Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a633030303a3a2f33342d3334203d3e20323638313331.roa
File:                     323830343a353837383a633030303a3a2f33342d3334203d3e20323638313331.roa (raw, json)
Hash identifier:          F+nf8OaQjN79mjKY4QoNqDqDgTZ0EqNi79WxY+NC878=
Subject key identifier:   F6:74:1C:5D:B8:05:9A:E2:EA:AC:71:61:B6:58:D8:D9:E5:0A:BA:4B
Certificate issuer:       /CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
Certificate serial:       23C0298A983C6B827C2042587FC038FBB8B51F7B
Authority key identifier: A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a633030303a3a2f33342d3334203d3e20323638313331.roa
Signing time:             Tue 05 May 2026 17:09:37 +0000
ROA not before:           Tue 05 May 2026 17:04:37 +0000
ROA not after:            Tue 04 May 2027 17:09:37 +0000
asID:                     268131
IP address blocks:        2804:5878:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl
                          rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 03:34:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c0:29:8a:98:3c:6b:82:7c:20:42:58:7f:c0:38:fb:b8:b5:1f:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
        Validity
            Not Before: May  5 17:04:37 2026 GMT
            Not After : May  4 17:09:37 2027 GMT
        Subject: CN=F6741C5DB8059AE2EAAC7161B658D8D9E50ABA4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e7:c4:55:bc:24:85:28:52:5e:bc:75:dc:71:
                    9d:7a:d8:c9:fc:5c:82:75:f3:a1:2d:31:2d:50:8a:
                    8c:1d:74:72:b2:c5:40:4f:8c:d2:64:f2:8c:b8:bd:
                    3d:58:34:35:d7:d4:96:58:7e:ac:75:67:d0:53:a2:
                    02:ad:2d:2a:37:8a:54:1f:a8:e9:15:40:c2:94:b7:
                    91:31:e2:e2:6c:4a:85:8f:74:0e:16:56:43:ee:1f:
                    1b:7d:e0:fc:05:93:0a:ba:dc:29:1e:5e:ee:61:17:
                    6e:f5:92:a1:75:89:b2:7f:9c:68:2f:29:b1:17:26:
                    29:f6:b6:b6:82:06:36:10:87:e6:42:7d:5c:c8:86:
                    74:fd:0e:13:69:57:a7:51:4b:1c:fe:e3:fc:c6:4f:
                    fa:5c:b6:f0:c3:5a:15:ca:e3:ec:0d:ef:02:3e:b1:
                    8b:56:0b:d5:cb:93:ce:a1:6c:c5:76:03:a5:7e:68:
                    97:08:2d:08:4e:60:49:0c:8b:5a:eb:c3:5e:5b:c0:
                    65:cc:be:72:32:c9:ea:2c:22:70:5f:c4:2b:04:5c:
                    8b:6b:7e:3c:55:08:85:cf:d6:4f:33:0d:ae:7b:3b:
                    41:2f:f2:fa:14:e4:9e:b8:14:c2:07:ae:1f:01:43:
                    ed:cc:1d:ea:2b:92:ef:4a:39:fa:cc:02:17:5a:df:
                    fd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:74:1C:5D:B8:05:9A:E2:EA:AC:71:61:B6:58:D8:D9:E5:0A:BA:4B
            X509v3 Authority Key Identifier:
                keyid:A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a633030303a3a2f33342d3334203d3e20323638313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5878:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         92:96:40:c0:7f:b4:fc:4b:ca:03:5a:4e:f7:db:66:1e:c2:a8:
         19:98:4c:30:e6:cc:17:44:b3:0c:eb:87:98:8d:1c:9a:3b:d8:
         8d:d2:f1:24:1a:63:1d:c1:a1:71:e9:2b:69:d6:0a:f4:c5:85:
         74:92:c8:71:6f:b3:ce:70:0e:77:18:59:3b:0d:41:c7:5e:4f:
         51:78:bc:03:b1:08:2a:e5:8e:92:32:a4:f3:4b:07:16:1d:ce:
         18:35:6a:bd:38:57:f6:e0:8f:8d:46:e1:cb:b5:f3:7d:21:05:
         9d:df:61:07:71:55:94:b3:56:51:94:6c:25:26:c5:cc:aa:fb:
         aa:95:e9:16:4a:53:1c:e3:d2:6a:94:f8:65:9d:3a:4b:d8:25:
         b2:c1:34:cf:c7:85:16:85:a5:ae:3e:24:69:80:49:97:5c:cf:
         22:e6:47:c6:c8:f1:1d:7b:0d:83:81:69:14:87:8d:68:56:3a:
         58:ff:05:af:5e:c4:be:61:7d:24:f7:44:1b:65:3c:27:82:64:
         9f:71:ec:de:84:0b:35:13:35:53:6d:ca:72:a5:db:66:21:14:
         b1:81:86:56:81:0c:c0:81:45:4c:de:9c:95:d3:47:f8:22:ea:
         a8:95:0f:ff:08:00:05:8f:d3:ff:74:74:28:c6:a5:26:44:3a:
         4e:fb:91:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:47:54 2026 by rpki-client