Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a313037313a3a2f34382d3438203d3e20323639353636.roa
File:                     323830343a363638383a313037313a3a2f34382d3438203d3e20323639353636.roa (raw, json)
Hash identifier:          Fya746XXilkzQTcVmDYAQ7njzIGHbb5Z0iHQv3ajTWI=
Subject key identifier:   E4:26:9C:82:7E:5B:44:0F:E3:6B:8B:FC:61:5B:12:72:1F:78:A7:FB
Certificate issuer:       /CN=74967978EA662073DBD0CD3EBA40601D6A8B1663
Certificate serial:       6960D24089DAC0FB953CF33B8F831DF5FC5D5138
Authority key identifier: 74:96:79:78:EA:66:20:73:DB:D0:CD:3E:BA:40:60:1D:6A:8B:16:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74967978EA662073DBD0CD3EBA40601D6A8B1663.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a313037313a3a2f34382d3438203d3e20323639353636.roa
Signing time:             Tue 24 Mar 2026 13:19:55 +0000
ROA not before:           Tue 24 Mar 2026 13:14:55 +0000
ROA not after:            Tue 23 Mar 2027 13:19:55 +0000
asID:                     269566
IP address blocks:        2804:6688:1071::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/74967978EA662073DBD0CD3EBA40601D6A8B1663.crl
                          rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/74967978EA662073DBD0CD3EBA40601D6A8B1663.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74967978EA662073DBD0CD3EBA40601D6A8B1663.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 20:32:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:60:d2:40:89:da:c0:fb:95:3c:f3:3b:8f:83:1d:f5:fc:5d:51:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74967978EA662073DBD0CD3EBA40601D6A8B1663
        Validity
            Not Before: Mar 24 13:14:55 2026 GMT
            Not After : Mar 23 13:19:55 2027 GMT
        Subject: CN=E4269C827E5B440FE36B8BFC615B12721F78A7FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:68:65:7e:64:27:08:ff:98:af:64:f1:4b:d2:
                    a1:1f:b9:f7:68:0e:2d:23:2e:5f:ed:19:e7:f4:71:
                    d3:b2:b4:1c:f7:0f:6c:da:39:16:0c:0a:32:51:aa:
                    9d:ff:fc:92:ee:2b:1d:cf:5a:f9:71:71:a0:27:f0:
                    c1:90:68:37:2a:d5:13:85:4f:9e:46:49:1b:7f:35:
                    3a:90:83:62:1c:33:11:d6:b9:6a:b1:ef:80:15:5d:
                    0a:50:89:03:3f:06:9b:7c:01:98:16:96:bf:5c:5d:
                    d6:ef:12:a0:d9:a7:d9:ca:4c:e9:74:a4:71:be:e9:
                    40:dc:5e:f2:af:8a:06:e0:8e:f5:58:be:07:64:99:
                    83:3a:d8:d2:36:6f:95:70:93:8c:94:e3:53:a5:6e:
                    c0:f7:27:7f:7a:64:df:d3:2a:cc:ee:47:82:62:8c:
                    70:ba:35:94:47:98:4b:6f:74:3b:60:52:89:be:c2:
                    7a:80:86:88:6a:a6:68:86:c1:37:21:66:92:20:6d:
                    d3:2a:93:cb:80:ce:9f:83:98:b3:bd:f4:8a:80:70:
                    95:8d:19:2d:86:bb:58:82:b3:92:6c:78:98:9b:61:
                    bd:1f:26:57:35:11:33:fa:50:23:8d:51:e8:66:41:
                    b8:74:dd:7c:4a:89:d8:71:41:75:d0:c3:db:37:70:
                    dc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:26:9C:82:7E:5B:44:0F:E3:6B:8B:FC:61:5B:12:72:1F:78:A7:FB
            X509v3 Authority Key Identifier:
                keyid:74:96:79:78:EA:66:20:73:DB:D0:CD:3E:BA:40:60:1D:6A:8B:16:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/74967978EA662073DBD0CD3EBA40601D6A8B1663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74967978EA662073DBD0CD3EBA40601D6A8B1663.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a313037313a3a2f34382d3438203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6688:1071::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:8a:61:b3:90:63:66:08:a6:7f:08:ce:87:fc:41:87:5c:ff:
         5c:a7:aa:59:ac:c5:d4:d9:21:00:91:42:4f:1c:2e:95:2f:37:
         cf:37:d4:42:ef:ec:99:4e:9e:17:1c:64:bd:79:45:50:ca:49:
         72:75:a3:0f:c6:0f:79:1c:ce:34:af:83:6d:80:6d:a6:85:20:
         43:0c:27:de:5c:18:13:80:b1:f1:45:a9:6f:07:ac:a7:7a:ea:
         a0:3d:6a:ba:ef:16:f6:2a:28:66:6f:d3:53:0b:ae:06:50:ec:
         2d:25:8d:3f:dc:94:32:8b:c6:14:01:2d:c2:d7:ad:c6:78:86:
         9b:e0:e3:2e:e9:cd:5b:a4:3d:6f:5b:6c:b7:0f:47:e8:39:61:
         fd:3e:33:9e:01:c7:08:ae:87:70:fb:32:cb:bc:86:99:7b:c9:
         d5:20:25:a9:c6:71:56:b6:3b:f1:8b:f3:41:6f:2f:fb:f7:18:
         22:2d:dc:ea:f1:38:e4:11:03:73:07:a9:ab:a3:bb:44:c5:a4:
         67:a0:26:91:e0:f6:52:22:f8:a4:96:4e:1b:dc:3b:60:dc:f2:
         bd:3c:eb:7b:fc:2b:26:1e:bf:34:2d:cb:58:e0:9d:5a:4c:49:
         60:95:0a:a7:b4:68:b2:49:ef:97:a5:44:e4:98:b7:cc:c4:76:
         06:21:d3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:56:54 2026 by rpki-client