:518c::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:89:6b:ef:d9:9f:ec:44:8d:2d:ee:5d:f6:cc:b5:c8:42:bd:
         48:ac:a0:93:dc:c2:3d:bc:e6:12:5a:ff:80:1d:c7:1d:22:eb:
         23:35:b0:68:07:10:7e:6a:a7:64:c6:11:7f:aa:a2:07:c3:b3:
         17:03:fc:fa:09:5a:17:a2:f7:50:70:59:c3:aa:0e:93:2c:4c:
         df:d7:61:d3:a8:7b:04:a1:41:6d:99:dd:42:83:6f:0f:2e:d5:
         fe:e5:ff:ac:79:69:1f:10:6a:d0:56:fe:fc:bb:16:f3:a6:c7:
         7c:95:f0:80:40:4a:a0:8e:b6:53:bc:2c:25:6c:84:3e:57:f1:
         62:f4:c4:e0:5a:5d:5e:de:5f:4c:e0:98:d8:da:a8:7d:d7:71:
         c4:d7:b9:4c:ed:61:b7:b3:87:8b:2a:a7:35:f4:7a:33:a6:58:
         1f:8f:5d:6c:ff:23:ee:9b:52:3d:59:1b:9c:55:96:cf:83:4d:
         91:26:12:b1:19:ac:d9:f0:03:b0:2f:66:22:88:b6:e6:4a:d8:
         db:3e:cd:9e:81:41:b5:cd:2d:d4:c6:55:f4:cd:d9:54:b2:8d:
         d1:45:97:45:f5:ff:87:5a:f0:f2:b2:e2:49:4c:22:05:e0:a0:
         88:e9:e0:ab:da:ff:ba:9d:18:34:92:90:c8:47:df:27:83:ea:
         91:24:47:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:07:15 2026 by rpki-client