Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a39313a3a2f34382d3438203d3e20323639353636.roa
File:                     323830343a363638383a39313a3a2f34382d3438203d3e20323639353636.roa (raw, json)
Hash identifier:          Jeg8e8HrybCjGx8ffr6YD6UDgkOhqx5N99/GgTJSxXA=
Subject key identifier:   2C:B4:5F:21:11:E2:B4:2F:A7:5B:E7:37:18:F0:74:E9:78:3E:36:55
Certificate issuer:       /CN=74967978EA662073DBD0CD3EBA40601D6A8B1663
Certificate serial:       7B105B0BBA88DDE86EB81F04E9B106077E4BCE63
Authority key identifier: 74:96:79:78:EA:66:20:73:DB:D0:CD:3E:BA:40:60:1D:6A:8B:16:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74967978EA662073DBD0CD3EBA40601D6A8B1663.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a39313a3a2f34382d3438203d3e20323639353636.roa
Signing time:             Tue 24 Mar 2026 13:19:53 +0000
ROA not before:           Tue 24 Mar 2026 13:14:53 +0000
ROA not after:            Tue 23 Mar 2027 13:19:53 +0000
asID:                     269566
IP address blocks:        2804:6688:91::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/74967978EA662073DBD0CD3EBA40601D6A8B1663.crl
                          rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/74967978EA662073DBD0CD3EBA40601D6A8B1663.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74967978EA662073DBD0CD3EBA40601D6A8B1663.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 20:32:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:10:5b:0b:ba:88:dd:e8:6e:b8:1f:04:e9:b1:06:07:7e:4b:ce:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74967978EA662073DBD0CD3EBA40601D6A8B1663
        Validity
            Not Before: Mar 24 13:14:53 2026 GMT
            Not After : Mar 23 13:19:53 2027 GMT
        Subject: CN=2CB45F2111E2B42FA75BE73718F074E9783E3655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:19:82:63:29:ff:df:8d:60:83:01:5b:b8:f1:
                    0b:02:86:f1:6f:aa:93:e0:53:98:ee:3d:cc:ad:8a:
                    59:e1:45:43:f0:76:af:c4:7f:77:78:3c:65:59:a8:
                    dd:38:ab:17:80:db:6b:a9:07:e4:ed:f5:f5:41:60:
                    49:a2:a0:09:d0:b6:ab:22:82:5d:64:e7:53:7e:ba:
                    f8:4d:c2:c0:28:2a:41:bf:3a:4d:5b:9b:98:99:c8:
                    de:c4:9c:62:97:b4:1d:b1:9b:f1:b6:db:9d:a9:a8:
                    58:61:f6:41:29:0f:9e:5d:d9:59:88:e3:9c:64:e3:
                    62:68:05:97:05:e9:b8:64:9c:d3:32:6f:3d:1c:25:
                    ef:5a:b1:5a:75:0e:d2:4e:98:53:62:3e:4b:5b:0c:
                    b3:a8:de:60:11:7e:63:3a:10:0a:59:76:86:99:85:
                    ba:ac:23:8f:86:97:b8:49:35:14:31:81:78:ac:1a:
                    7d:1b:a1:e5:4c:30:43:b7:e6:5b:6b:d5:ee:af:56:
                    7e:27:57:58:f8:91:2b:a6:24:c6:86:31:43:5f:bc:
                    86:77:dc:b7:be:fe:dd:b6:42:ce:12:62:24:34:8b:
                    44:3a:93:c8:35:76:ca:7b:3b:a5:6b:9d:6f:fa:02:
                    0a:7f:74:3b:20:a6:ba:49:bf:a2:e7:64:f6:09:6e:
                    ad:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B4:5F:21:11:E2:B4:2F:A7:5B:E7:37:18:F0:74:E9:78:3E:36:55
            X509v3 Authority Key Identifier:
                keyid:74:96:79:78:EA:66:20:73:DB:D0:CD:3E:BA:40:60:1D:6A:8B:16:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/74967978EA662073DBD0CD3EBA40601D6A8B1663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74967978EA662073DBD0CD3EBA40601D6A8B1663.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a39313a3a2f34382d3438203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6688:91::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:30:16:1c:29:97:eb:54:9d:09:88:92:e0:19:b8:5e:7c:0b:
         d0:3a:b0:02:c5:6f:01:34:2e:e6:1f:43:68:1d:03:97:73:9a:
         03:b5:81:9b:c2:4d:a2:6e:4e:cd:0b:2b:36:43:08:59:17:ba:
         f8:1c:15:ba:af:b8:d8:1d:13:c0:d4:1e:6f:4b:b8:9c:f4:53:
         27:9f:65:51:92:95:2e:d4:de:1d:3e:5c:ee:c3:06:28:b2:bd:
         7e:51:5d:80:04:fb:61:a8:5a:82:49:36:c4:12:26:e3:3e:d2:
         e5:6d:a3:d6:fe:83:49:44:7e:96:bc:09:4e:29:09:96:4f:21:
         f3:88:99:c4:35:30:09:b8:5d:11:56:60:90:52:3a:82:6a:a1:
         43:52:d3:f2:58:92:a0:1f:bd:33:3e:cf:9a:3e:63:a6:65:17:
         e6:c1:e0:9e:a4:e2:e7:60:d8:26:80:8b:86:41:2e:e2:96:94:
         d7:6d:75:40:9a:ef:cc:69:14:63:0f:44:97:d2:28:eb:b1:8f:
         1c:da:7d:ee:50:b3:fc:16:1a:99:c3:67:4f:5e:c5:04:5c:ae:
         aa:b9:76:80:51:e8:df:72:1e:4d:80:90:40:01:35:5e:e7:96:
         db:1b:75:95:2a:77:b4:d3:8a:3e:54:c4:77:97:48:2e:8d:d3:
         65:9b:68:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:41:16 2026 by rpki-client