Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/0/323830343a373663343a3a2f33322d3438203d3e20323731313333.roa
File:                     323830343a373663343a3a2f33322d3438203d3e20323731313333.roa (raw, json)
Hash identifier:          ejSewnPicebL9ByhyaertfyfJj6WRZEF08pc1z4nBrs=
Subject key identifier:   55:4A:89:8F:28:B6:C5:EB:F0:68:4E:AB:F0:3E:3E:DF:5E:B4:76:B5
Certificate issuer:       /CN=78AA122D57FF86AEFDBC446F6AED242B4F525010
Certificate serial:       60EAD4CE248F860CAFBB395B99C64764D94BBD25
Authority key identifier: 78:AA:12:2D:57:FF:86:AE:FD:BC:44:6F:6A:ED:24:2B:4F:52:50:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78AA122D57FF86AEFDBC446F6AED242B4F525010.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/0/323830343a373663343a3a2f33322d3438203d3e20323731313333.roa
Signing time:             Tue 19 May 2026 09:08:14 +0000
ROA not before:           Tue 19 May 2026 09:03:14 +0000
ROA not after:            Tue 18 May 2027 09:08:14 +0000
asID:                     271133
IP address blocks:        2804:76c4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/0/78AA122D57FF86AEFDBC446F6AED242B4F525010.crl
                          rsync://rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/0/78AA122D57FF86AEFDBC446F6AED242B4F525010.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78AA122D57FF86AEFDBC446F6AED242B4F525010.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 May 2026 21:08:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ea:d4:ce:24:8f:86:0c:af:bb:39:5b:99:c6:47:64:d9:4b:bd:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78AA122D57FF86AEFDBC446F6AED242B4F525010
        Validity
            Not Before: May 19 09:03:14 2026 GMT
            Not After : May 18 09:08:14 2027 GMT
        Subject: CN=554A898F28B6C5EBF0684EABF03E3EDF5EB476B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:70:cf:e5:1d:fb:93:11:f8:a8:23:4b:48:eb:
                    9b:4c:20:cd:d1:59:22:37:fe:49:a5:ee:2a:27:61:
                    31:84:8a:3c:b3:87:94:b1:e4:0d:14:01:d5:67:b8:
                    6e:4b:d7:d4:a8:f8:80:d1:a3:17:fa:61:7c:f5:fe:
                    30:78:04:31:39:33:88:23:4f:69:56:b8:c6:a1:0a:
                    bb:03:29:b5:2b:56:93:85:82:85:7d:f8:72:eb:dc:
                    95:88:d9:97:13:69:93:72:19:ff:ab:91:62:84:b8:
                    b0:6d:76:15:ad:e2:b2:31:63:ad:c5:96:75:6d:f6:
                    a3:f8:26:34:bb:24:26:02:b2:ea:34:c3:e4:e5:1e:
                    ce:b1:40:20:e1:7c:89:a3:27:c7:6a:71:28:8b:b6:
                    64:38:9a:12:d0:ad:80:17:b8:33:15:d0:f1:3b:ab:
                    aa:d6:48:d8:42:87:9f:18:95:ce:b9:81:bf:b5:b6:
                    74:fb:5c:b7:7c:3a:6d:42:d7:40:ad:63:51:43:14:
                    5d:ce:12:00:70:e8:bf:2e:5b:7d:19:87:23:4e:ea:
                    5b:5a:d8:f3:1b:98:72:0d:d3:cf:da:7e:ca:12:65:
                    07:d9:15:44:f5:6f:d0:58:32:fc:c5:57:96:8b:5d:
                    a2:a2:05:b4:2d:d1:6e:73:e5:e5:17:b9:96:45:96:
                    13:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4A:89:8F:28:B6:C5:EB:F0:68:4E:AB:F0:3E:3E:DF:5E:B4:76:B5
            X509v3 Authority Key Identifier:
                keyid:78:AA:12:2D:57:FF:86:AE:FD:BC:44:6F:6A:ED:24:2B:4F:52:50:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/0/78AA122D57FF86AEFDBC446F6AED242B4F525010.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78AA122D57FF86AEFDBC446F6AED242B4F525010.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/0/323830343a373663343a3a2f33322d3438203d3e20323731313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:76c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:bc:56:9c:31:12:ea:09:ea:44:d6:7a:8d:2f:f5:c5:7d:51:
         be:01:16:bb:9f:34:3e:95:1f:5b:cc:dd:2a:57:19:93:81:c8:
         10:76:d7:5a:30:21:e2:d9:70:ac:d7:2b:e0:5f:51:6f:50:cd:
         af:93:5d:fc:1a:f5:76:86:7a:38:b0:1a:0a:fd:50:ce:2c:0f:
         39:0d:ec:96:f4:2b:0a:a3:73:70:74:8d:67:04:c5:a9:89:69:
         e4:7e:80:ca:90:4e:fd:d1:f7:c8:b6:dd:50:1c:cf:61:ea:15:
         e3:78:ab:20:7f:94:97:4b:0a:10:4e:37:13:9d:9a:a7:e7:18:
         8d:f4:14:7b:63:ae:cb:a4:98:9e:8c:3e:8d:05:ef:0f:cc:ad:
         5e:60:5f:46:3e:28:01:78:aa:19:f1:b2:8b:86:80:4b:ff:48:
         1d:8a:3a:bd:9e:90:8b:60:76:f6:b1:d8:7b:74:17:5b:b9:c9:
         39:dc:d2:4d:e1:a4:d2:6e:b4:7f:b8:4d:2a:ee:c8:96:c1:ae:
         28:68:91:92:fd:16:4a:f6:47:c0:8d:3c:d2:51:9f:94:c5:b1:
         a0:73:e5:85:04:fa:d4:5f:6d:20:aa:4d:6e:56:71:57:3b:44:
         d9:d3:b6:be:ba:6d:3b:df:30:4c:6b:ad:46:86:c5:1c:89:cf:
         d0:8a:ee:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:18:00 2026 by rpki-client