Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KTMY1cBJC9w2jGXcQboaAQNEG7TzZUn8UvLrnQtmpLo/0/323830343a326464383a666638303a3a2f34342d3434203d3e20323635333037.roa
File:                     323830343a326464383a666638303a3a2f34342d3434203d3e20323635333037.roa (raw, json)
Hash identifier:          A5oOagOXeLyQPzHJR4RuwpZIXs4RtNHhciR2G+0itV0=
Subject key identifier:   70:56:53:19:85:FA:EB:32:55:A1:89:65:FD:43:81:23:5F:59:8B:48
Certificate issuer:       /CN=764567616A60FC68D3BC1B6D3EC8446979113187
Certificate serial:       2212CDDA0A4FBBD58ABF35EB8069074C72B3EF0E
Authority key identifier: 76:45:67:61:6A:60:FC:68:D3:BC:1B:6D:3E:C8:44:69:79:11:31:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/764567616A60FC68D3BC1B6D3EC8446979113187.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KTMY1cBJC9w2jGXcQboaAQNEG7TzZUn8UvLrnQtmpLo/0/323830343a326464383a666638303a3a2f34342d3434203d3e20323635333037.roa
Signing time:             Thu 05 Mar 2026 17:53:53 +0000
ROA not before:           Thu 05 Mar 2026 17:48:53 +0000
ROA not after:            Thu 04 Mar 2027 17:53:53 +0000
asID:                     265307
IP address blocks:        2804:2dd8:ff80::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KTMY1cBJC9w2jGXcQboaAQNEG7TzZUn8UvLrnQtmpLo/0/764567616A60FC68D3BC1B6D3EC8446979113187.crl
                          rsync://rpki-repo.registro.br/repo/7KTMY1cBJC9w2jGXcQboaAQNEG7TzZUn8UvLrnQtmpLo/0/764567616A60FC68D3BC1B6D3EC8446979113187.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/764567616A60FC68D3BC1B6D3EC8446979113187.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 19:14:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:12:cd:da:0a:4f:bb:d5:8a:bf:35:eb:80:69:07:4c:72:b3:ef:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764567616A60FC68D3BC1B6D3EC8446979113187
        Validity
            Not Before: Mar  5 17:48:53 2026 GMT
            Not After : Mar  4 17:53:53 2027 GMT
        Subject: CN=7056531985FAEB3255A18965FD4381235F598B48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:83:55:92:5a:35:d9:75:26:0a:57:fb:be:fd:
                    e1:17:65:43:15:cd:7f:8e:64:bd:dd:b6:88:02:36:
                    51:ff:ec:48:4a:35:f8:e3:d2:00:ba:de:71:f1:cb:
                    50:5d:7e:f0:bb:0f:39:ac:96:4c:60:f8:e2:44:64:
                    ab:67:fe:df:16:f1:84:b0:37:bb:11:a9:44:00:26:
                    6b:d2:8d:6d:b9:f3:3b:ce:36:2d:07:2f:46:78:35:
                    55:91:f2:b4:f0:e7:80:e7:a4:b5:8c:8e:45:75:b3:
                    fd:5e:e2:93:4b:bc:21:c6:3d:de:4d:a0:1d:f3:61:
                    37:bc:4d:c0:3d:0b:5a:85:c2:9b:53:ed:33:f1:76:
                    5c:81:29:ee:67:dd:19:af:cb:3b:eb:e8:58:35:78:
                    d5:63:4b:f4:65:48:53:db:ec:67:9d:ce:41:a0:1b:
                    58:ec:37:00:cd:f9:fc:05:e2:e2:63:56:a3:76:91:
                    51:2e:9d:f4:3a:3c:86:8f:0f:2e:09:27:8d:1a:fd:
                    e3:c3:71:94:f9:58:5a:6a:11:95:3a:ac:2a:e9:12:
                    d9:ce:29:52:29:6e:a8:90:f0:cf:a9:79:e8:38:41:
                    b6:6c:2a:cb:ef:f8:a8:fa:95:19:86:33:44:ce:ec:
                    a2:ad:95:8b:59:04:e0:57:ef:99:95:a3:e8:f2:a1:
                    ea:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:56:53:19:85:FA:EB:32:55:A1:89:65:FD:43:81:23:5F:59:8B:48
            X509v3 Authority Key Identifier:
                keyid:76:45:67:61:6A:60:FC:68:D3:BC:1B:6D:3E:C8:44:69:79:11:31:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KTMY1cBJC9w2jGXcQboaAQNEG7TzZUn8UvLrnQtmpLo/0/764567616A60FC68D3BC1B6D3EC8446979113187.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/764567616A60FC68D3BC1B6D3EC8446979113187.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KTMY1cBJC9w2jGXcQboaAQNEG7TzZUn8UvLrnQtmpLo/0/323830343a326464383a666638303a3a2f34342d3434203d3e20323635333037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2dd8:ff80::/44

    Signature Algorithm: sha256WithRSAEncryption
         02:a7:1a:07:49:56:5b:9c:e6:7d:f6:5b:7f:6d:dc:63:17:80:
         3f:a4:74:8d:50:57:86:24:43:ec:33:f7:36:1d:98:6a:e7:b5:
         85:fb:1d:ec:08:d8:2d:be:21:c8:1f:12:be:cc:2f:40:9e:27:
         91:ee:49:bf:c5:69:87:8f:92:9d:2b:e1:66:34:c3:48:79:23:
         98:c3:7d:b2:10:b6:22:eb:4f:51:97:dd:4b:e1:95:c0:2e:b9:
         2c:6c:d0:5c:80:e4:29:19:6e:e9:ed:c4:2f:56:17:23:6e:94:
         19:4a:52:85:b8:a8:4a:61:1a:3e:d2:a4:31:e8:86:00:34:b5:
         56:06:b8:7e:34:94:1b:7e:f9:66:aa:2c:12:c9:f7:56:95:77:
         ee:06:57:d9:c0:b2:1a:97:90:b4:c0:fa:47:55:a9:47:19:a7:
         b3:f3:1f:00:84:e2:ff:ce:f7:3e:6d:0d:2a:df:cb:63:61:62:
         ef:e4:f1:03:f5:91:cf:ad:88:17:ba:f7:ca:c3:25:a9:0a:d0:
         08:48:43:8c:61:21:f7:96:fc:80:f4:f6:ef:40:4a:90:67:71:
         7c:57:4a:5f:b7:f7:05:12:b9:0e:34:06:a5:78:2b:8d:0b:10:
         ca:64:b8:3f:6a:01:66:35:13:22:00:98:0a:6b:40:0a:ed:0d:
         0e:40:49:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:39:50 2026 by rpki-client