Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/323830343a386561303a383030323a3a2f34372d3437203d3e20323733343338.roa
File:                     323830343a386561303a383030323a3a2f34372d3437203d3e20323733343338.roa (raw, json)
Hash identifier:          sUzLErIQTLf73Oxu9TsiLZxifhRowuBnd5dmM6RZ+q8=
Subject key identifier:   AB:C0:23:38:47:B9:DD:1F:C8:69:1A:64:7D:B6:32:90:01:80:F3:09
Certificate issuer:       /CN=78EEB73CE335838F80FE0D32902455D8BEBE7641
Certificate serial:       290FFAD43670F17809BDA6F709FCC6E5C49F1CD5
Authority key identifier: 78:EE:B7:3C:E3:35:83:8F:80:FE:0D:32:90:24:55:D8:BE:BE:76:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/323830343a386561303a383030323a3a2f34372d3437203d3e20323733343338.roa
Signing time:             Wed 19 Aug 2026 21:06:22 +0000
ROA not before:           Wed 19 Aug 2026 21:01:22 +0000
ROA not after:            Wed 18 Aug 2027 21:06:22 +0000
asID:                     273438
IP address blocks:        2804:8ea0:8002::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.crl
                          rsync://rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 12:41:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:0f:fa:d4:36:70:f1:78:09:bd:a6:f7:09:fc:c6:e5:c4:9f:1c:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78EEB73CE335838F80FE0D32902455D8BEBE7641
        Validity
            Not Before: Aug 19 21:01:22 2026 GMT
            Not After : Aug 18 21:06:22 2027 GMT
        Subject: CN=ABC0233847B9DD1FC8691A647DB632900180F309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b4:6b:eb:64:a0:94:ab:db:4f:d0:97:71:b0:
                    1d:e8:a8:c4:7a:7b:94:49:ff:1c:ac:f9:b0:2a:9b:
                    0a:55:3b:c7:12:03:7e:00:d9:49:20:e5:e9:51:fd:
                    dc:e6:bb:65:19:d0:08:a5:7c:ff:21:0c:ab:c6:25:
                    ee:3c:12:c7:a7:c1:c4:a4:7a:0f:e1:92:17:b9:c0:
                    dc:1b:40:6c:62:66:9c:c7:5d:96:54:90:6a:cd:37:
                    99:f6:eb:02:ab:84:49:69:c7:b2:53:ce:f0:40:d0:
                    f5:ac:59:5f:e0:c5:f7:c0:d1:fa:64:e3:d1:6e:db:
                    2b:6f:08:5c:99:98:4f:c5:ef:d0:5a:c2:61:37:df:
                    da:da:bb:35:28:3d:ee:af:e6:5a:4d:3d:73:82:97:
                    71:b1:df:83:31:12:12:19:c3:f2:55:21:7e:56:e2:
                    99:1e:e8:08:50:75:50:b9:96:00:6d:68:f8:5f:70:
                    2d:9f:38:09:68:97:c1:94:f2:6f:8d:86:21:bd:2a:
                    c5:ca:37:ab:53:d6:56:fc:66:56:83:a7:d8:51:af:
                    6d:13:9d:11:d9:97:9a:9e:a9:b9:a7:b4:1a:41:2f:
                    4b:19:44:9b:0c:8e:9d:67:ed:1e:c7:5a:59:9c:32:
                    f1:ac:52:9f:95:f3:0e:a2:96:4c:47:d6:78:e4:a4:
                    4d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C0:23:38:47:B9:DD:1F:C8:69:1A:64:7D:B6:32:90:01:80:F3:09
            X509v3 Authority Key Identifier:
                keyid:78:EE:B7:3C:E3:35:83:8F:80:FE:0D:32:90:24:55:D8:BE:BE:76:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/323830343a386561303a383030323a3a2f34372d3437203d3e20323733343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ea0:8002::/47

    Signature Algorithm: sha256WithRSAEncryption
         8b:96:ed:29:89:3c:d9:a8:37:0e:5a:83:29:be:75:e5:0c:a4:
         fe:67:73:8d:f6:37:bf:8f:a9:28:66:3d:15:9d:17:19:ce:3e:
         33:f6:7f:e5:b9:15:d9:14:f0:98:21:cb:7c:33:7e:e3:84:e7:
         d9:c6:81:26:7d:4a:2d:bf:55:4b:6c:5f:84:d0:43:b7:c2:45:
         13:bc:20:88:06:3d:09:fd:bb:ac:3c:9c:ae:11:35:99:6f:3b:
         74:c5:2b:d7:b7:52:0c:82:f1:7e:c4:95:35:55:2d:31:d8:0c:
         cf:b9:63:1b:2d:d4:2b:72:1d:6f:27:57:19:74:3c:46:10:81:
         c6:b6:aa:6c:6f:4a:05:90:35:28:e2:68:bf:41:44:b1:cb:5a:
         4b:c5:74:41:61:80:d5:58:cc:95:d3:51:ff:de:11:64:20:10:
         89:76:bd:15:a2:45:07:a1:47:97:c4:c9:a3:2d:dc:73:b5:09:
         54:e5:27:30:e4:5f:bc:17:a7:8a:52:cf:34:02:d7:db:fe:bd:
         08:5a:e7:42:fd:66:6a:d9:17:98:4c:67:26:73:24:59:bd:ef:
         9e:e9:89:e0:82:8c:82:39:74:0d:81:b5:d9:4e:c4:db:f7:1c:
         e7:00:5b:ae:cc:ef:e6:05:4a:64:7a:6c:40:31:86:92:b0:86:
         a6:89:ec:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 20:54:52 2026 by rpki-client