Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a37313a3a2f34382d3438203d3e20323639353636.roa
File:                     323830343a363638383a37313a3a2f34382d3438203d3e20323639353636.roa (raw, json)
Hash identifier:          iPptw0L/SgAtJD7ilo5yNe+hEnqoPEqOyEzgJbB38yw=
Subject key identifier:   E1:A8:64:FA:68:86:D6:9B:F7:9C:F7:78:89:91:0F:48:31:20:CF:08
Certificate issuer:       /CN=A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE
Certificate serial:       7AAC12714B277FDB0D1AB6864709F9212CB5633F
Authority key identifier: A4:E5:5E:18:A5:18:ED:BF:14:B0:96:3D:7B:F0:9E:3D:FF:66:69:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a37313a3a2f34382d3438203d3e20323639353636.roa
Signing time:             Tue 28 Apr 2026 20:47:28 +0000
ROA not before:           Tue 28 Apr 2026 20:42:28 +0000
ROA not after:            Tue 27 Apr 2027 20:47:28 +0000
asID:                     269566
IP address blocks:        2804:6688:71::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE.crl
                          rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 16:34:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ac:12:71:4b:27:7f:db:0d:1a:b6:86:47:09:f9:21:2c:b5:63:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE
        Validity
            Not Before: Apr 28 20:42:28 2026 GMT
            Not After : Apr 27 20:47:28 2027 GMT
        Subject: CN=E1A864FA6886D69BF79CF77889910F483120CF08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b7:8c:15:8a:1b:07:9c:88:a5:3f:7c:2f:07:
                    fe:3e:88:f4:2a:39:1c:72:6a:da:ab:be:50:dc:f8:
                    76:b8:22:85:51:c0:d9:54:2f:04:3f:9d:74:53:ae:
                    8a:0e:e4:62:4e:7d:10:7b:e4:8a:71:ae:94:b4:5f:
                    6e:1c:44:f7:67:2f:d0:1a:f5:b9:c4:34:c4:f0:ca:
                    eb:99:f6:ba:a4:d8:e8:8c:7e:6b:ae:91:41:54:75:
                    9b:2a:a3:bb:24:e4:d0:ef:3e:12:88:6f:15:d5:c1:
                    d1:13:53:3f:aa:ae:d8:a3:46:bf:cb:3c:8e:fb:30:
                    ac:96:bf:20:bb:ca:8c:93:13:6e:f9:8e:78:21:0f:
                    53:ec:5a:5f:8b:fc:db:2b:ed:1d:3b:73:dd:40:8a:
                    b6:49:49:85:26:2d:70:51:91:dc:71:00:d8:6d:18:
                    95:dc:bd:db:e8:9d:3b:74:fd:a8:33:8c:89:f2:1d:
                    69:bd:bd:5e:ed:b2:9c:8b:7b:c4:31:c5:84:43:ca:
                    49:27:08:f9:7e:c5:c3:60:4a:fa:0d:b0:45:a6:5e:
                    76:f6:e9:a0:42:4b:f2:bc:93:98:dd:eb:dd:aa:51:
                    d1:a6:c2:e2:f5:85:1a:34:7e:d4:aa:b4:4c:f8:a1:
                    32:3c:73:ce:24:99:1b:d2:a1:a7:94:34:8d:09:81:
                    29:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A8:64:FA:68:86:D6:9B:F7:9C:F7:78:89:91:0F:48:31:20:CF:08
            X509v3 Authority Key Identifier:
                keyid:A4:E5:5E:18:A5:18:ED:BF:14:B0:96:3D:7B:F0:9E:3D:FF:66:69:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a37313a3a2f34382d3438203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6688:71::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:66:0c:86:64:9f:68:0e:5a:9b:d5:85:0f:be:23:aa:47:32:
         3c:60:83:f6:56:93:3a:7f:86:5a:33:06:3b:a6:2b:31:c3:f3:
         c7:24:c2:cd:85:10:c2:bc:cd:bb:c7:a3:d9:d3:e9:19:54:e8:
         62:e3:09:e7:69:33:da:44:85:ca:4f:7b:d8:9e:dc:12:94:96:
         65:07:b1:07:e3:cd:76:92:fb:10:cb:2a:a7:41:fa:ce:ab:d8:
         dd:7c:ff:42:64:49:f7:4a:a7:9e:1c:ad:ae:b9:0f:e4:41:e3:
         82:fd:62:d2:21:7c:8e:be:df:bf:09:f1:cb:7e:cb:fb:8a:f0:
         82:1d:79:e3:ba:62:7a:b5:54:bf:c3:02:25:f3:d8:3d:05:31:
         05:4d:2c:f9:98:0c:4f:91:44:42:ca:03:e1:48:61:02:86:5a:
         bb:df:e5:c9:cd:2c:d8:38:9d:b7:1c:17:7f:ff:c1:cb:fe:bf:
         45:1d:68:e7:9a:f4:34:b2:b0:7f:61:c3:47:fd:8e:d3:8e:06:
         99:4b:b1:49:06:e3:a2:8b:81:73:81:e2:2d:70:4f:75:b0:c5:
         00:27:29:f9:ef:bc:9c:61:bc:0a:fb:c6:42:ce:72:fe:36:8f:
         80:a9:89:5b:bb:4d:ca:f8:19:40:c4:5d:46:6f:86:28:eb:5d:
         8c:0b:6a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:35:08 2026 by rpki-client