Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/323830343a343135303a343030303a3a2f33342d3334203d3e20323637343236.roa
File:                     323830343a343135303a343030303a3a2f33342d3334203d3e20323637343236.roa (raw, json)
Hash identifier:          tkU3esMmb6/Cl9FY+HbH54HKz6RPz0CjkjEYdywifxM=
Subject key identifier:   D3:20:DF:A8:E4:F4:11:0D:67:4D:54:98:80:1D:E9:CC:FC:C6:33:FC
Certificate issuer:       /CN=D7B66328E77D26A85BC24A6209552AFF3FD4B6CC
Certificate serial:       50F7CAFCDFD06F5D3332AB5DC110BA33CE939CC5
Authority key identifier: D7:B6:63:28:E7:7D:26:A8:5B:C2:4A:62:09:55:2A:FF:3F:D4:B6:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B66328E77D26A85BC24A6209552AFF3FD4B6CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/323830343a343135303a343030303a3a2f33342d3334203d3e20323637343236.roa
Signing time:             Sat 21 Feb 2026 13:40:57 +0000
ROA not before:           Sat 21 Feb 2026 13:35:57 +0000
ROA not after:            Sat 20 Feb 2027 13:40:57 +0000
asID:                     267426
IP address blocks:        2804:4150:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/D7B66328E77D26A85BC24A6209552AFF3FD4B6CC.crl
                          rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/D7B66328E77D26A85BC24A6209552AFF3FD4B6CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B66328E77D26A85BC24A6209552AFF3FD4B6CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 15:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f7:ca:fc:df:d0:6f:5d:33:32:ab:5d:c1:10:ba:33:ce:93:9c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7B66328E77D26A85BC24A6209552AFF3FD4B6CC
        Validity
            Not Before: Feb 21 13:35:57 2026 GMT
            Not After : Feb 20 13:40:57 2027 GMT
        Subject: CN=D320DFA8E4F4110D674D5498801DE9CCFCC633FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6c:8b:10:a4:74:a1:5c:e7:d1:d9:77:c9:32:
                    92:36:b8:b8:89:ed:69:80:02:6a:77:8f:0e:a5:12:
                    03:f2:42:30:05:78:88:ac:1d:2c:3a:e1:42:73:16:
                    28:eb:5d:69:64:18:07:b2:86:8e:2b:44:51:7f:75:
                    bd:17:54:56:86:70:7d:94:98:05:5d:ca:20:5e:57:
                    81:5c:a5:1f:17:cf:a7:7c:f6:45:c0:b2:92:0a:27:
                    b3:37:c6:6a:35:23:86:55:d8:66:44:c6:65:0f:a8:
                    dc:a6:7c:98:ef:fc:7f:30:dd:f9:c2:5c:47:05:0c:
                    08:ea:e5:d5:93:47:92:fb:14:ca:cf:ab:8e:e7:9d:
                    86:2d:1e:02:3f:0f:18:5a:f9:49:9a:6c:fe:79:3b:
                    eb:b8:0b:43:fa:2b:5f:4e:9e:2f:6a:16:33:fb:38:
                    71:8c:b0:0a:20:d1:7b:fc:11:56:ee:95:9b:a6:4e:
                    4e:c8:2f:78:5e:ec:ba:39:1c:d0:33:3a:51:b1:0a:
                    09:8d:ea:01:86:7b:9c:5b:cb:8f:00:2f:d9:53:4f:
                    e0:e3:14:07:0a:a0:fb:1c:dd:f5:d2:6c:9e:ee:d4:
                    95:50:f1:64:7e:cf:48:8f:10:b6:54:77:ee:23:b9:
                    fd:38:b2:3a:7a:7c:62:8a:23:6d:d7:3a:26:6f:96:
                    d9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:20:DF:A8:E4:F4:11:0D:67:4D:54:98:80:1D:E9:CC:FC:C6:33:FC
            X509v3 Authority Key Identifier:
                keyid:D7:B6:63:28:E7:7D:26:A8:5B:C2:4A:62:09:55:2A:FF:3F:D4:B6:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/D7B66328E77D26A85BC24A6209552AFF3FD4B6CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B66328E77D26A85BC24A6209552AFF3FD4B6CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/323830343a343135303a343030303a3a2f33342d3334203d3e20323637343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4150:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2a:f4:f8:d1:c9:1a:08:63:f1:e7:74:3f:41:f4:f3:a6:1e:35:
         e3:ab:8f:87:22:5f:d7:52:4b:1a:23:9e:9c:99:90:ac:4b:c8:
         5e:bb:cb:fd:bb:b0:8a:20:8d:a2:c5:71:b6:2e:10:8f:93:68:
         35:7c:98:90:5b:c5:11:3d:bd:e4:13:b5:e6:63:4f:e7:92:01:
         23:88:3b:fa:ce:b3:6a:01:58:f1:82:6d:a2:eb:dc:ea:46:2f:
         d6:cf:0a:ae:14:6a:d8:2a:ee:46:a7:bb:61:d7:21:23:09:d5:
         87:1d:b3:05:12:4e:65:84:23:70:f0:4f:10:b8:a0:f7:ae:ce:
         c5:84:66:e9:76:77:48:e6:4c:5e:46:90:06:23:2c:93:5b:e5:
         59:bb:43:cd:5c:06:5b:39:22:b5:bd:57:6e:d9:b7:1b:2f:96:
         f3:ec:8c:83:b3:db:ad:2b:d1:e8:bb:cb:f5:b7:5a:6d:17:6f:
         5c:d7:8e:be:76:3a:f3:54:e5:2b:53:49:37:8f:24:37:8a:2c:
         f3:4d:34:4b:5e:34:43:66:20:bb:db:f3:db:24:cb:45:45:a5:
         98:17:2b:a8:67:27:27:7f:49:0a:0f:44:c7:f9:a6:78:83:45:
         ef:c6:f2:c6:9e:77:75:7c:59:ec:4b:80:75:a7:11:bd:f8:47:
         77:74:f3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:19:01 2026 by rpki-client