Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EWt3f7Pw3iLsB2dB3jyyaTRDQwjAoHqk6bAwMNBEDPDx/0/323830343a393864383a3a2f33322d3438203d3e20323735373430.roa
File:                     323830343a393864383a3a2f33322d3438203d3e20323735373430.roa (raw, json)
Hash identifier:          JTmSCgKNy3dmoovyirjoquKM3byTlRHFDcwdhAZe0gE=
Subject key identifier:   28:0E:E6:8E:DD:08:8A:5A:28:C6:86:57:79:DF:77:4E:6F:36:0C:C8
Certificate issuer:       /CN=7A1EF5D4C3029EB4ABE9E0FD5BCF47E325202E75
Certificate serial:       1C89816B6F2A7C218083FB1A3CC27FE1E503E01A
Authority key identifier: 7A:1E:F5:D4:C3:02:9E:B4:AB:E9:E0:FD:5B:CF:47:E3:25:20:2E:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A1EF5D4C3029EB4ABE9E0FD5BCF47E325202E75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EWt3f7Pw3iLsB2dB3jyyaTRDQwjAoHqk6bAwMNBEDPDx/0/323830343a393864383a3a2f33322d3438203d3e20323735373430.roa
Signing time:             Wed 29 Apr 2026 12:34:08 +0000
ROA not before:           Wed 29 Apr 2026 12:29:08 +0000
ROA not after:            Wed 28 Apr 2027 12:34:08 +0000
asID:                     275740
IP address blocks:        2804:98d8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EWt3f7Pw3iLsB2dB3jyyaTRDQwjAoHqk6bAwMNBEDPDx/0/7A1EF5D4C3029EB4ABE9E0FD5BCF47E325202E75.crl
                          rsync://rpki-repo.registro.br/repo/EWt3f7Pw3iLsB2dB3jyyaTRDQwjAoHqk6bAwMNBEDPDx/0/7A1EF5D4C3029EB4ABE9E0FD5BCF47E325202E75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A1EF5D4C3029EB4ABE9E0FD5BCF47E325202E75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:89:81:6b:6f:2a:7c:21:80:83:fb:1a:3c:c2:7f:e1:e5:03:e0:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A1EF5D4C3029EB4ABE9E0FD5BCF47E325202E75
        Validity
            Not Before: Apr 29 12:29:08 2026 GMT
            Not After : Apr 28 12:34:08 2027 GMT
        Subject: CN=280EE68EDD088A5A28C6865779DF774E6F360CC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b8:72:b2:38:1c:5e:43:34:35:3c:8c:34:07:
                    d5:10:51:15:44:14:89:d8:97:19:af:c2:8d:23:ae:
                    07:cd:b3:bb:50:22:ae:bc:1c:a4:9d:34:a9:d3:96:
                    7a:41:e9:a5:c5:80:97:63:b6:46:b8:ba:4c:08:71:
                    e3:81:03:8b:6c:f9:c4:73:89:7b:96:62:26:b9:f9:
                    94:59:69:da:55:d7:08:90:44:5f:92:79:aa:72:d5:
                    b2:ef:96:39:30:de:8d:77:73:a0:d4:28:1a:c6:41:
                    2f:4e:cf:a7:1e:ee:2f:00:5c:17:24:31:e0:f6:46:
                    f1:1e:b5:d4:20:d0:a7:48:c7:2f:d4:26:84:4b:81:
                    2a:39:70:78:3e:42:db:f3:dc:ef:16:7e:f6:6b:f6:
                    02:25:db:e7:c5:ad:8b:c0:39:7c:76:85:67:8a:d7:
                    96:92:18:41:7b:50:70:c8:50:1c:59:44:26:0a:36:
                    d0:6f:ac:50:8d:ba:8f:2c:7b:e0:51:e4:16:33:ba:
                    bb:09:fb:c0:3b:4e:ed:2f:25:f3:82:ed:5b:62:96:
                    86:c7:f5:d2:5d:5b:a3:1f:5d:7e:af:0c:c6:06:65:
                    84:50:75:64:75:26:5f:89:fa:86:0d:1d:02:e5:3b:
                    16:62:84:90:58:d9:33:14:4f:77:e9:1a:08:f3:dc:
                    69:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0E:E6:8E:DD:08:8A:5A:28:C6:86:57:79:DF:77:4E:6F:36:0C:C8
            X509v3 Authority Key Identifier:
                keyid:7A:1E:F5:D4:C3:02:9E:B4:AB:E9:E0:FD:5B:CF:47:E3:25:20:2E:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EWt3f7Pw3iLsB2dB3jyyaTRDQwjAoHqk6bAwMNBEDPDx/0/7A1EF5D4C3029EB4ABE9E0FD5BCF47E325202E75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A1EF5D4C3029EB4ABE9E0FD5BCF47E325202E75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWt3f7Pw3iLsB2dB3jyyaTRDQwjAoHqk6bAwMNBEDPDx/0/323830343a393864383a3a2f33322d3438203d3e20323735373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:98d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:77:4f:4b:4f:58:42:d3:76:22:6a:03:45:04:dc:38:b0:46:
         a8:9b:c4:bd:c0:ad:6d:20:60:0e:62:5d:f4:af:0d:28:d5:91:
         8d:8c:1b:c0:58:b3:2f:e0:6d:71:c8:dc:4f:bf:32:0a:59:18:
         b8:b8:2d:96:10:ae:fb:cc:74:43:c2:04:07:95:ca:42:29:ca:
         f6:57:0e:85:44:d7:78:c7:dc:48:9b:f8:26:86:af:dc:e3:60:
         b6:6d:2f:bb:75:16:be:73:8a:19:6c:79:45:7a:b6:03:59:02:
         b1:b2:62:6f:9c:47:8d:a5:09:a2:da:49:a1:06:4b:2a:d3:41:
         ab:5c:db:1a:37:72:69:09:65:31:77:50:cc:88:4d:53:1d:7e:
         c8:ab:66:ab:76:5a:3e:41:f8:48:24:49:01:4e:84:36:c2:2d:
         2a:a2:65:cf:bb:b0:23:7a:54:85:73:23:eb:0a:da:ae:a6:41:
         0f:bc:67:e7:bc:75:2b:22:a0:f8:f0:1c:63:c8:e7:0a:01:c2:
         20:76:d3:83:55:43:1b:5d:9f:88:24:97:2b:fa:53:cd:56:d5:
         9c:7d:1c:f2:f6:c9:d2:1a:57:e2:73:7a:48:91:4d:5f:00:a5:
         f1:5d:6a:9e:40:66:81:5d:da:7b:06:89:bf:3e:fe:ba:fd:7c:
         76:94:ed:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:18:19 2026 by rpki-client