Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a313037313a3a2f34382d3438203d3e20323639353636.roa
File:                     323830343a363638383a313037313a3a2f34382d3438203d3e20323639353636.roa (raw, json)
Hash identifier:          GqprEmYAaZmO41H9px0HekgJFm/HhAjSA1PSa7SUwDA=
Subject key identifier:   AD:B0:0B:56:E9:F7:D9:DB:9E:C3:17:50:64:9E:4F:C4:72:F3:0A:DF
Certificate issuer:       /CN=A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE
Certificate serial:       187DE2CC86BF3467949270F086B10BA7812C8FC7
Authority key identifier: A4:E5:5E:18:A5:18:ED:BF:14:B0:96:3D:7B:F0:9E:3D:FF:66:69:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a313037313a3a2f34382d3438203d3e20323639353636.roa
Signing time:             Tue 28 Apr 2026 20:47:27 +0000
ROA not before:           Tue 28 Apr 2026 20:42:27 +0000
ROA not after:            Tue 27 Apr 2027 20:47:27 +0000
asID:                     269566
IP address blocks:        2804:6688:1071::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE.crl
                          rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 16:34:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:7d:e2:cc:86:bf:34:67:94:92:70:f0:86:b1:0b:a7:81:2c:8f:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE
        Validity
            Not Before: Apr 28 20:42:27 2026 GMT
            Not After : Apr 27 20:47:27 2027 GMT
        Subject: CN=ADB00B56E9F7D9DB9EC31750649E4FC472F30ADF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:03:0e:7c:3a:0a:f8:d1:fe:a4:0f:bd:bc:38:
                    cb:3c:74:bf:d0:3f:8a:8d:20:b8:28:84:a7:2b:26:
                    09:b9:cf:22:92:7f:e7:7a:4b:ec:b2:1b:df:93:f1:
                    a4:ae:e4:0e:1e:78:f0:1b:f6:80:a5:45:2d:88:c4:
                    c1:1f:59:dd:49:0d:93:b8:ca:86:b6:6e:a0:73:96:
                    1a:69:c9:5b:44:13:25:d5:67:2b:e6:5d:7c:73:37:
                    a5:ab:35:ba:01:76:b6:52:22:dd:77:59:61:d7:f9:
                    c5:2c:76:9e:40:d3:0a:7d:9e:db:1f:6e:e0:1a:36:
                    75:af:e9:7c:e7:5d:df:51:89:c3:f6:c8:4d:82:39:
                    d1:21:65:3c:c9:95:5f:5f:36:df:df:8a:2e:9b:75:
                    f2:58:ed:31:d7:26:40:f5:e4:00:1b:99:d1:eb:47:
                    b6:3f:9a:f7:40:4b:8a:93:20:aa:58:25:df:ab:43:
                    11:63:07:71:cb:89:c3:ee:d9:5f:df:f0:d7:94:e4:
                    ce:fd:72:39:79:ad:c8:81:22:86:a4:f7:bd:bb:cf:
                    f7:09:41:e5:4b:41:b7:d7:9e:26:c5:d1:87:a6:80:
                    df:af:64:7d:34:75:70:b0:ff:80:63:6a:40:88:ef:
                    5e:66:44:dd:bc:63:ad:bc:48:3d:56:8c:4a:46:07:
                    57:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B0:0B:56:E9:F7:D9:DB:9E:C3:17:50:64:9E:4F:C4:72:F3:0A:DF
            X509v3 Authority Key Identifier:
                keyid:A4:E5:5E:18:A5:18:ED:BF:14:B0:96:3D:7B:F0:9E:3D:FF:66:69:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a313037313a3a2f34382d3438203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6688:1071::/48

    Signature Algorithm: sha256WithRSAEncryption
         c8:2d:90:6f:7f:c4:75:49:81:8a:3a:50:44:ef:41:84:9a:42:
         5d:7d:32:ee:21:5d:e5:88:93:12:72:6e:82:34:af:bb:02:41:
         74:b7:02:3a:f4:43:b4:b7:c7:ec:69:ba:7e:e8:36:36:30:d2:
         99:63:9c:b0:02:9c:ed:4d:c8:d2:a1:9d:d5:58:fb:f9:5c:21:
         29:65:b2:be:31:b1:57:5d:98:75:d4:37:1f:59:fe:37:20:b7:
         43:2b:86:69:f9:45:89:b7:62:82:c2:92:69:41:99:49:43:ea:
         cd:cd:83:96:dd:63:f5:8b:47:15:16:0e:f8:8f:46:45:dd:dc:
         46:85:c7:2a:a1:f5:3e:1c:78:e3:41:73:d9:31:3a:21:7a:f1:
         5b:30:fe:21:4f:62:04:a7:31:58:a5:97:95:61:bb:0b:9d:ad:
         69:22:b8:24:6b:3d:9f:13:3a:89:84:4c:d4:60:0a:0b:fd:76:
         89:34:41:6b:52:d5:18:c8:1c:05:55:8a:7e:1a:52:d0:99:b4:
         78:b9:91:0b:0b:83:44:c9:71:54:7e:6c:b2:59:2a:ca:9f:66:
         98:8a:d8:21:80:09:6b:5e:fb:8a:32:dd:e4:9e:e5:a1:a8:5e:
         88:e3:49:27:81:64:4d:ed:b3:4e:57:ed:39:23:c9:53:b3:a5:
         31:37:c7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:35:34 2026 by rpki-client