Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/323830343a326537303a3a2f33322d313238203d3e20323635333436.roa
File:                     323830343a326537303a3a2f33322d313238203d3e20323635333436.roa (raw, json)
Hash identifier:          +Lu5yMIH3eTIfbmzDo2SS6GPwhvEFVUJCyXfWVG3R/8=
Subject key identifier:   08:51:BD:E3:C3:56:6B:53:78:73:55:F2:52:D9:30:CA:E6:41:D8:FC
Certificate issuer:       /CN=61355836BCE7745F7FD887251FDA3AE8CDED35FD
Certificate serial:       11977BF55115F0567E8EE212430E00A32B950F38
Authority key identifier: 61:35:58:36:BC:E7:74:5F:7F:D8:87:25:1F:DA:3A:E8:CD:ED:35:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61355836BCE7745F7FD887251FDA3AE8CDED35FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/323830343a326537303a3a2f33322d313238203d3e20323635333436.roa
Signing time:             Fri 03 Jul 2026 18:00:28 +0000
ROA not before:           Fri 03 Jul 2026 17:55:28 +0000
ROA not after:            Fri 02 Jul 2027 18:00:28 +0000
asID:                     265346
IP address blocks:        2804:2e70::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/61355836BCE7745F7FD887251FDA3AE8CDED35FD.crl
                          rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/61355836BCE7745F7FD887251FDA3AE8CDED35FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61355836BCE7745F7FD887251FDA3AE8CDED35FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 21:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:97:7b:f5:51:15:f0:56:7e:8e:e2:12:43:0e:00:a3:2b:95:0f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61355836BCE7745F7FD887251FDA3AE8CDED35FD
        Validity
            Not Before: Jul  3 17:55:28 2026 GMT
            Not After : Jul  2 18:00:28 2027 GMT
        Subject: CN=0851BDE3C3566B53787355F252D930CAE641D8FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9d:90:d0:2f:fc:e4:a7:ad:21:14:28:d2:87:
                    c4:75:47:c9:86:fe:e5:43:5a:b4:20:0e:14:8b:27:
                    eb:bb:dd:55:cb:97:6f:a8:50:9b:e3:cc:05:cf:93:
                    13:78:96:af:36:73:af:29:be:cb:f8:13:8f:49:9d:
                    c6:4c:1e:2a:4e:5d:7c:8f:49:33:05:ce:cc:ad:a3:
                    45:4d:92:e5:de:1b:75:fc:d8:1e:10:97:57:b1:1c:
                    48:ea:72:85:98:ec:64:a8:63:5c:1e:bb:27:fb:78:
                    0d:ee:91:ac:70:73:b0:7a:bd:e8:55:0b:4c:28:84:
                    40:7b:28:75:f9:f2:5b:cd:c5:b9:15:72:1e:8e:9d:
                    8f:c3:34:f4:12:bf:86:81:bb:b0:ff:bb:cc:ba:60:
                    a5:5d:d0:0b:7d:c3:b3:6f:e0:c3:43:4a:fb:c1:7b:
                    ab:1c:66:cb:93:70:66:ce:67:94:1c:81:d1:62:6e:
                    72:59:76:bf:e2:04:e5:4d:bd:55:01:35:40:70:ee:
                    58:25:e2:70:a8:83:d3:69:fc:13:ae:d5:90:f1:87:
                    f2:e4:fa:14:1f:fa:1f:67:63:a4:fb:ea:2d:f3:64:
                    2b:ad:ca:79:2d:cb:d5:87:00:c6:4c:fe:d5:96:c2:
                    a5:b4:cd:43:ca:64:46:57:b1:3a:cc:20:b2:b2:5f:
                    9a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:51:BD:E3:C3:56:6B:53:78:73:55:F2:52:D9:30:CA:E6:41:D8:FC
            X509v3 Authority Key Identifier:
                keyid:61:35:58:36:BC:E7:74:5F:7F:D8:87:25:1F:DA:3A:E8:CD:ED:35:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/61355836BCE7745F7FD887251FDA3AE8CDED35FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61355836BCE7745F7FD887251FDA3AE8CDED35FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/323830343a326537303a3a2f33322d313238203d3e20323635333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e70::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:91:a8:5a:9f:77:a1:15:1a:66:27:e3:6f:c6:82:ee:5c:0f:
         5b:fc:36:ff:59:a0:5c:3b:12:3c:54:b0:f3:ef:de:ac:fd:f2:
         dc:67:a2:83:45:2e:54:af:0a:f0:3a:c8:24:50:06:83:15:73:
         13:b5:84:0e:23:b9:d6:28:73:b5:51:96:bb:54:1d:4d:3a:57:
         9f:06:88:9f:26:48:98:ca:f0:3e:83:f8:e3:6b:1a:3a:0d:e6:
         20:52:0e:9c:0b:7e:5e:62:c9:4c:e8:64:ee:c2:70:7d:53:2b:
         62:6e:33:7b:15:fa:a9:66:91:7d:18:e0:8f:2f:70:2c:a4:5b:
         d9:f0:df:3d:5e:24:6e:9f:06:9a:9c:59:44:84:73:c4:d8:83:
         a9:3a:da:ff:1a:cd:62:c9:27:62:a0:9c:38:82:48:fd:2e:41:
         21:2a:8a:bb:e4:ba:b9:87:dc:4e:ae:a1:de:61:26:44:0e:49:
         f3:63:40:7c:9c:f2:e4:4b:33:ac:17:82:41:9a:89:f9:f9:45:
         ec:30:a3:b9:e8:e5:14:86:70:c2:5b:3e:9d:ab:a4:0b:b1:4e:
         62:48:10:62:15:e3:e7:61:9d:a7:fe:41:79:c2:c7:d4:b2:ef:
         b8:5a:f4:10:4c:f8:0e:5a:fa:0d:09:72:4a:50:c4:db:d0:c2:
         bb:90:bd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:18:35 2026 by rpki-client