Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/323830343a366335633a3a2f33322d313238203d3e20323730343633.roa
File:                     323830343a366335633a3a2f33322d313238203d3e20323730343633.roa (raw, json)
Hash identifier:          6hjqUFt/4tysbLwi+ul+/be6XfwZt84vie8MiHfpaoQ=
Subject key identifier:   07:E4:F8:AD:11:BB:B9:6D:F0:3E:14:B5:7B:F6:BE:F6:89:31:DD:05
Certificate issuer:       /CN=F34540F415C65F1B5B88778AA4D5682AF7418D6B
Certificate serial:       64B225F3124408AB716D6B9EC953163199316456
Authority key identifier: F3:45:40:F4:15:C6:5F:1B:5B:88:77:8A:A4:D5:68:2A:F7:41:8D:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34540F415C65F1B5B88778AA4D5682AF7418D6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/323830343a366335633a3a2f33322d313238203d3e20323730343633.roa
Signing time:             Mon 23 Mar 2026 17:51:11 +0000
ROA not before:           Mon 23 Mar 2026 17:46:11 +0000
ROA not after:            Mon 22 Mar 2027 17:51:11 +0000
asID:                     270463
IP address blocks:        2804:6c5c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/F34540F415C65F1B5B88778AA4D5682AF7418D6B.crl
                          rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/F34540F415C65F1B5B88778AA4D5682AF7418D6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34540F415C65F1B5B88778AA4D5682AF7418D6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 22:15:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b2:25:f3:12:44:08:ab:71:6d:6b:9e:c9:53:16:31:99:31:64:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F34540F415C65F1B5B88778AA4D5682AF7418D6B
        Validity
            Not Before: Mar 23 17:46:11 2026 GMT
            Not After : Mar 22 17:51:11 2027 GMT
        Subject: CN=07E4F8AD11BBB96DF03E14B57BF6BEF68931DD05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9b:c7:05:69:41:a6:51:ea:d6:dd:ed:12:8c:
                    4e:95:64:12:02:c7:73:26:85:99:13:a6:3a:0a:59:
                    8f:5f:d5:ae:3d:39:07:8f:38:28:c4:35:3a:5e:9c:
                    aa:e1:d2:2a:4d:9c:e8:3d:64:9b:8f:e1:1c:06:d7:
                    9b:be:1b:22:08:75:f8:3a:fc:61:fb:5b:0a:cf:11:
                    7e:d5:bf:f9:0f:bf:03:e1:b7:6a:ee:6b:26:cb:ee:
                    32:1d:af:6d:5b:41:7a:44:46:c6:a5:22:06:6b:d1:
                    73:32:da:53:8a:42:d4:9d:58:d5:71:24:76:12:4d:
                    34:d3:01:0d:a0:90:67:a9:09:c2:1d:56:88:8a:0e:
                    d3:37:3b:e5:34:13:ba:1f:07:25:8b:20:d2:a9:de:
                    42:a3:f7:87:30:db:3d:30:d4:1d:ac:6e:c4:b1:13:
                    28:ad:3d:e7:62:82:8e:99:8a:fc:69:81:79:0d:51:
                    29:46:4a:76:83:f0:ea:1b:bc:ff:09:30:72:ea:ed:
                    eb:f8:cf:db:5b:e9:a3:ea:02:4a:17:fa:7f:a9:79:
                    83:06:d3:5c:52:4b:0d:57:ee:0c:6e:84:7c:79:86:
                    66:f7:7c:50:60:93:2e:de:13:e3:bd:ea:9e:d5:01:
                    c5:58:97:97:83:a3:20:55:5e:90:35:da:9b:ef:cf:
                    25:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E4:F8:AD:11:BB:B9:6D:F0:3E:14:B5:7B:F6:BE:F6:89:31:DD:05
            X509v3 Authority Key Identifier:
                keyid:F3:45:40:F4:15:C6:5F:1B:5B:88:77:8A:A4:D5:68:2A:F7:41:8D:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/F34540F415C65F1B5B88778AA4D5682AF7418D6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34540F415C65F1B5B88778AA4D5682AF7418D6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/323830343a366335633a3a2f33322d313238203d3e20323730343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:a4:8d:71:55:14:91:02:39:42:5d:39:f2:71:00:13:86:15:
         b3:8f:04:c2:a4:d2:ea:cb:df:d9:54:23:b0:d0:70:70:63:7c:
         24:62:aa:d9:6f:e3:b2:7b:e4:e8:9c:4a:65:29:17:83:eb:4f:
         94:d3:0a:f9:de:4b:5e:dd:fe:c8:ef:96:17:0f:47:f2:12:29:
         d4:cc:27:1c:ce:b5:88:95:77:d1:45:00:93:9b:c3:3b:c3:8c:
         1b:18:5a:be:4a:4a:bc:d5:e1:d0:ee:72:20:7f:fe:3c:21:be:
         12:a0:c2:db:53:0e:b4:9e:9e:62:18:29:9c:66:fc:6f:56:58:
         76:f7:c2:50:91:f7:fa:98:7e:6e:aa:ff:2a:21:e9:21:ee:91:
         f0:c2:37:d4:b0:80:ce:bc:bc:aa:e7:32:10:52:ec:41:41:70:
         eb:d0:1f:64:41:29:b8:78:f4:7a:c0:81:ba:0d:bb:fe:e7:a9:
         06:79:80:0f:d2:d2:a3:60:0b:68:5f:bf:44:7e:58:b4:12:ed:
         72:10:f0:a6:8e:91:80:29:62:4e:43:8f:8a:84:57:62:30:ac:
         50:51:06:1d:d1:43:71:21:c0:26:83:11:12:92:7d:b4:51:2d:
         ee:8d:a8:8b:db:ac:77:b2:35:b8:cc:cb:59:2f:ef:a3:93:06:
         15:da:75:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:24:10 2026 by rpki-client