Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a37333a3a2f34382d3438203d3e20323639353636.roa
File:                     323830343a363638383a37333a3a2f34382d3438203d3e20323639353636.roa (raw, json)
Hash identifier:          Y4Q+OjmOKCgzAfaLCwueDIziBPPQBqpDZgzLzS/DxFA=
Subject key identifier:   57:92:CE:D2:DF:A0:86:01:07:E5:74:BB:BE:E9:F1:AE:AF:16:8E:8D
Certificate issuer:       /CN=74967978EA662073DBD0CD3EBA40601D6A8B1663
Certificate serial:       0E4BBA20A877EA069596FC626E58F37C9E0FECBE
Authority key identifier: 74:96:79:78:EA:66:20:73:DB:D0:CD:3E:BA:40:60:1D:6A:8B:16:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74967978EA662073DBD0CD3EBA40601D6A8B1663.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a37333a3a2f34382d3438203d3e20323639353636.roa
Signing time:             Tue 24 Mar 2026 13:19:53 +0000
ROA not before:           Tue 24 Mar 2026 13:14:53 +0000
ROA not after:            Tue 23 Mar 2027 13:19:53 +0000
asID:                     269566
IP address blocks:        2804:6688:73::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/74967978EA662073DBD0CD3EBA40601D6A8B1663.crl
                          rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/74967978EA662073DBD0CD3EBA40601D6A8B1663.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74967978EA662073DBD0CD3EBA40601D6A8B1663.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 20:32:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:4b:ba:20:a8:77:ea:06:95:96:fc:62:6e:58:f3:7c:9e:0f:ec:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74967978EA662073DBD0CD3EBA40601D6A8B1663
        Validity
            Not Before: Mar 24 13:14:53 2026 GMT
            Not After : Mar 23 13:19:53 2027 GMT
        Subject: CN=5792CED2DFA0860107E574BBBEE9F1AEAF168E8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a3:f6:9c:1f:11:1e:56:96:39:a7:aa:96:de:
                    6d:f2:de:1e:17:98:6f:b6:e5:c5:78:0d:ba:3b:6d:
                    aa:f1:72:8d:2f:8f:46:01:31:ff:75:3a:76:a6:5e:
                    09:25:d1:ee:f8:6a:c4:c1:9c:07:8f:b4:bf:7e:1e:
                    47:59:89:2c:ad:26:b6:cb:5b:f6:7a:8d:d3:28:49:
                    03:21:10:3a:62:60:0f:2e:8b:40:a6:1b:61:f2:d0:
                    b1:ae:28:4d:40:bb:e5:b4:e4:1c:8c:06:a0:b3:da:
                    77:56:ed:f0:93:db:1c:42:52:80:cd:ef:8b:5f:52:
                    03:4d:45:16:34:98:df:ae:a9:06:c0:8f:cc:6a:74:
                    af:aa:8b:c4:31:cb:ec:e7:68:21:e8:1b:15:aa:5d:
                    38:44:61:8b:ae:67:5d:2d:c0:7f:02:f1:77:8d:46:
                    e3:1b:5e:d6:dc:17:13:b5:45:b4:a7:49:4e:b2:0c:
                    d6:41:9c:cb:cd:c8:5c:c8:32:5b:2e:ce:39:83:3d:
                    e9:40:51:d0:12:27:a0:6c:94:60:37:86:54:1f:e9:
                    ec:05:19:6f:40:6c:1b:69:5c:40:c6:dd:3d:8e:ce:
                    37:31:ec:0a:09:05:39:13:d9:f6:7a:14:71:6d:32:
                    7d:e3:a6:62:05:7e:a4:cd:6e:22:4c:1d:6c:3f:fc:
                    bc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:92:CE:D2:DF:A0:86:01:07:E5:74:BB:BE:E9:F1:AE:AF:16:8E:8D
            X509v3 Authority Key Identifier:
