Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/0/323830343a363230633a3a2f33322d3334203d3e203238323235.roa
File:                     323830343a363230633a3a2f33322d3334203d3e203238323235.roa (raw, json)
Hash identifier:          MthSE6/Qr5Z71Wgt9MKZ7x3kd144F5SAmM9etS9XkyQ=
Subject key identifier:   68:67:F5:34:27:1E:F3:72:3A:7E:DD:21:9F:F1:9A:C9:19:21:54:C6
Certificate issuer:       /CN=EEE7ECD0FACEDB5728224B1A1ED60D889F673104
Certificate serial:       48BB9782199B587406321D1A113ACD47FC26E999
Authority key identifier: EE:E7:EC:D0:FA:CE:DB:57:28:22:4B:1A:1E:D6:0D:88:9F:67:31:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEE7ECD0FACEDB5728224B1A1ED60D889F673104.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/0/323830343a363230633a3a2f33322d3334203d3e203238323235.roa
Signing time:             Tue 17 Mar 2026 14:00:41 +0000
ROA not before:           Tue 17 Mar 2026 13:55:41 +0000
ROA not after:            Tue 16 Mar 2027 14:00:41 +0000
asID:                     28225
IP address blocks:        2804:620c::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/0/EEE7ECD0FACEDB5728224B1A1ED60D889F673104.crl
                          rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/0/EEE7ECD0FACEDB5728224B1A1ED60D889F673104.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEE7ECD0FACEDB5728224B1A1ED60D889F673104.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 20:49:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:bb:97:82:19:9b:58:74:06:32:1d:1a:11:3a:cd:47:fc:26:e9:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEE7ECD0FACEDB5728224B1A1ED60D889F673104
        Validity
            Not Before: Mar 17 13:55:41 2026 GMT
            Not After : Mar 16 14:00:41 2027 GMT
        Subject: CN=6867F534271EF3723A7EDD219FF19AC9192154C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:79:5c:8e:b9:31:80:70:99:6c:c8:62:a3:80:
                    0b:5d:b0:13:8c:e5:33:f6:42:03:20:9f:c9:be:e1:
                    6b:57:bc:6d:e5:72:7d:1e:29:a8:1f:b0:ea:d9:c8:
                    37:de:b8:a8:eb:b6:69:5a:7f:27:dd:a0:06:99:ec:
                    7e:12:b2:c5:2f:9c:b6:10:91:e1:23:b9:9a:f0:e8:
                    54:ad:37:5f:28:43:56:fc:ba:37:0c:3b:d2:31:ab:
                    de:15:01:e5:3b:33:e5:7d:1b:a6:4c:77:d3:2e:cd:
                    ce:57:a4:c9:9f:83:65:75:82:51:b5:56:23:57:95:
                    2d:3c:a1:3b:48:53:d2:80:e7:7d:f4:a0:4e:b6:8e:
                    f8:29:cd:c3:8f:12:72:a2:ed:e5:d5:17:64:57:99:
                    ea:2b:80:7f:a8:c4:68:32:8b:3c:ad:e6:41:04:25:
                    e2:8c:f7:cd:70:dd:00:36:8f:5d:ad:c3:c6:71:8c:
                    61:58:af:08:31:bf:36:81:36:48:cf:54:07:54:3a:
                    b4:a6:d5:20:08:d9:89:2d:e1:6b:c5:01:ab:95:56:
                    55:61:3e:60:66:95:75:21:14:6d:f3:c4:c4:ee:74:
                    9d:9d:8a:7d:91:6f:2a:22:42:c3:5d:ac:67:95:8e:
                    4d:58:77:dc:eb:74:c0:f7:bb:a6:2c:05:57:21:b8:
                    f7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:67:F5:34:27:1E:F3:72:3A:7E:DD:21:9F:F1:9A:C9:19:21:54:C6
            X509v3 Authority Key Identifier:
                keyid:EE:E7:EC:D0:FA:CE:DB:57:28:22:4B:1A:1E:D6:0D:88:9F:67:31:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/0/EEE7ECD0FACEDB5728224B1A1ED60D889F673104.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEE7ECD0FACEDB5728224B1A1ED60D889F673104.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/0/323830343a363230633a3a2f33322d3334203d3e203238323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:620c::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:31:14:bd:87:30:83:6d:51:9c:18:25:ce:42:1d:44:77:13:
         6e:a2:e9:67:00:84:5f:43:04:c5:e4:84:b5:ae:fd:a6:c3:68:
         d8:15:5e:35:4d:9b:b0:31:bb:5d:e3:75:74:1c:0a:5a:fd:61:
         e0:4f:4f:c7:a0:96:77:70:2c:88:9d:7c:c6:3d:18:0f:46:98:
         a5:ce:a0:82:ad:46:ce:40:a9:35:25:60:0d:78:2e:ed:72:f9:
         82:6c:01:6a:7d:4d:e4:4b:17:1d:83:68:da:e5:b2:67:5c:70:
         98:74:24:ce:a5:1a:a8:60:0e:1a:3c:e3:74:2a:04:9e:75:2a:
         77:50:1b:77:3b:c3:6f:c1:20:d0:b9:ed:8a:63:9a:f6:f9:55:
         02:21:54:b4:6a:76:d3:0a:54:2c:85:14:c9:4a:14:fe:36:f1:
         60:39:3c:56:f2:52:5f:e5:ec:8a:34:1d:6d:ee:a8:9f:c0:8b:
         86:2c:07:cc:90:d5:ea:a0:7e:c1:d0:69:90:32:7e:bc:b2:ae:
         a3:1b:dc:22:38:cc:7f:3b:82:f6:14:13:26:f3:de:2d:69:91:
         38:b6:64:c8:3c:b8:40:4e:37:3a:42:45:8c:4b:7c:d7:08:d4:
         8c:5f:9a:5d:25:81:95:d4:ae:b3:1f:2b:41:2a:bd:14:6c:4a:
         cd:c2:e8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:48:36 2026 by rpki-client