Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/323830343a333534633a343530303a3a2f34302d3430203d3e203533303138.roa
File:                     323830343a333534633a343530303a3a2f34302d3430203d3e203533303138.roa (raw, json)
Hash identifier:          brgKHjstHD/GE0XEdQU4EyywvDekUv6J4xOKJX54ls8=
Subject key identifier:   B7:0D:B5:7F:2C:9C:94:66:04:41:3F:93:4E:D5:19:16:9D:A8:C1:39
Certificate issuer:       /CN=7853A8579AAC25C1D3CF341C8737A6301EAA865C
Certificate serial:       79A512BB06AF835000E8CD8E30A858F815C69C07
Authority key identifier: 78:53:A8:57:9A:AC:25:C1:D3:CF:34:1C:87:37:A6:30:1E:AA:86:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7853A8579AAC25C1D3CF341C8737A6301EAA865C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/323830343a333534633a343530303a3a2f34302d3430203d3e203533303138.roa
Signing time:             Tue 18 Aug 2026 12:55:56 +0000
ROA not before:           Tue 18 Aug 2026 12:50:56 +0000
ROA not after:            Tue 17 Aug 2027 12:55:56 +0000
asID:                     53018
IP address blocks:        2804:354c:4500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/7853A8579AAC25C1D3CF341C8737A6301EAA865C.crl
                          rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/7853A8579AAC25C1D3CF341C8737A6301EAA865C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7853A8579AAC25C1D3CF341C8737A6301EAA865C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 21:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a5:12:bb:06:af:83:50:00:e8:cd:8e:30:a8:58:f8:15:c6:9c:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7853A8579AAC25C1D3CF341C8737A6301EAA865C
        Validity
            Not Before: Aug 18 12:50:56 2026 GMT
            Not After : Aug 17 12:55:56 2027 GMT
        Subject: CN=B70DB57F2C9C946604413F934ED519169DA8C139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ed:c0:bd:aa:21:14:48:66:c8:64:e9:6b:5e:
                    be:53:c1:d5:ad:79:cd:1c:3b:9a:fc:b7:6b:c3:8c:
                    a2:e9:b3:78:63:f1:dc:3c:b2:fc:01:7a:12:49:5d:
                    00:b8:a6:65:8d:f4:9c:88:c5:3c:f5:09:b4:e4:39:
                    f5:4d:dd:fc:29:d5:88:b0:0a:09:e3:c7:56:30:fa:
                    17:0f:6e:00:3b:0c:16:16:b6:d4:fb:d3:11:73:a1:
                    bd:6f:ce:41:0a:a2:d9:a9:35:4f:b7:00:5c:9e:4a:
                    6d:54:30:47:d3:cc:13:57:75:b3:d2:11:1b:33:53:
                    7f:51:98:d1:1a:54:50:35:14:ae:a3:cc:0b:4e:ce:
                    6c:cb:c9:22:25:66:5f:d5:0c:05:09:fe:85:51:c2:
                    d8:51:40:48:c7:9a:34:7b:86:fe:ef:2b:66:c5:97:
                    8c:f1:d2:b0:2e:fd:3d:c2:d9:de:64:e1:60:8f:99:
                    0f:d1:fd:4d:d5:7b:56:7b:1e:e3:41:36:4b:b7:ef:
                    0f:c7:1f:ab:8b:f9:c4:aa:45:97:7d:d2:ed:c6:7d:
                    22:71:51:47:20:e3:0d:93:ae:fc:f6:51:b4:a5:12:
                    96:00:ba:9a:70:07:91:6b:27:28:35:98:7b:47:62:
                    fa:35:43:b1:b3:13:12:09:33:3f:2a:0a:e5:e8:13:
                    0f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:0D:B5:7F:2C:9C:94:66:04:41:3F:93:4E:D5:19:16:9D:A8:C1:39
            X509v3 Authority Key Identifier:
                keyid:78:53:A8:57:9A:AC:25:C1:D3:CF:34:1C:87:37:A6:30:1E:AA:86:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/7853A8579AAC25C1D3CF341C8737A6301EAA865C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7853A8579AAC25C1D3CF341C8737A6301EAA865C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/323830343a333534633a343530303a3a2f34302d3430203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:354c:4500::/40

    Signature Algorithm: sha256WithRSAEncryption
         0c:74:5c:1a:73:13:33:45:7a:ae:bc:f0:3f:db:27:51:cb:87:
         00:ff:99:d4:35:a8:76:e5:e0:88:82:97:6a:e0:0c:9e:50:ad:
         94:68:e6:d7:e6:7c:cf:7b:e4:d8:3b:a0:7d:b5:b4:56:a6:95:
         c0:08:b4:7b:cd:9c:2a:13:72:49:13:be:36:66:1b:51:3e:6a:
         2a:c5:57:d0:2a:dc:e9:6c:e6:70:2c:39:d0:08:44:a4:44:73:
         a9:a1:f0:17:0c:3b:b5:36:0c:80:82:bd:30:e6:d9:ca:7f:44:
         95:ec:b1:06:8f:e1:f3:3a:62:66:da:a9:2d:36:fb:ab:4c:77:
         73:77:4c:1a:94:4e:53:ca:9d:8c:76:f9:8e:9a:0d:20:58:6e:
         af:08:b5:98:30:db:a0:08:dc:6c:6f:91:f3:95:62:c8:a9:42:
         5e:ed:c3:53:03:f0:d0:ce:da:a6:80:d7:db:0c:ea:94:3b:b2:
         5f:92:bd:be:16:4d:2f:54:d2:50:46:93:d6:41:56:a5:8d:a7:
         81:24:b5:bd:cd:5d:94:23:d1:97:ee:dc:ea:2a:e1:ed:b3:19:
         53:8a:92:c3:cc:24:16:ee:6a:96:0a:4d:94:c8:b2:8b:04:c5:
         b2:88:61:b0:69:c9:48:06:7c:0b:ac:a1:dd:9b:5a:c3:4d:da:
         ca:68:1c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 06:06:53 2026 by rpki-client