Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/323830343a386162633a3a2f33322d313238203d3e20323733363839.roa
File:                     323830343a386162633a3a2f33322d313238203d3e20323733363839.roa (raw, json)
Hash identifier:          PaZQEJwjreibwfIu6GhsaLr/P8VTwBVRjbhrcEP4Q0k=
Subject key identifier:   2E:99:47:46:69:AF:24:6D:71:04:C0:5A:27:1C:77:E5:86:6F:2F:47
Certificate issuer:       /CN=C5D726DF8C2540A615B5E8F57C7902EDCD0CC6BC
Certificate serial:       27C5404FCCA5787FEF255EA33C89EF14812BCB94
Authority key identifier: C5:D7:26:DF:8C:25:40:A6:15:B5:E8:F5:7C:79:02:ED:CD:0C:C6:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5D726DF8C2540A615B5E8F57C7902EDCD0CC6BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/323830343a386162633a3a2f33322d313238203d3e20323733363839.roa
Signing time:             Mon 23 Mar 2026 13:01:45 +0000
ROA not before:           Mon 23 Mar 2026 12:56:45 +0000
ROA not after:            Mon 22 Mar 2027 13:01:45 +0000
asID:                     273689
IP address blocks:        2804:8abc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/C5D726DF8C2540A615B5E8F57C7902EDCD0CC6BC.crl
                          rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/C5D726DF8C2540A615B5E8F57C7902EDCD0CC6BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5D726DF8C2540A615B5E8F57C7902EDCD0CC6BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 19:20:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c5:40:4f:cc:a5:78:7f:ef:25:5e:a3:3c:89:ef:14:81:2b:cb:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5D726DF8C2540A615B5E8F57C7902EDCD0CC6BC
        Validity
            Not Before: Mar 23 12:56:45 2026 GMT
            Not After : Mar 22 13:01:45 2027 GMT
        Subject: CN=2E99474669AF246D7104C05A271C77E5866F2F47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7d:5f:26:a1:e9:ae:19:af:a8:97:a9:67:0e:
                    97:17:77:a4:d4:87:5e:97:76:49:92:b9:fb:2a:fd:
                    9d:59:c4:7a:6d:e0:c3:57:fb:ba:6e:8e:13:b9:62:
                    9e:21:87:51:fb:3e:d7:9e:2f:bf:28:b6:8b:b8:b1:
                    d6:d0:78:a6:1a:2f:41:15:a5:0d:f6:43:be:0b:c8:
                    c3:a1:86:3d:3e:d1:7c:1b:d9:58:9d:76:cc:fd:6a:
                    5b:f1:7c:6f:b8:12:a6:d5:c5:54:8d:c4:20:1b:4e:
                    95:86:d7:49:ea:6b:ed:73:9b:7c:52:19:f2:f1:54:
                    d5:1b:9a:be:12:b3:b9:cb:9b:1c:40:54:ee:c9:98:
                    ba:7c:cd:c9:73:cc:7d:bf:72:25:73:05:51:99:a1:
                    2e:05:ba:da:a7:a4:40:0b:d0:37:36:b8:aa:ee:48:
                    6f:60:58:16:71:dd:11:06:10:ac:f6:ce:fe:18:de:
                    0d:57:eb:00:12:af:1b:1d:0d:1f:ac:91:42:10:50:
                    0e:e4:81:bf:af:cf:01:40:d4:96:00:f6:43:de:43:
                    2b:59:80:05:ff:2d:b8:03:27:38:1b:a7:95:5c:e2:
                    e6:d6:3d:4c:07:74:af:4a:93:51:7b:b9:89:db:e3:
                    54:75:59:b8:f2:4f:95:ca:10:b2:62:79:c7:81:27:
                    d8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:99:47:46:69:AF:24:6D:71:04:C0:5A:27:1C:77:E5:86:6F:2F:47
            X509v3 Authority Key Identifier:
                keyid:C5:D7:26:DF:8C:25:40:A6:15:B5:E8:F5:7C:79:02:ED:CD:0C:C6:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/C5D726DF8C2540A615B5E8F57C7902EDCD0CC6BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5D726DF8C2540A615B5E8F57C7902EDCD0CC6BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/323830343a386162633a3a2f33322d313238203d3e20323733363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8abc::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:2d:7e:ef:25:7d:62:66:c3:ac:42:b4:00:c3:51:63:3a:4e:
         d2:80:1e:6a:a8:db:0a:82:7c:da:ad:11:3d:29:d1:25:10:49:
         f8:33:ce:f2:a3:78:80:37:c3:7f:c2:2c:78:72:c2:49:25:d3:
         0a:9b:01:e5:53:8a:4e:07:9c:9f:e3:2e:f4:ff:2e:18:66:8c:
         12:60:eb:e3:29:69:7e:22:7d:d7:83:3d:05:b5:39:47:c0:e0:
         ce:00:bf:50:50:39:94:a1:7e:e2:d5:b0:d8:08:f6:82:9f:a4:
         51:1f:69:62:42:ee:cd:dd:dd:3c:50:06:bf:cb:4d:18:33:0d:
         83:ef:81:e4:df:27:c8:dc:c3:13:fd:7e:02:d5:c8:e3:4a:aa:
         bd:d7:bc:9f:d6:6f:76:ce:ab:98:33:79:5a:03:85:10:8b:9b:
         c1:c7:32:f8:3f:4c:8e:0e:42:e8:a8:6a:7e:bd:51:50:9f:4b:
         1c:10:8d:e1:ad:cf:fb:0d:61:45:ac:ad:a8:f9:fa:a2:93:fb:
         fd:96:c6:89:a1:c9:e3:b9:c0:32:75:b1:78:d5:d9:de:94:2e:
         7b:45:38:15:48:51:55:09:b5:b8:ca:8d:0b:a9:56:cf:47:cd:
         21:d5:63:55:2b:05:8f:e0:d2:e1:55:41:e6:4f:6f:47:ac:62:
         7f:1f:59:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:49:14 2026 by rpki-client