Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a323030303a3a2f33352d3335203d3e203238323532.roa
File:                     323830343a313534343a323030303a3a2f33352d3335203d3e203238323532.roa (raw, json)
Hash identifier:          2VSGxutaiNN/yejhLMiszT/Tpfy3dDyW7IGUjEV7BSI=
Subject key identifier:   7E:EC:D2:5B:FF:58:5D:FE:0D:87:87:25:8F:9F:16:37:75:D4:D8:7F
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       3F41039CB4E1AA031E03376ACC1022EEDFB2DF47
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a323030303a3a2f33352d3335203d3e203238323532.roa
Signing time:             Wed 11 Mar 2026 19:13:22 +0000
ROA not before:           Wed 11 Mar 2026 19:08:22 +0000
ROA not after:            Wed 10 Mar 2027 19:13:22 +0000
asID:                     28252
IP address blocks:        2804:1544:2000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 03:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:41:03:9c:b4:e1:aa:03:1e:03:37:6a:cc:10:22:ee:df:b2:df:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Mar 11 19:08:22 2026 GMT
            Not After : Mar 10 19:13:22 2027 GMT
        Subject: CN=7EECD25BFF585DFE0D8787258F9F163775D4D87F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:13:cd:24:18:45:5d:06:ca:46:ef:39:a5:31:
                    c0:15:74:02:f1:f0:83:e1:d5:0a:98:e1:c7:58:40:
                    27:2d:e0:7a:85:d9:cd:95:1a:97:dd:14:02:0c:d9:
                    dc:41:4d:d1:1c:f4:5d:d1:17:16:da:8b:ba:dd:7d:
                    9b:e6:c3:b3:52:f0:07:bb:78:6e:22:76:9a:ae:15:
                    33:65:d4:fb:36:eb:c3:df:cd:1b:ca:4b:8d:9a:ca:
                    4d:b8:e1:c9:92:e3:57:46:9a:16:63:65:4e:77:23:
                    e0:b2:8a:c6:89:89:23:77:c5:76:85:1e:a4:24:fb:
                    a8:ba:3b:3e:74:1d:66:bf:39:87:78:8a:4e:86:a8:
                    e1:0e:cb:10:4c:67:93:56:e0:1a:a8:8d:be:ea:8f:
                    65:42:cc:ae:f0:4f:ef:6d:ca:17:a3:ee:3b:47:e2:
                    6f:6c:c8:af:bb:8f:2f:f8:6d:36:9f:f4:58:66:35:
                    be:13:c9:e5:79:13:52:24:12:ec:2f:1b:17:36:84:
                    80:5e:d4:54:b6:1b:f6:92:17:7f:29:c4:c0:7b:77:
                    3f:4a:4a:45:9f:34:8f:24:f3:26:be:bf:22:fc:29:
                    04:aa:a0:f0:b7:0c:7c:83:5c:97:4e:3f:14:23:0a:
                    54:35:a8:eb:dc:9e:59:88:25:55:b8:c7:52:59:e4:
                    33:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:EC:D2:5B:FF:58:5D:FE:0D:87:87:25:8F:9F:16:37:75:D4:D8:7F
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a323030303a3a2f33352d3335203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1544:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         84:0b:a9:10:3f:68:e6:d3:0a:f1:85:a7:7f:dd:54:12:a5:93:
         7b:41:7d:4a:b6:b0:12:95:5c:2d:37:86:c3:52:a5:78:4c:9c:
         25:da:bb:99:f2:6b:fd:0b:17:59:6b:55:fc:2b:58:2d:d0:73:
         43:5e:d5:4a:c6:8c:fb:ae:22:ab:b8:53:b9:3a:b2:44:ef:b4:
         87:08:04:9f:2f:98:06:59:47:2b:b2:06:af:84:01:b1:58:73:
         8d:77:05:4c:4a:c7:de:0a:1b:fe:9a:e1:94:9d:76:bf:09:82:
         85:04:76:44:17:28:0b:74:11:d3:3d:ac:e5:74:68:16:09:2d:
         cb:13:c9:19:07:99:45:2d:9a:b8:32:0e:fe:ff:fc:20:d4:a4:
         98:f0:1a:e3:e2:41:69:e5:ee:ab:03:0d:39:6a:46:26:8d:a1:
         2d:84:d8:d6:72:20:3a:65:e5:1d:9b:77:c3:17:f6:10:5f:a0:
         78:b7:65:95:4c:8e:76:d0:2d:d6:e5:6d:24:bd:24:a6:68:3b:
         56:f1:ca:46:a6:2a:f6:83:23:43:e0:ec:30:2f:8c:7d:d2:62:
         22:6a:ba:36:24:0d:27:91:66:be:21:a2:14:b7:ce:ae:57:cf:
         cc:32:af:24:bd:1f:7c:b5:1b:3d:1d:86:78:6b:ed:dd:71:a8:
         8c:b8:c0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:30:38 2026 by rpki-client