                keyid:74:96:79:78:EA:66:20:73:DB:D0:CD:3E:BA:40:60:1D:6A:8B:16:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/74967978EA662073DBD0CD3EBA40601D6A8B1663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74967978EA662073DBD0CD3EBA40601D6A8B1663.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a37333a3a2f34382d3438203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6688:73::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:da:eb:6e:05:0f:7a:ae:22:78:2a:f4:d9:3a:9e:58:98:1f:
         47:8c:9c:87:de:27:07:5f:93:1d:48:fd:b2:9d:2a:95:40:ae:
         65:4a:10:43:ec:e8:6f:38:ee:0a:80:22:92:df:d1:ff:63:c1:
         9b:c1:67:53:fb:f9:fb:1f:8f:f6:67:fe:9d:52:fa:6e:93:13:
         bf:bc:dc:c8:b6:03:7f:2f:ac:53:be:a4:ad:2c:48:b1:27:91:
         8b:4c:d2:55:1b:cd:b5:53:bb:0b:ab:f2:28:7e:c3:b8:f3:3b:
         d6:b4:ef:6f:5b:50:f5:11:d3:a9:a8:33:d2:82:10:6e:18:2a:
         b0:ca:10:a0:35:3d:9c:9d:0b:ed:f8:87:7b:eb:fc:46:f2:22:
         9b:42:56:fe:ff:94:0c:35:14:54:b3:54:9e:5d:eb:e7:29:19:
         88:fb:ce:ba:57:5e:f9:73:c6:aa:bb:f8:39:0f:57:99:77:03:
         9a:0a:51:3c:0b:82:b1:af:44:f1:65:f9:11:f5:ec:94:d3:d6:
         8a:cd:ca:df:e6:39:59:d2:2b:34:37:a6:0f:44:f2:1e:b8:6d:
         4a:52:75:ca:1c:8c:b7:43:ff:2c:d7:d4:b3:22:28:6e:dc:31:
         c1:65:03:18:39:5c:0c:34:61:25:34:2d:49:0a:71:32:b3:c8:
         af:78:58:bb
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUDku6IKh36gaVlvxibljzfJ4P7L4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ5Njc5NzhFQTY2MjA3M0RCRDBDRDNFQkE0MDYwMUQ2
QThCMTY2MzAeFw0yNjAzMjQxMzE0NTNaFw0yNzAzMjMxMzE5NTNaMDMxMTAvBgNV
BAMTKDU3OTJDRUQyREZBMDg2MDEwN0U1NzRCQkJFRTlGMUFFQUYxNjhFOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwo/acHxEeVpY5p6qW3m3y3h4X
mG+25cV4Dbo7barxco0vj0YBMf91OnamXgkl0e74asTBnAePtL9+HkdZiSytJrbL
W/Z6jdMoSQMhEDpiYA8ui0CmG2Hy0LGuKE1Au+W05ByMBqCz2ndW7fCT2xxCUoDN
74tfUgNNRRY0mN+uqQbAj8xqdK+qi8Qxy+znaCHoGxWqXThEYYuuZ10twH8C8XeN
RuMbXtbcFxO1RbSnSU6yDNZBnMvNyFzIMlsuzjmDPelAUdASJ6BslGA3hlQf6ewF
GW9AbBtpXEDG3T2Ozjcx7AoJBTkT2fZ6FHFtMn3jpmIFfqTNbiJMHWw//Lx1AgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUV5LO0t+ghgEH5XS7vunxrq8Wjo0wHwYDVR0j
BBgwFoAUdJZ5eOpmIHPb0M0+ukBgHWqLFmMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWZWN0cxb2tUMXZRdEZiTVFwZ2F0REM5cHRod0FNVWQ4SFVydnVFb3ZF
NEsvMC83NDk2Nzk3OEVBNjYyMDczREJEMENEM0VCQTQwNjAxRDZBOEIxNjYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc0OTY3OTc4RUE2NjIwNzNE
QkQwQ0QzRUJBNDA2MDFENkE4QjE2NjMuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VmVjdHMW9rVDF2UXRGYk1RcGdhdERDOXB0aHdBTVVkOEhVcnZ1RW92RTRLLzAv
MzIzODMwMzQzYTM2MzYzODM4M2EzNzMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzIzNjM5MzUzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKARmiABzMA0GCSqGSIb3DQEBCwUAA4IB
AQBf2utuBQ96riJ4KvTZOp5YmB9HjJyH3icHX5MdSP2ynSqVQK5lShBD7OhvOO4K
gCKS39H/Y8GbwWdT+/n7H4/2Z/6dUvpukxO/vNzItgN/L6xTvqStLEixJ5GLTNJV
G821U7sLq/IofsO48zvWtO9vW1D1EdOpqDPSghBuGCqwyhCgNT2cnQvt+Id76/xG
8iKbQlb+/5QMNRRUs1SeXevnKRmI+866V175c8aqu/g5D1eZdwOaClE8C4Kxr0Tx
ZfkR9eyU09aKzcrf5jlZ0is0N6YPRPIeuG1KUnXKHIy3Q/8s19SzIihu3DHBZQMY
OVwMNGElNC1JCnEys8iveFi7
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:07:46 2026 by rpki-client