Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/323830343a313239303a3a2f33322d3332203d3e20323633343834.roa
File:                     323830343a313239303a3a2f33322d3332203d3e20323633343834.roa (raw, json)
Hash identifier:          IRyTiTTn1Vj7tQ+I+h9rjrr8+dZJy1z439gCbfQy98s=
Subject key identifier:   70:DA:FC:EF:DC:C4:8B:40:C1:19:C7:58:D7:43:91:16:F3:4E:15:09
Certificate issuer:       /CN=777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD
Certificate serial:       637E247881233516736FC8FEC2DC11438A9F259E
Authority key identifier: 77:7B:D5:D5:BE:4C:99:13:C3:CB:81:E6:7F:E7:7C:31:43:C1:C1:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/323830343a313239303a3a2f33322d3332203d3e20323633343834.roa
Signing time:             Thu 05 Mar 2026 13:52:17 +0000
ROA not before:           Thu 05 Mar 2026 13:47:17 +0000
ROA not after:            Thu 04 Mar 2027 13:52:17 +0000
asID:                     263484
IP address blocks:        2804:1290::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.crl
                          rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 21:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:7e:24:78:81:23:35:16:73:6f:c8:fe:c2:dc:11:43:8a:9f:25:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD
        Validity
            Not Before: Mar  5 13:47:17 2026 GMT
            Not After : Mar  4 13:52:17 2027 GMT
        Subject: CN=70DAFCEFDCC48B40C119C758D7439116F34E1509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a8:81:92:15:b3:bf:18:e2:ee:19:99:20:54:
                    bf:32:be:99:47:05:cf:6b:cb:22:e5:cf:85:b5:0e:
                    04:fe:b9:54:3a:ff:f7:3e:39:80:df:f9:df:94:1b:
                    0c:1c:a1:a7:76:1f:85:6b:20:a2:b4:4b:70:c3:0e:
                    5e:4b:23:06:15:6a:48:80:3f:f4:ec:58:b2:19:61:
                    0e:31:af:4f:c9:f1:8f:83:88:5f:df:6d:f7:02:c6:
                    49:23:fa:94:e3:c6:c1:f2:ef:f6:09:86:ee:20:7d:
                    73:dd:e2:25:1f:64:40:3a:83:ca:81:c5:70:b1:ad:
                    80:e8:51:ef:d1:21:25:57:66:43:11:63:04:ed:00:
                    21:d9:fe:db:18:d0:29:63:b3:52:17:49:2c:0e:98:
                    ea:52:42:65:ad:0d:de:ea:aa:ab:c7:f1:96:17:d6:
                    50:9a:6d:28:7d:17:ba:eb:42:5c:ac:82:cd:98:d9:
                    49:17:05:87:9a:be:b7:d2:76:ea:7d:b2:42:d6:e7:
                    7c:0a:96:0f:26:55:d5:8e:69:cb:86:d5:d1:45:e2:
                    7f:7d:22:ab:60:31:0e:6f:db:e4:a8:ca:ef:3d:37:
                    fc:49:33:f7:87:b0:4c:a3:5b:08:a5:5f:00:b4:e6:
                    04:3f:da:d0:64:39:c9:0a:d9:47:91:a9:df:3f:68:
                    80:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:DA:FC:EF:DC:C4:8B:40:C1:19:C7:58:D7:43:91:16:F3:4E:15:09
            X509v3 Authority Key Identifier:
                keyid:77:7B:D5:D5:BE:4C:99:13:C3:CB:81:E6:7F:E7:7C:31:43:C1:C1:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/323830343a313239303a3a2f33322d3332203d3e20323633343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1290::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:67:3b:b5:e0:40:4b:d5:70:4e:04:8f:05:64:97:fe:f1:a6:
         b4:4e:52:62:0e:be:12:a1:a3:21:ae:d8:fb:fe:a4:3e:14:08:
         fc:b3:32:e1:a1:08:23:9d:11:f5:72:39:92:fb:78:2e:e8:6c:
         12:1f:b1:d5:76:81:ed:c9:48:52:c4:70:de:26:9b:d6:fd:bd:
         e9:ef:cf:32:e8:f0:ae:99:8b:b4:57:0d:e2:b1:a4:2d:1c:86:
         77:42:29:49:26:b1:d7:7f:89:6e:e8:4d:d7:0b:5c:f1:0a:1f:
         e3:77:71:ae:a0:fb:65:a1:10:61:ea:5e:c0:f6:22:19:bd:64:
         57:12:f4:d0:56:ec:03:d1:6d:80:a9:ef:7c:7b:97:18:88:e6:
         bc:cb:fa:a8:92:b3:18:8b:3c:2a:15:35:e2:d6:73:5a:34:94:
         09:2a:16:0d:3c:7d:0f:89:be:dc:7c:f8:c7:7b:79:e5:9f:e9:
         54:ab:03:17:e5:a6:1f:9e:6a:1a:93:04:15:e6:9b:30:07:38:
         d8:70:09:b2:a5:c5:78:d9:9f:0a:fa:42:e1:fe:d2:f6:2f:2e:
         32:79:52:73:24:67:68:2d:b8:ae:4f:a8:58:2a:e8:3b:e8:92:
         d4:a6:86:1b:06:59:e3:81:66:28:fe:8d:5c:09:85:9b:8f:b1:
         2b:3f:a4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:23:41 2026 by rpki-client