Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/323830343a6231303a3a2f33322d3332203d3e203532393336.roa
File:                     323830343a6231303a3a2f33322d3332203d3e203532393336.roa (raw, json)
Hash identifier:          gJB5pZPUmaGz3sKUYouyFzq5rxCE0DorlAcDHqEu2zM=
Subject key identifier:   56:B2:F0:60:BB:10:C9:2C:4E:57:F5:2B:4E:D4:8D:85:2C:16:18:09
Certificate issuer:       /CN=E7F1F0A299597CC5656B837D3DFD4B63C8649C47
Certificate serial:       6B18424626075FE0EC7E5D5CF91E1D7CF5297BBA
Authority key identifier: E7:F1:F0:A2:99:59:7C:C5:65:6B:83:7D:3D:FD:4B:63:C8:64:9C:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/323830343a6231303a3a2f33322d3332203d3e203532393336.roa
Signing time:             Tue 30 Dec 2025 13:16:35 +0000
ROA not before:           Tue 30 Dec 2025 13:11:35 +0000
ROA not after:            Tue 29 Dec 2026 13:16:35 +0000
asID:                     52936
IP address blocks:        2804:b10::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.crl
                          rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 15:22:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:18:42:46:26:07:5f:e0:ec:7e:5d:5c:f9:1e:1d:7c:f5:29:7b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7F1F0A299597CC5656B837D3DFD4B63C8649C47
        Validity
            Not Before: Dec 30 13:11:35 2025 GMT
            Not After : Dec 29 13:16:35 2026 GMT
        Subject: CN=56B2F060BB10C92C4E57F52B4ED48D852C161809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c7:e1:50:0d:47:be:78:46:3d:ab:68:e3:ad:
                    48:ea:1d:e0:97:4f:c5:eb:31:95:56:00:cc:c0:21:
                    38:f7:89:73:c0:ea:23:74:03:1a:70:92:4e:3e:d9:
                    b9:b0:39:d4:c2:b4:86:b1:ef:e4:0d:fc:87:e2:8c:
                    70:e3:92:eb:35:95:7f:ad:07:0d:65:be:f4:66:af:
                    2b:a3:83:d2:d0:89:59:d0:88:82:09:b5:b6:78:c1:
                    52:f1:a7:05:f7:d2:8f:c9:86:08:06:ff:d0:97:02:
                    0d:df:e0:e1:3e:cf:ef:b3:5f:d5:c9:5f:74:b0:c6:
                    5d:25:ae:bb:e8:d0:26:57:74:43:ce:9e:da:da:6f:
                    fb:ef:56:dc:09:19:d6:ab:72:7a:84:e2:a0:38:d8:
                    6f:8a:40:f0:8a:fd:c6:cc:af:f3:55:f1:45:85:cd:
                    fd:33:1d:c1:60:15:95:ad:91:4a:29:0f:1b:6e:42:
                    55:ec:94:d7:bd:61:86:ad:ba:4a:ee:10:b1:69:2f:
                    ff:31:b5:bf:ea:bb:76:2d:de:d5:12:c4:00:be:27:
                    08:2f:c3:7b:36:16:dc:52:68:ca:42:5d:a9:3b:46:
                    0e:15:99:67:8f:c7:68:7d:a9:4f:2f:da:9e:2f:66:
                    2a:af:88:0f:ba:ef:66:c1:bb:43:0d:72:8c:63:74:
                    a2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B2:F0:60:BB:10:C9:2C:4E:57:F5:2B:4E:D4:8D:85:2C:16:18:09
            X509v3 Authority Key Identifier:
                keyid:E7:F1:F0:A2:99:59:7C:C5:65:6B:83:7D:3D:FD:4B:63:C8:64:9C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/323830343a6231303a3a2f33322d3332203d3e203532393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b10::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:ad:88:c0:5d:7f:e9:27:7a:b2:24:e9:9c:05:0d:0d:80:e3:
         c1:f0:76:05:91:e8:db:24:aa:6a:9a:c4:42:0b:d3:e2:c2:0f:
         3a:b3:ed:90:0e:32:b7:b0:34:a7:3a:d8:a2:c9:4f:b9:24:77:
         e2:38:b2:94:64:2c:ab:3e:e0:22:95:5c:1b:05:5a:33:15:84:
         f1:42:20:a2:9d:9a:fc:5b:3e:cb:f6:ef:71:c5:ce:26:57:03:
         e8:d3:46:66:b9:b0:ea:25:a9:bd:1e:de:de:e9:40:ab:a4:99:
         59:d4:21:eb:2e:cd:36:9b:38:89:41:fa:68:f9:9f:c7:4c:8e:
         59:5a:c3:f3:2c:a4:d2:c0:6e:aa:ee:40:34:8a:10:0b:9a:f9:
         c4:a7:07:99:ef:c3:9b:98:78:dc:19:73:58:64:d6:11:ba:69:
         83:48:87:f2:ab:23:12:3b:25:65:54:9f:fc:be:e2:e6:c5:ad:
         7d:34:70:73:1e:72:f3:e3:f8:ef:f3:b0:15:84:6b:6b:e3:7f:
         8d:59:52:fa:ef:35:42:a7:76:47:7f:42:ce:0c:07:72:ab:ea:
         9f:18:00:32:bf:ac:b8:a5:ad:80:1b:56:88:a0:35:af:63:93:
         33:17:b5:f8:f7:1e:61:2f:cc:df:30:8a:0c:2a:bf:61:a4:e1:
         bc:c8:91:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:50:35 2026 by rpki-client