Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/323830343a373135343a3a2f33322d3332203d3e20323730373832.roa
File:                     323830343a373135343a3a2f33322d3332203d3e20323730373832.roa (raw, json)
Hash identifier:          BD2rOEugUWdzFeUB2uNBa+l3UI3t5MXp/wjHdn0EI0k=
Subject key identifier:   4B:AC:74:61:6F:78:FA:C2:72:B0:29:C2:BA:F4:E4:74:05:8B:DD:8D
Certificate issuer:       /CN=B1E2CC63C140B29130D3460184B7314D3BC134C9
Certificate serial:       440827E40089160F6AC9F1D975062516BA7F8241
Authority key identifier: B1:E2:CC:63:C1:40:B2:91:30:D3:46:01:84:B7:31:4D:3B:C1:34:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1E2CC63C140B29130D3460184B7314D3BC134C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/323830343a373135343a3a2f33322d3332203d3e20323730373832.roa
Signing time:             Tue 28 Jul 2026 18:56:54 +0000
ROA not before:           Tue 28 Jul 2026 18:51:54 +0000
ROA not after:            Tue 27 Jul 2027 18:56:54 +0000
asID:                     270782
IP address blocks:        2804:7154::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/B1E2CC63C140B29130D3460184B7314D3BC134C9.crl
                          rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/B1E2CC63C140B29130D3460184B7314D3BC134C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1E2CC63C140B29130D3460184B7314D3BC134C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 11:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:08:27:e4:00:89:16:0f:6a:c9:f1:d9:75:06:25:16:ba:7f:82:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1E2CC63C140B29130D3460184B7314D3BC134C9
        Validity
            Not Before: Jul 28 18:51:54 2026 GMT
            Not After : Jul 27 18:56:54 2027 GMT
        Subject: CN=4BAC74616F78FAC272B029C2BAF4E474058BDD8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:61:c7:a1:a8:59:1d:f5:81:59:e7:1e:03:ef:
                    5e:e9:78:54:1b:52:de:da:f3:3d:20:f4:8f:94:1d:
                    2b:7e:ce:5f:ae:8c:19:d7:e3:94:16:cd:08:6a:fb:
                    15:2f:0b:c4:11:24:2e:8d:43:f4:84:d3:60:b0:e5:
                    e2:7c:58:67:2e:fe:82:4f:83:e2:c9:2e:23:90:c9:
                    a3:df:92:66:b8:c9:fc:9f:33:b7:fe:83:2e:9e:16:
                    9d:b3:48:4a:54:1b:13:ed:b1:57:f1:b7:5c:3b:eb:
                    f0:36:58:ce:31:a3:ed:4a:0b:f4:78:99:c7:8f:34:
                    cc:48:3b:3b:98:ae:3b:b6:72:b5:3f:4a:84:11:65:
                    95:ab:64:08:cc:7d:4d:80:05:9e:b4:78:5e:dd:a9:
                    51:ea:df:19:81:40:80:aa:ed:9f:16:36:32:62:49:
                    16:4e:91:df:67:29:6d:7c:8d:6f:4d:68:b1:da:9c:
                    fd:9e:c4:3d:a0:73:22:53:e5:13:c0:97:55:1d:b3:
                    d3:58:5b:63:a8:3e:d2:e9:12:80:11:2e:77:78:50:
                    d6:41:18:28:be:2f:ce:ad:af:a9:d3:7c:ec:3e:0d:
                    5e:e2:74:57:cc:47:9c:cc:d4:f2:3a:a4:e8:8f:a4:
                    0b:9b:1d:3b:b2:13:c7:af:ae:87:df:6c:b4:a1:eb:
                    e6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AC:74:61:6F:78:FA:C2:72:B0:29:C2:BA:F4:E4:74:05:8B:DD:8D
            X509v3 Authority Key Identifier:
                keyid:B1:E2:CC:63:C1:40:B2:91:30:D3:46:01:84:B7:31:4D:3B:C1:34:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/B1E2CC63C140B29130D3460184B7314D3BC134C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1E2CC63C140B29130D3460184B7314D3BC134C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/323830343a373135343a3a2f33322d3332203d3e20323730373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7154::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:29:a1:2b:88:43:1d:45:9c:ea:dc:2c:8e:2a:3e:e0:ed:1e:
         4e:67:d1:96:35:4f:b4:09:31:77:b1:64:66:fc:a9:bb:56:d8:
         7c:b6:5d:b8:ff:5a:a6:6c:79:4f:60:29:84:66:26:93:fa:6d:
         0c:fb:2a:df:5c:48:be:35:22:16:29:76:50:ca:2f:f8:8f:63:
         c0:2a:65:af:c6:39:39:47:7d:9e:18:9e:f0:76:40:83:2c:da:
         97:d5:d8:09:87:82:0d:0f:ac:34:1b:20:cb:b9:5a:c1:1f:50:
         6b:83:14:99:25:95:e8:da:69:c5:96:09:7f:69:8c:10:c5:8f:
         08:f0:c6:73:de:eb:f9:3f:f8:a3:bc:9a:41:5e:52:70:b1:9c:
         96:c3:a2:9a:70:d5:7a:6b:d0:5d:fe:e0:6a:30:62:d6:82:7e:
         e4:f8:fa:e9:90:94:d2:7f:70:bd:69:46:82:93:41:24:0c:a6:
         10:1f:ad:ed:8d:3c:03:37:2f:35:33:22:6f:d1:68:ba:1a:f5:
         32:d2:9c:15:b8:97:ec:7b:ae:84:42:47:3e:29:31:7c:73:ae:
         ef:49:d6:9e:f3:e9:d0:90:ac:c9:dc:82:b4:82:43:ff:4c:48:
         e6:ca:cc:77:62:50:aa:7f:1e:63:ac:a2:93:9d:e1:b1:67:07:
         22:4f:67:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 02:08:08 2026 by rpki-client