Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/323830343a373337303a3a2f33322d313238203d3e20323730393135.roa
File:                     323830343a373337303a3a2f33322d313238203d3e20323730393135.roa (raw, json)
Hash identifier:          3TXR2qtIKBQwZy1J+W94tpYmdKEJA/F3zQ/V5tXYfBM=
Subject key identifier:   EB:AA:D8:EC:E6:5B:59:44:2C:0D:63:A6:10:5D:F2:1B:67:F4:24:0E
Certificate issuer:       /CN=03B8611361C95239CFF87CCD1229DC3EFED4CFE1
Certificate serial:       4BF67E9BFBA9242D5B9179B4878E74570FF2AAB8
Authority key identifier: 03:B8:61:13:61:C9:52:39:CF:F8:7C:CD:12:29:DC:3E:FE:D4:CF:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03B8611361C95239CFF87CCD1229DC3EFED4CFE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/323830343a373337303a3a2f33322d313238203d3e20323730393135.roa
Signing time:             Wed 26 Aug 2026 17:52:03 +0000
ROA not before:           Wed 26 Aug 2026 17:47:03 +0000
ROA not after:            Wed 25 Aug 2027 17:52:03 +0000
asID:                     270915
IP address blocks:        2804:7370::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/03B8611361C95239CFF87CCD1229DC3EFED4CFE1.crl
                          rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/03B8611361C95239CFF87CCD1229DC3EFED4CFE1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03B8611361C95239CFF87CCD1229DC3EFED4CFE1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 15:16:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:f6:7e:9b:fb:a9:24:2d:5b:91:79:b4:87:8e:74:57:0f:f2:aa:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03B8611361C95239CFF87CCD1229DC3EFED4CFE1
        Validity
            Not Before: Aug 26 17:47:03 2026 GMT
            Not After : Aug 25 17:52:03 2027 GMT
        Subject: CN=EBAAD8ECE65B59442C0D63A6105DF21B67F4240E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:da:84:06:91:22:35:50:ba:cd:0e:23:62:4d:
                    c6:60:45:ff:6d:b4:1e:34:92:23:81:5f:e6:41:3e:
                    7c:11:c4:37:4c:ae:dc:c1:76:77:77:31:8d:01:12:
                    63:5d:24:59:3d:ad:3c:8b:26:13:34:00:ce:f0:c5:
                    08:ee:97:0f:22:1b:ce:a4:b4:74:4a:62:0c:56:69:
                    70:c9:ff:60:1c:e6:97:c8:cd:a5:89:d9:47:27:8c:
                    16:88:de:d1:37:30:09:58:59:f8:7e:87:e8:22:26:
                    a3:57:11:e6:6d:84:07:09:b7:05:12:b1:99:b6:7f:
                    db:3f:2b:59:15:87:d5:ac:62:70:50:59:25:60:c1:
                    81:ae:4c:1c:27:f4:75:3f:71:5b:ef:d3:b8:88:28:
                    0f:72:1d:d4:15:e9:b5:41:5e:6c:a6:2a:47:89:51:
                    78:a2:8c:66:de:ef:ba:8a:96:7e:d6:bc:c7:fc:00:
                    25:a8:d1:c5:93:fc:77:92:5a:35:e7:fd:5e:86:16:
                    93:0a:8e:38:0e:6c:a5:bd:d4:e4:0c:46:b5:09:6a:
                    c2:15:c2:22:a1:6f:c8:5f:75:63:6d:4d:81:2c:43:
                    3d:88:4d:76:b9:0e:c2:51:fd:4a:13:a9:ec:53:9a:
                    0b:24:5d:de:90:d2:88:2a:00:cc:52:7c:66:ed:6a:
                    6c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AA:D8:EC:E6:5B:59:44:2C:0D:63:A6:10:5D:F2:1B:67:F4:24:0E
            X509v3 Authority Key Identifier:
                keyid:03:B8:61:13:61:C9:52:39:CF:F8:7C:CD:12:29:DC:3E:FE:D4:CF:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/03B8611361C95239CFF87CCD1229DC3EFED4CFE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03B8611361C95239CFF87CCD1229DC3EFED4CFE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/323830343a373337303a3a2f33322d313238203d3e20323730393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7370::/32

    Signature Algorithm: sha256WithRSAEncryption
         ca:01:a7:f1:88:aa:4b:c6:04:60:25:21:a3:26:43:1e:c7:c9:
         30:d1:b3:7c:01:8a:6a:ec:6d:87:6a:90:5f:16:aa:a3:0e:e6:
         6e:0d:c8:5c:8d:2d:d7:2e:29:af:e6:fd:1e:40:0e:d7:ef:d0:
         c7:10:20:0b:93:44:8a:14:14:17:55:a2:e1:4a:b0:d2:88:32:
         3a:17:3e:28:09:d2:e1:45:c6:54:e2:15:db:ad:41:6a:7a:10:
         67:74:34:8e:51:fc:79:6d:ec:80:8c:4f:a9:b8:4a:18:2a:00:
         5a:b6:5d:60:13:26:be:c1:39:89:92:90:77:be:ad:d7:1b:c2:
         1f:e2:1f:0b:4d:19:7c:8a:ec:48:60:cb:20:54:d5:81:27:98:
         96:50:ba:23:64:db:39:55:80:b8:87:f3:ac:17:14:eb:02:22:
         4e:43:8a:6a:11:b3:d1:bd:18:71:42:78:e6:27:43:17:18:f3:
         cf:67:fb:b8:bb:41:db:02:b1:b1:ed:9b:92:96:9d:2b:56:af:
         53:e0:8d:ad:34:e4:61:d2:a4:5d:60:03:da:ff:ab:8b:f0:cc:
         c2:f7:20:f4:12:23:b8:18:8c:59:d7:7e:68:bd:39:fd:9d:ee:
         d8:5f:a1:3e:f9:24:97:02:af:f7:32:aa:4d:b0:4d:d4:6d:04:
         e9:8d:14:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:12:41 2026 by rpki-client