Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/323830343a373530343a393030303a3a2f34302d3430203d3e20323731303138.roa
File:                     323830343a373530343a393030303a3a2f34302d3430203d3e20323731303138.roa (raw, json)
Hash identifier:          /ke8NydZlgmV8m39qZWTwJntI7i+6E/YZ5W+ocyyhGI=
Subject key identifier:   60:A6:85:EE:B0:A2:DA:51:AD:7C:06:B8:C3:1A:A6:A2:E3:43:91:D9
Certificate issuer:       /CN=EBEA1A61631F1E68C28E0457230DB74CDB16F7F3
Certificate serial:       1C93590D85355C7C63D8BD9336B4BB21F142BD31
Authority key identifier: EB:EA:1A:61:63:1F:1E:68:C2:8E:04:57:23:0D:B7:4C:DB:16:F7:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/323830343a373530343a393030303a3a2f34302d3430203d3e20323731303138.roa
Signing time:             Thu 26 Mar 2026 20:23:45 +0000
ROA not before:           Thu 26 Mar 2026 20:18:45 +0000
ROA not after:            Thu 25 Mar 2027 20:23:45 +0000
asID:                     271018
IP address blocks:        2804:7504:9000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.crl
                          rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 12:14:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:93:59:0d:85:35:5c:7c:63:d8:bd:93:36:b4:bb:21:f1:42:bd:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBEA1A61631F1E68C28E0457230DB74CDB16F7F3
        Validity
            Not Before: Mar 26 20:18:45 2026 GMT
            Not After : Mar 25 20:23:45 2027 GMT
        Subject: CN=60A685EEB0A2DA51AD7C06B8C31AA6A2E34391D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:cf:d3:a8:e1:19:f4:a2:ff:e2:8e:0b:28:e8:
                    2a:5d:48:26:bf:18:66:d6:f7:52:c8:6d:53:d3:2f:
                    4e:ba:b6:5d:57:96:ec:80:dc:06:7f:97:32:ce:10:
                    0f:c4:e0:15:cb:04:64:39:70:d9:ad:91:66:9a:84:
                    1a:5d:d0:22:15:19:90:d7:39:50:4f:92:d8:12:65:
                    0c:2b:b9:f6:22:8f:52:90:05:a9:ab:18:68:65:9c:
                    72:7c:2f:af:3c:eb:30:98:ac:f4:a0:0a:41:03:d0:
                    95:31:5e:fb:1f:cb:f8:ef:6c:99:d4:80:a1:41:55:
                    31:85:a6:00:fa:48:72:0b:b3:6c:e8:cd:b2:1b:cb:
                    8b:69:5f:21:4f:81:d0:2b:e2:89:fb:61:86:2c:67:
                    13:a2:b9:53:99:6b:84:bc:e5:a2:95:38:e5:0a:cc:
                    9b:55:c6:59:32:aa:2a:3c:c9:df:d6:df:f7:87:f8:
                    5d:9f:09:0b:d5:f5:e1:c1:da:f3:08:8e:0f:54:b8:
                    a5:76:e0:d5:d4:f0:3f:25:15:41:7b:05:b5:13:21:
                    77:06:06:fd:8b:d9:37:a6:5a:23:ad:7c:b4:75:c3:
                    90:0e:93:25:a9:82:7a:4c:f2:90:0e:a2:16:57:69:
                    6f:82:e4:53:b6:bf:3e:ce:5e:64:e0:32:87:87:29:
                    b3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A6:85:EE:B0:A2:DA:51:AD:7C:06:B8:C3:1A:A6:A2:E3:43:91:D9
            X509v3 Authority Key Identifier:
                keyid:EB:EA:1A:61:63:1F:1E:68:C2:8E:04:57:23:0D:B7:4C:DB:16:F7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/323830343a373530343a393030303a3a2f34302d3430203d3e20323731303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7504:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         a3:38:bf:27:94:70:38:51:c1:9e:aa:48:09:1a:e4:d2:d6:d2:
         97:f5:51:ac:76:48:23:7e:5c:96:f9:e7:ec:75:08:ca:56:0b:
         91:7e:50:fe:2a:a7:a6:6c:68:a3:75:b6:c1:a2:4a:4e:2a:0c:
         1b:37:e4:ca:f8:1f:8c:51:93:fc:cd:76:18:ab:1d:23:91:5c:
         0b:c5:58:48:1f:96:db:9c:9c:ac:f1:0b:2b:e1:d1:13:c9:9d:
         9f:e2:76:d8:b2:2e:12:ce:ff:da:8a:5a:f7:c0:d6:d6:0d:7d:
         90:e8:c4:3a:70:b6:4d:b9:7a:17:9d:1a:36:ac:81:0a:86:c2:
         78:e9:ce:04:f1:4c:71:e0:2b:91:8a:29:52:c7:11:1f:56:3b:
         11:86:5d:b6:04:83:14:9f:b4:c7:48:e8:e3:ef:67:e0:47:34:
         5b:9a:09:2d:87:49:f2:8b:f8:69:15:6c:2a:07:03:a0:74:4f:
         76:26:9a:9d:8f:6b:04:0c:b2:d0:10:6b:58:eb:f7:5a:2c:8b:
         0b:46:8c:79:ab:ee:b9:f2:34:5a:fa:79:8b:6a:44:16:82:31:
         7d:a2:02:b1:84:59:bf:d7:c4:bd:52:2d:07:90:b7:ae:0f:99:
         f4:d8:64:0e:9d:43:02:2b:8d:e2:1f:8e:b9:61:4a:64:fe:57:
         a7:f7:ad:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 17:00:32 2026 by rpki-client