Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/323830343a373338303a3a2f33322d3438203d3e20323730393139.roa
File:                     323830343a373338303a3a2f33322d3438203d3e20323730393139.roa (raw, json)
Hash identifier:          zCfwZ8qgMEmnquAW/jhwkVD+EPhcNHDkyivcIFQ1stA=
Subject key identifier:   8B:95:DD:09:65:8D:B9:C9:92:20:9A:C2:24:A8:76:63:32:52:1A:C5
Certificate issuer:       /CN=65CEB90B19B493ED65EEAC559643F4CECD4FEF5C
Certificate serial:       3B8B3CE98396C42B3F241A0C297E3F82BFAFD4B8
Authority key identifier: 65:CE:B9:0B:19:B4:93:ED:65:EE:AC:55:96:43:F4:CE:CD:4F:EF:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65CEB90B19B493ED65EEAC559643F4CECD4FEF5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/323830343a373338303a3a2f33322d3438203d3e20323730393139.roa
Signing time:             Fri 01 May 2026 19:00:00 +0000
ROA not before:           Fri 01 May 2026 18:55:00 +0000
ROA not after:            Fri 30 Apr 2027 19:00:00 +0000
asID:                     270919
IP address blocks:        2804:7380::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/65CEB90B19B493ED65EEAC559643F4CECD4FEF5C.crl
                          rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/65CEB90B19B493ED65EEAC559643F4CECD4FEF5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65CEB90B19B493ED65EEAC559643F4CECD4FEF5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:8b:3c:e9:83:96:c4:2b:3f:24:1a:0c:29:7e:3f:82:bf:af:d4:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65CEB90B19B493ED65EEAC559643F4CECD4FEF5C
        Validity
            Not Before: May  1 18:55:00 2026 GMT
            Not After : Apr 30 19:00:00 2027 GMT
        Subject: CN=8B95DD09658DB9C992209AC224A8766332521AC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:56:d0:20:b3:fb:07:0f:1d:1a:80:72:28:a7:
                    e2:7f:3b:8f:38:58:38:68:32:bb:e7:72:ed:df:21:
                    64:5a:16:1c:73:99:59:97:67:f7:b1:8b:73:38:91:
                    55:f6:93:2a:2d:3f:15:fd:00:00:1e:5b:a3:d8:92:
                    2c:25:08:5c:63:9e:28:5e:90:cb:99:66:c5:79:88:
                    db:33:2b:78:70:3d:a7:10:eb:5a:e6:5b:22:39:48:
                    75:26:c7:28:3a:6d:02:1a:ca:6a:e0:41:33:38:18:
                    bd:78:32:7c:6a:cc:cf:9d:00:91:06:dc:03:da:50:
                    72:67:23:ec:38:9f:e8:d3:43:e4:24:0a:6c:b1:a6:
                    35:65:22:49:48:09:e9:82:13:2a:2b:d8:63:26:d0:
                    36:a2:40:8d:e5:b7:ba:af:8f:2b:c9:09:ea:ce:ae:
                    2e:d3:ea:19:a8:af:18:e2:2f:47:5a:4c:d5:17:52:
                    ea:ba:1c:dd:85:1f:68:d8:c4:03:a2:88:5f:d0:21:
                    2c:7b:a0:50:b9:e6:da:99:e6:ae:f0:57:97:1b:35:
                    bd:85:d6:fd:22:83:ea:66:14:8d:15:b0:d7:be:57:
                    9d:33:59:f7:f1:99:58:8c:47:9f:36:87:55:89:72:
                    80:70:3b:41:5b:c8:32:eb:15:59:4e:5f:10:7d:20:
                    16:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:95:DD:09:65:8D:B9:C9:92:20:9A:C2:24:A8:76:63:32:52:1A:C5
            X509v3 Authority Key Identifier:
                keyid:65:CE:B9:0B:19:B4:93:ED:65:EE:AC:55:96:43:F4:CE:CD:4F:EF:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/65CEB90B19B493ED65EEAC559643F4CECD4FEF5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65CEB90B19B493ED65EEAC559643F4CECD4FEF5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/323830343a373338303a3a2f33322d3438203d3e20323730393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7380::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:9d:d8:73:7e:3b:41:49:37:66:57:3e:f3:10:1c:f9:33:5a:
         1b:ef:47:24:74:a4:5a:27:11:ca:c0:ed:a7:62:a9:4b:62:d4:
         e8:c5:52:5a:11:76:ed:29:86:90:05:8a:7a:e1:e5:84:26:9a:
         6f:3c:44:9e:b8:0c:48:39:fe:36:06:81:7a:58:30:53:76:c2:
         5b:83:1c:0a:cd:60:7c:20:a5:40:82:9f:25:a4:5c:3b:a3:cb:
         ec:59:c6:cf:58:09:98:27:73:10:97:b7:fd:12:39:8a:60:e3:
         b8:86:ba:9c:22:cb:56:2f:8f:02:d9:69:54:ae:5a:44:7a:d5:
         a8:60:69:8e:67:c4:a8:6b:0d:41:60:82:8c:e3:94:36:f0:ff:
         cc:b4:9f:19:d2:71:65:87:d3:d1:55:9b:ee:5d:5c:9b:8f:4c:
         dd:a5:68:0e:e5:3b:26:f8:3e:f7:44:8a:2e:70:a1:14:97:29:
         a9:73:5b:06:d6:5d:d0:36:d7:d1:75:00:5e:1e:d8:9e:cf:27:
         97:d1:13:03:e8:fb:7a:76:f0:56:ca:73:f4:d3:6d:d7:1b:02:
         da:ce:0c:36:1d:04:4b:6a:c5:33:89:0c:68:17:5a:c1:6a:95:
         26:da:9e:06:3d:2f:80:6b:a7:d1:e6:3e:50:4e:8f:75:a0:41:
         8b:90:19:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:58:54 2026 by rpki-client