Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/323830343a353734343a3a2f33342d3334203d3e20323638303535.roa
File:                     323830343a353734343a3a2f33342d3334203d3e20323638303535.roa (raw, json)
Hash identifier:          zGC6hRvOykj47aWTdwBQzefqNeVLfTBdUwO6E8xfdc8=
Subject key identifier:   C5:C3:6A:69:85:46:6C:16:4E:43:76:89:3C:1C:3E:0E:2B:C0:EA:C1
Certificate issuer:       /CN=6254A025F47543DDA4959890FB3C567C5E360743
Certificate serial:       4C87DC05DA498EA2CA2C86D48AD20A57972F752F
Authority key identifier: 62:54:A0:25:F4:75:43:DD:A4:95:98:90:FB:3C:56:7C:5E:36:07:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6254A025F47543DDA4959890FB3C567C5E360743.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/323830343a353734343a3a2f33342d3334203d3e20323638303535.roa
Signing time:             Mon 30 Mar 2026 14:57:58 +0000
ROA not before:           Mon 30 Mar 2026 14:52:58 +0000
ROA not after:            Mon 29 Mar 2027 14:57:58 +0000
asID:                     268055
IP address blocks:        2804:5744::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/6254A025F47543DDA4959890FB3C567C5E360743.crl
                          rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/6254A025F47543DDA4959890FB3C567C5E360743.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6254A025F47543DDA4959890FB3C567C5E360743.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 05:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:87:dc:05:da:49:8e:a2:ca:2c:86:d4:8a:d2:0a:57:97:2f:75:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6254A025F47543DDA4959890FB3C567C5E360743
        Validity
            Not Before: Mar 30 14:52:58 2026 GMT
            Not After : Mar 29 14:57:58 2027 GMT
        Subject: CN=C5C36A6985466C164E4376893C1C3E0E2BC0EAC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:21:03:58:3b:22:eb:32:33:0a:9b:93:15:99:
                    56:a3:03:5c:00:44:b2:c7:8b:d7:66:d1:d5:43:bb:
                    58:38:18:b0:8b:d8:81:a3:52:eb:20:0d:26:a5:65:
                    71:f8:4d:3d:2f:93:f4:1e:34:fd:4f:e7:be:0e:99:
                    30:8d:a2:46:5b:ff:9c:7a:67:6d:3c:3f:2c:0e:89:
                    f9:fa:73:65:6f:74:89:cb:e5:a2:eb:d0:7e:c4:da:
                    f0:b8:f5:ce:76:46:24:a7:1f:87:60:25:68:2f:17:
                    a8:f9:e9:9e:00:8b:77:77:0f:4f:05:0b:cc:4d:23:
                    92:60:76:70:39:2e:f1:40:91:50:74:1d:a6:7d:61:
                    f6:7a:7d:71:ca:a7:da:54:19:73:63:95:97:93:df:
                    51:57:12:6a:14:7c:04:8f:a4:9d:9f:43:71:9f:d1:
                    a5:a4:c3:b7:9c:4d:dd:08:c5:d9:03:51:8d:03:fd:
                    5c:8f:53:52:c6:fc:2a:d7:22:ca:30:9d:65:77:ea:
                    d3:6c:aa:48:1e:3a:0c:89:3f:07:9b:2d:37:05:bf:
                    3b:6a:2a:cb:bd:bb:a0:ad:9c:8f:2d:26:0c:18:0d:
                    90:25:a8:b3:71:a1:f9:c9:e8:e0:7d:48:68:6d:cc:
                    27:88:6b:ab:8c:31:f0:16:73:8c:e1:fe:06:b5:da:
                    c1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C3:6A:69:85:46:6C:16:4E:43:76:89:3C:1C:3E:0E:2B:C0:EA:C1
            X509v3 Authority Key Identifier:
                keyid:62:54:A0:25:F4:75:43:DD:A4:95:98:90:FB:3C:56:7C:5E:36:07:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/6254A025F47543DDA4959890FB3C567C5E360743.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6254A025F47543DDA4959890FB3C567C5E360743.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/323830343a353734343a3a2f33342d3334203d3e20323638303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5744::/34

    Signature Algorithm: sha256WithRSAEncryption
         5b:0e:54:b3:a0:86:3d:cd:57:d0:6e:4f:d3:bc:d6:14:35:6a:
         5c:db:f2:0b:b7:47:8b:36:a3:b4:05:5e:89:01:65:b4:b5:bb:
         72:86:56:34:2f:fa:7d:7d:58:68:78:66:32:02:ec:5f:e2:b5:
         97:70:b9:a7:c5:81:2f:9c:34:76:87:45:38:dc:80:69:96:f8:
         62:92:15:ac:e7:2e:47:00:1c:4a:24:93:3e:66:d7:95:db:b3:
         a1:0e:8f:1f:5b:ee:5e:43:ea:5e:20:26:ee:fd:d0:93:ed:f9:
         df:90:d2:f6:33:2b:f2:57:49:ed:ad:12:7b:94:a6:ab:67:dc:
         46:d4:76:b7:b6:c4:b2:16:55:8f:34:28:c4:30:88:a6:71:89:
         43:20:d0:73:89:20:cf:61:77:5f:20:31:98:e7:9b:e0:ca:59:
         45:7e:39:e7:91:75:e9:49:32:75:2b:40:41:28:78:98:1f:73:
         92:36:c5:56:60:fc:e1:61:1e:74:cb:4b:83:a0:ce:41:9f:60:
         49:25:cc:5b:e6:d3:de:f3:5b:f1:20:b0:ba:3b:2b:c6:98:11:
         f0:ed:1a:ff:34:12:7f:ae:2d:88:5e:e4:cb:2b:d8:f6:31:57:
         c8:72:68:69:b1:50:55:9b:19:ab:2f:a2:1f:bd:b5:53:c4:d6:
         50:77:df:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 19:08:49 2026 by rpki-client