Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/323830343a353865383a3a2f33322d313238203d3e20323638313537.roa
File:                     323830343a353865383a3a2f33322d313238203d3e20323638313537.roa (raw, json)
Hash identifier:          7UlhrWbO802rUgBMo4seqC9ueE7UsLmBFIZoMt+GV/0=
Subject key identifier:   28:F2:19:33:12:BE:7B:5C:0D:79:99:0A:5E:50:91:A4:23:A9:C6:25
Certificate issuer:       /CN=6EAB8AEBC03A78D8510770FB0532867992B2761B
Certificate serial:       256084050E1F8EF3F3B7A27CF2C18485AE03952E
Authority key identifier: 6E:AB:8A:EB:C0:3A:78:D8:51:07:70:FB:05:32:86:79:92:B2:76:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EAB8AEBC03A78D8510770FB0532867992B2761B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/323830343a353865383a3a2f33322d313238203d3e20323638313537.roa
Signing time:             Wed 04 Mar 2026 17:11:14 +0000
ROA not before:           Wed 04 Mar 2026 17:06:14 +0000
ROA not after:            Wed 03 Mar 2027 17:11:14 +0000
asID:                     268157
IP address blocks:        2804:58e8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/6EAB8AEBC03A78D8510770FB0532867992B2761B.crl
                          rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/6EAB8AEBC03A78D8510770FB0532867992B2761B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EAB8AEBC03A78D8510770FB0532867992B2761B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:59:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:60:84:05:0e:1f:8e:f3:f3:b7:a2:7c:f2:c1:84:85:ae:03:95:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EAB8AEBC03A78D8510770FB0532867992B2761B
        Validity
            Not Before: Mar  4 17:06:14 2026 GMT
            Not After : Mar  3 17:11:14 2027 GMT
        Subject: CN=28F2193312BE7B5C0D79990A5E5091A423A9C625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c5:5e:87:72:28:64:00:66:94:e4:d9:c2:a0:
                    ea:a7:02:d4:46:db:07:c4:b5:9c:2f:b0:77:9f:6b:
                    a5:91:ac:91:9d:55:5d:35:83:65:69:66:e2:97:3e:
                    09:39:e4:c7:6f:13:23:24:c2:a8:a0:58:a1:23:bf:
                    e6:7f:d1:15:47:85:22:f2:45:0a:ce:e4:15:bd:03:
                    4d:8f:dd:7e:c6:bd:57:a8:a6:56:4b:7b:4c:ee:62:
                    87:73:c9:c1:00:e1:ab:67:58:89:7d:e1:cc:db:ae:
                    54:de:4d:4d:6e:6e:07:c2:f0:88:bf:f2:16:8d:2d:
                    28:b6:41:35:95:72:b6:8c:38:35:0a:44:fe:3b:9a:
                    43:4f:bf:11:d3:94:a2:1a:4e:f7:e3:38:77:ea:4d:
                    d2:6d:bd:19:0e:f4:12:00:c9:11:c2:18:ca:0f:b4:
                    39:65:39:75:76:a7:3c:56:e6:1b:ef:6f:3c:0a:57:
                    6e:8a:fb:e2:33:f9:43:71:51:51:1e:0a:ac:d0:9f:
                    b3:95:c0:2f:75:f9:a9:29:51:31:c6:a8:ab:b0:33:
                    0b:f5:28:7c:93:c4:3e:40:3f:ec:2c:76:1c:a5:22:
                    05:58:73:c6:a5:c2:21:d9:2f:89:86:82:e0:18:51:
                    80:50:6b:f2:2d:d5:90:a5:6e:b5:fd:14:9b:40:df:
                    55:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F2:19:33:12:BE:7B:5C:0D:79:99:0A:5E:50:91:A4:23:A9:C6:25
            X509v3 Authority Key Identifier:
                keyid:6E:AB:8A:EB:C0:3A:78:D8:51:07:70:FB:05:32:86:79:92:B2:76:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/6EAB8AEBC03A78D8510770FB0532867992B2761B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EAB8AEBC03A78D8510770FB0532867992B2761B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/323830343a353865383a3a2f33322d313238203d3e20323638313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:8b:7b:3e:12:17:d4:ca:d4:e0:93:46:97:52:5b:35:5b:75:
         8e:63:7f:1a:b1:4a:ec:b1:22:d4:7b:9d:9c:a9:95:17:03:b9:
         df:44:4e:5c:33:fb:45:0a:0a:a1:d4:17:03:69:7b:43:cf:c8:
         5f:a0:d8:2b:be:d7:90:91:14:55:2c:ce:91:11:78:f0:e7:d1:
         f4:98:bb:24:de:75:d0:06:1e:92:71:ca:5f:f2:32:57:d9:7d:
         c5:db:5e:77:1d:91:af:7e:1a:ce:29:6f:0e:79:4e:40:d6:dc:
         c8:46:ab:9e:37:d1:7d:d2:51:ec:31:07:a8:40:ed:3f:b2:79:
         90:3b:92:ae:48:9b:75:b5:eb:a2:33:b2:73:1c:77:29:1f:73:
         7a:5f:c9:06:34:48:49:4e:6b:9c:9a:bb:52:8e:2f:fc:cc:5a:
         c0:4f:07:79:df:98:85:5e:b1:94:7f:ee:fc:42:14:f9:e3:b4:
         2a:3a:fb:2a:0b:72:9a:2b:a1:7c:a1:67:73:79:24:80:96:d4:
         61:3f:86:a4:f4:6f:b5:5f:2c:46:cb:57:ed:cd:33:1e:ce:62:
         ba:26:84:07:0f:c7:e3:46:7f:b8:15:a0:b2:43:6c:49:20:0b:
         bc:6d:72:ed:f3:a6:52:d5:8b:b0:bd:a1:80:e2:97:72:b9:25:
         e4:eb:b8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:41:48 2026 by rpki-client