Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/323830343a356637383a3a2f33322d313238203d3e20323639313032.roa
File:                     323830343a356637383a3a2f33322d313238203d3e20323639313032.roa (raw, json)
Hash identifier:          Lb7yKKNduQSuRsHj93UfJ/VjLU+hfMY7vpzta0K9nb8=
Subject key identifier:   CE:F6:6D:ED:6F:B8:92:39:D3:7E:26:A8:49:C2:2D:D4:CC:07:82:76
Certificate issuer:       /CN=7575D027902527F62EDD0F27A5AFEF9DC2A1EC45
Certificate serial:       3EFB2527E80B2CC8DAAEA7B8D6BCED0A06C955E9
Authority key identifier: 75:75:D0:27:90:25:27:F6:2E:DD:0F:27:A5:AF:EF:9D:C2:A1:EC:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7575D027902527F62EDD0F27A5AFEF9DC2A1EC45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/323830343a356637383a3a2f33322d313238203d3e20323639313032.roa
Signing time:             Thu 20 Aug 2026 19:14:35 +0000
ROA not before:           Thu 20 Aug 2026 19:09:35 +0000
ROA not after:            Thu 19 Aug 2027 19:14:35 +0000
asID:                     269102
IP address blocks:        2804:5f78::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/7575D027902527F62EDD0F27A5AFEF9DC2A1EC45.crl
                          rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/7575D027902527F62EDD0F27A5AFEF9DC2A1EC45.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7575D027902527F62EDD0F27A5AFEF9DC2A1EC45.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 02:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:fb:25:27:e8:0b:2c:c8:da:ae:a7:b8:d6:bc:ed:0a:06:c9:55:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7575D027902527F62EDD0F27A5AFEF9DC2A1EC45
        Validity
            Not Before: Aug 20 19:09:35 2026 GMT
            Not After : Aug 19 19:14:35 2027 GMT
        Subject: CN=CEF66DED6FB89239D37E26A849C22DD4CC078276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:99:f1:d1:11:6c:41:19:61:d2:e8:8c:be:d0:
                    53:7e:d6:d5:5b:42:fd:94:f3:90:85:79:d0:b3:f2:
                    9a:76:98:7b:83:9a:60:34:51:ae:42:50:78:9c:2e:
                    a8:b5:8f:fa:6a:51:b1:11:0e:e5:a1:cb:0d:5d:3a:
                    9c:c6:b6:22:3d:27:02:be:a7:fa:d8:ee:23:96:91:
                    6a:99:b7:ac:83:7d:45:80:c1:18:5a:f5:f4:cb:09:
                    e5:e5:97:82:82:7d:66:09:d2:8e:8d:53:01:13:63:
                    fb:ad:c7:65:2e:e2:14:8f:a8:16:5b:0b:20:b5:23:
                    00:33:23:15:20:a5:e4:2e:71:64:ef:61:26:91:24:
                    50:ed:b3:7b:44:71:91:41:c8:af:13:76:e4:35:98:
                    67:5d:f0:b5:8f:f9:88:6f:1d:92:cd:a6:51:c6:c5:
                    99:8b:5d:0f:e6:06:f2:5d:7d:80:18:02:8a:5e:b1:
                    12:0e:e8:58:e5:66:ec:9c:38:66:0d:8b:bb:6d:d4:
                    6b:07:2d:78:74:e5:68:48:fc:01:78:5c:2f:ad:6d:
                    18:92:4d:de:b4:73:dc:2e:e3:dc:fa:59:37:70:c8:
                    b4:17:e7:7c:c2:ea:5a:59:f5:d6:76:bf:80:0f:62:
                    18:5c:6d:5d:61:56:ff:a9:33:63:f0:6c:b3:e0:1a:
                    5a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F6:6D:ED:6F:B8:92:39:D3:7E:26:A8:49:C2:2D:D4:CC:07:82:76
            X509v3 Authority Key Identifier:
                keyid:75:75:D0:27:90:25:27:F6:2E:DD:0F:27:A5:AF:EF:9D:C2:A1:EC:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/7575D027902527F62EDD0F27A5AFEF9DC2A1EC45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7575D027902527F62EDD0F27A5AFEF9DC2A1EC45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/323830343a356637383a3a2f33322d313238203d3e20323639313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f78::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:d7:18:37:cd:46:c5:4a:2d:b3:69:1c:ba:09:1c:da:57:88:
         a1:90:1c:0b:d9:1c:4c:3e:ac:b2:59:70:e6:fd:6d:5b:4e:21:
         a2:85:34:20:aa:67:53:11:c7:10:ae:7c:d7:91:95:4a:11:0a:
         69:28:cc:0d:b4:d1:67:09:29:43:0f:67:00:49:3a:b1:f6:ea:
         59:38:19:cc:64:76:62:b9:e4:c7:c2:11:cd:79:c3:19:dd:3e:
         e0:25:30:7a:b8:ac:88:a7:ac:69:68:b8:5d:57:67:1e:fb:a9:
         74:1f:bd:53:68:ad:10:bb:82:4c:d0:40:8d:be:ca:fd:60:46:
         2a:e5:e3:35:52:19:30:8f:3a:74:40:09:17:0f:88:1e:d5:55:
         da:e2:fb:0a:f1:ae:c5:d7:9e:ee:f3:8c:33:8d:82:a9:f9:6e:
         a1:d7:77:be:31:38:9b:84:1a:c4:96:72:21:4b:6c:e9:d6:94:
         8e:a9:d3:68:cb:05:df:4e:4a:a1:ec:6a:f4:8d:9d:c1:a6:e5:
         c4:b8:c8:eb:08:92:64:8b:86:e3:fa:b4:00:95:43:24:01:ae:
         a3:d5:48:b9:5c:d5:db:5e:a5:1a:e6:4a:86:e6:8c:b3:f9:89:
         0f:63:c3:88:5f:5c:80:ce:ca:b1:93:76:70:04:89:b4:ed:60:
         78:d7:29:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:18:07 2026 by rpki-client