Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/323830343a373530343a613030303a3a2f34302d3430203d3e20323731303138.roa
File:                     323830343a373530343a613030303a3a2f34302d3430203d3e20323731303138.roa (raw, json)
Hash identifier:          5QUMTQxwA9/5UT4Xjpgr5PeXY5D0DerropX1RkioKBQ=
Subject key identifier:   30:F2:15:CD:C2:BE:D5:6F:EF:02:92:D2:1B:03:9E:1E:FC:06:02:21
Certificate issuer:       /CN=EBEA1A61631F1E68C28E0457230DB74CDB16F7F3
Certificate serial:       010AB393768FF8D3F5994C08387531450951302B
Authority key identifier: EB:EA:1A:61:63:1F:1E:68:C2:8E:04:57:23:0D:B7:4C:DB:16:F7:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/323830343a373530343a613030303a3a2f34302d3430203d3e20323731303138.roa
Signing time:             Thu 26 Mar 2026 20:23:48 +0000
ROA not before:           Thu 26 Mar 2026 20:18:48 +0000
ROA not after:            Thu 25 Mar 2027 20:23:48 +0000
asID:                     271018
IP address blocks:        2804:7504:a000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.crl
                          rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 12:14:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0a:b3:93:76:8f:f8:d3:f5:99:4c:08:38:75:31:45:09:51:30:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBEA1A61631F1E68C28E0457230DB74CDB16F7F3
        Validity
            Not Before: Mar 26 20:18:48 2026 GMT
            Not After : Mar 25 20:23:48 2027 GMT
        Subject: CN=30F215CDC2BED56FEF0292D21B039E1EFC060221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:33:f2:c5:19:67:3d:51:03:66:08:f8:07:0b:
                    f0:ce:f5:51:8b:ef:25:da:8e:5b:76:88:12:50:58:
                    59:ec:9f:4b:3e:a9:ac:40:d5:41:88:6e:b9:0e:75:
                    f1:dc:e0:66:37:71:4f:6b:22:f7:33:9e:f9:04:cc:
                    7f:d2:23:1f:7e:9e:4d:cf:0b:8d:9f:8d:95:18:be:
                    13:d3:ef:d7:95:79:ec:ca:8e:99:7f:4c:74:6e:11:
                    02:d3:0e:7a:3c:9f:70:96:86:4f:7b:a0:2c:bb:77:
                    e8:e2:81:04:73:ed:4b:48:fa:77:f8:cf:1a:a2:b2:
                    81:73:a9:1a:a2:81:8f:a2:5c:79:97:6f:9f:96:7d:
                    f3:01:80:46:aa:9e:a6:05:7c:93:29:37:6b:14:36:
                    63:d5:ad:c3:c7:53:e8:5c:68:e4:81:9d:37:28:a2:
                    2d:8b:9d:be:83:e2:6d:85:f3:41:d3:75:fd:c6:75:
                    91:2d:94:f2:bd:8e:5f:7c:e4:38:ee:be:5b:9f:84:
                    39:9f:13:c4:d3:b6:62:11:c9:98:d9:fc:74:dc:59:
                    e7:5b:0d:59:12:41:bd:f3:f1:c5:36:50:cc:c2:3b:
                    b5:78:a3:e3:2b:e9:cb:91:46:33:33:f9:4f:f8:af:
                    39:b6:b9:91:25:24:17:db:72:3e:47:03:b0:44:10:
                    ca:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F2:15:CD:C2:BE:D5:6F:EF:02:92:D2:1B:03:9E:1E:FC:06:02:21
            X509v3 Authority Key Identifier:
                keyid:EB:EA:1A:61:63:1F:1E:68:C2:8E:04:57:23:0D:B7:4C:DB:16:F7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/323830343a373530343a613030303a3a2f34302d3430203d3e20323731303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7504:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         6a:d6:e1:60:dd:d4:cc:10:97:ee:6f:55:e8:76:4b:46:13:c8:
         76:76:a8:29:45:f4:42:59:99:fc:99:26:7b:bf:b9:11:bb:80:
         37:1b:92:41:a2:9f:85:20:d4:0d:c2:de:3f:19:80:0d:e9:92:
         b6:97:39:77:8a:b0:82:ed:52:f6:1f:32:b2:13:26:0d:e4:b1:
         8c:b2:fb:69:4a:fc:ce:70:f6:93:3a:08:d7:6c:0a:fd:6b:51:
         8e:9f:82:00:a6:77:26:6e:52:06:d2:6e:0e:c1:c5:f8:a1:af:
         7a:0a:44:d9:8f:87:b7:3a:73:7a:e6:ef:6f:0b:e6:9b:dc:1f:
         8c:94:83:03:05:0e:e7:76:59:ac:4d:a0:01:4b:96:e5:12:73:
         2e:23:89:4b:ea:e4:e5:a6:52:fd:08:0a:d8:9d:57:df:b5:66:
         bc:ea:b8:c9:42:72:60:63:17:88:23:91:4e:8e:55:66:a6:0c:
         37:14:7f:71:c3:ea:1a:ca:81:3e:e5:8d:6f:5d:80:a0:c4:94:
         67:af:6c:e7:b0:fc:f1:01:fe:a3:d5:48:14:92:39:a7:c9:c2:
         4f:3c:53:87:51:5d:ad:4f:98:38:ef:6f:ff:e6:de:29:de:9b:
         bf:cb:45:5e:2f:9e:8b:4d:9e:cf:f3:a1:0b:1f:0b:9e:8e:48:
         04:77:ba:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 17:00:32 2026 by rpki-client