Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4PSGd9CWKwZkPzwocXWMX6cH3zmVDJTD3dpXuVJkTM6/0/323830343a373861343a363a3a2f34382d3438203d3e20323731323536.roa
File:                     323830343a373861343a363a3a2f34382d3438203d3e20323731323536.roa (raw, json)
Hash identifier:          qRpgpLbvdHM8lAF1EkGj28i/XK26j3AjIuLwEf+ltMM=
Subject key identifier:   4C:C0:04:B6:64:57:D9:F5:0D:50:7B:FE:75:63:D7:50:57:30:70:E5
Certificate issuer:       /CN=7C00A61A802147A4FB025FCB9D4C063724EBC907
Certificate serial:       714D1F92F4F571D4277A44AE714A03C21CAAF41A
Authority key identifier: 7C:00:A6:1A:80:21:47:A4:FB:02:5F:CB:9D:4C:06:37:24:EB:C9:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C00A61A802147A4FB025FCB9D4C063724EBC907.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4PSGd9CWKwZkPzwocXWMX6cH3zmVDJTD3dpXuVJkTM6/0/323830343a373861343a363a3a2f34382d3438203d3e20323731323536.roa
Signing time:             Tue 28 Apr 2026 14:22:20 +0000
ROA not before:           Tue 28 Apr 2026 14:17:20 +0000
ROA not after:            Tue 27 Apr 2027 14:22:20 +0000
asID:                     271256
IP address blocks:        2804:78a4:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F4PSGd9CWKwZkPzwocXWMX6cH3zmVDJTD3dpXuVJkTM6/0/7C00A61A802147A4FB025FCB9D4C063724EBC907.crl
                          rsync://rpki-repo.registro.br/repo/F4PSGd9CWKwZkPzwocXWMX6cH3zmVDJTD3dpXuVJkTM6/0/7C00A61A802147A4FB025FCB9D4C063724EBC907.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C00A61A802147A4FB025FCB9D4C063724EBC907.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 03:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:4d:1f:92:f4:f5:71:d4:27:7a:44:ae:71:4a:03:c2:1c:aa:f4:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C00A61A802147A4FB025FCB9D4C063724EBC907
        Validity
            Not Before: Apr 28 14:17:20 2026 GMT
            Not After : Apr 27 14:22:20 2027 GMT
        Subject: CN=4CC004B66457D9F50D507BFE7563D750573070E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1e:f4:01:70:13:b5:12:c2:64:7c:43:71:eb:
                    e0:c8:16:1a:99:07:49:88:7d:27:da:d4:6d:b4:26:
                    43:8b:9d:17:87:de:a1:e3:05:62:7a:0a:92:89:52:
                    26:e1:60:57:17:96:77:76:c1:43:2b:5d:10:f7:41:
                    2e:55:c6:88:5e:54:07:0e:bb:45:8c:9e:b2:76:66:
                    73:59:0a:54:b3:15:a5:00:bb:b8:64:ef:0d:f8:d0:
                    a2:4a:ac:81:7f:dd:15:81:85:9c:d0:5d:6f:2c:3b:
                    fb:29:fd:62:88:4d:9c:0b:08:34:0b:8f:de:6c:f7:
                    ab:76:65:66:a5:6e:bf:8e:58:91:2e:70:4b:32:68:
                    94:b3:97:cd:18:d0:36:cb:4c:93:54:a2:48:79:45:
                    d9:1c:7d:cf:84:5b:3a:2c:dc:54:1d:42:d1:da:62:
                    8a:66:fe:5d:0d:2b:24:bc:b6:75:3c:84:6d:a3:cc:
                    cb:b6:59:4e:9c:d6:c5:b9:81:f2:f4:c7:63:df:f6:
                    d1:8e:58:68:02:6d:f7:da:82:67:1e:60:1c:73:0c:
                    cb:e3:a6:28:88:69:c8:d0:d6:ce:2d:46:ee:9b:b1:
                    d3:22:d6:c4:56:d6:c5:05:6d:4a:a1:ea:4a:79:9b:
                    a0:be:86:c8:74:ca:20:52:90:13:31:29:96:98:08:
                    57:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C0:04:B6:64:57:D9:F5:0D:50:7B:FE:75:63:D7:50:57:30:70:E5
            X509v3 Authority Key Identifier:
                keyid:7C:00:A6:1A:80:21:47:A4:FB:02:5F:CB:9D:4C:06:37:24:EB:C9:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4PSGd9CWKwZkPzwocXWMX6cH3zmVDJTD3dpXuVJkTM6/0/7C00A61A802147A4FB025FCB9D4C063724EBC907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C00A61A802147A4FB025FCB9D4C063724EBC907.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4PSGd9CWKwZkPzwocXWMX6cH3zmVDJTD3dpXuVJkTM6/0/323830343a373861343a363a3a2f34382d3438203d3e20323731323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:78a4:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:ee:2d:30:04:b0:04:43:10:1d:20:d5:a3:71:b9:27:51:e9:
         fc:d8:c7:91:2e:16:19:b8:f4:ce:88:d1:d3:90:d1:34:d2:65:
         23:66:26:c3:d1:fe:7c:07:32:7d:6d:9c:b6:76:1c:1b:03:3f:
         1a:68:3f:4d:13:af:d8:86:b4:6b:d8:9b:41:2f:3b:c4:ca:21:
         75:d3:60:e7:21:be:f4:46:ed:72:72:de:e2:b7:13:c8:95:27:
         95:a9:ed:9a:d4:d8:97:50:6b:5b:7f:8b:10:67:af:d8:a4:7e:
         e2:5b:71:7d:cc:43:9c:f3:5c:cb:27:9e:3e:0a:62:5c:f3:17:
         82:7f:f9:9e:f5:30:a8:b9:ae:25:a8:e3:3d:c0:5d:a3:15:68:
         a1:a2:2a:20:21:dd:f7:41:49:55:1a:04:6a:79:11:07:63:b0:
         d7:bb:a7:30:2a:82:e1:db:1c:96:5e:b7:92:c3:13:20:82:f7:
         44:e7:b4:76:87:cc:ac:ea:97:8a:94:c2:4b:3c:d1:d9:4a:d4:
         ed:e3:a6:28:79:ea:7c:7b:36:54:55:39:7c:e3:0b:84:78:9b:
         b1:1b:84:93:f5:4d:0e:d6:ea:79:d2:ad:99:21:2c:77:85:8a:
         22:e1:73:66:b5:42:7f:f2:0f:45:a7:1d:a3:05:13:72:82:dd:
         9e:16:bf:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:00:51 2026 by rpki-client