Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/323830343a343135303a383030303a3a2f33342d3334203d3e20323637343236.roa
File:                     323830343a343135303a383030303a3a2f33342d3334203d3e20323637343236.roa (raw, json)
Hash identifier:          lYTiyf9MkYOI0lQRYE3FtamHxqeYAUsTOtF5hKQM8QM=
Subject key identifier:   EE:3C:7E:07:37:6F:90:90:8D:CC:0A:2B:16:76:F9:68:4A:71:A2:C0
Certificate issuer:       /CN=D7B66328E77D26A85BC24A6209552AFF3FD4B6CC
Certificate serial:       4C4A029EA71F04FFBF2E71361A0F17379A078317
Authority key identifier: D7:B6:63:28:E7:7D:26:A8:5B:C2:4A:62:09:55:2A:FF:3F:D4:B6:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B66328E77D26A85BC24A6209552AFF3FD4B6CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/323830343a343135303a383030303a3a2f33342d3334203d3e20323637343236.roa
Signing time:             Sat 21 Feb 2026 13:40:57 +0000
ROA not before:           Sat 21 Feb 2026 13:35:57 +0000
ROA not after:            Sat 20 Feb 2027 13:40:57 +0000
asID:                     267426
IP address blocks:        2804:4150:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/D7B66328E77D26A85BC24A6209552AFF3FD4B6CC.crl
                          rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/D7B66328E77D26A85BC24A6209552AFF3FD4B6CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B66328E77D26A85BC24A6209552AFF3FD4B6CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 15:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:4a:02:9e:a7:1f:04:ff:bf:2e:71:36:1a:0f:17:37:9a:07:83:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7B66328E77D26A85BC24A6209552AFF3FD4B6CC
        Validity
            Not Before: Feb 21 13:35:57 2026 GMT
            Not After : Feb 20 13:40:57 2027 GMT
        Subject: CN=EE3C7E07376F90908DCC0A2B1676F9684A71A2C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7e:bc:42:67:9c:2b:37:46:54:3d:e6:bf:6d:
                    f5:bc:df:b3:69:51:10:51:12:b9:29:12:ae:1b:12:
                    6e:1f:5a:fd:01:98:61:6b:cd:6c:5c:30:67:94:c0:
                    ca:37:c6:0d:df:b3:6a:f6:e6:a9:9a:dc:63:75:48:
                    af:43:5b:e0:4b:7a:f5:51:31:3f:17:e7:35:86:04:
                    e2:0e:8c:e4:84:3c:5c:74:6c:8f:59:ef:65:9f:da:
                    b1:41:e8:bd:59:6f:af:89:8c:d5:7b:b0:15:2a:50:
                    e0:fb:79:2f:09:a4:12:b7:da:f1:db:c4:34:fb:7b:
                    f9:6f:f4:63:e8:89:64:b4:b8:33:63:ab:ee:f5:21:
                    3a:c7:97:40:8a:ab:ed:15:59:70:d6:5b:4f:5c:75:
                    8a:e1:1c:0e:32:bc:15:52:bf:8d:ee:cc:0e:e6:f8:
                    59:cb:3a:b5:fa:79:33:e8:c0:9c:60:30:19:70:75:
                    a4:f2:8e:21:ce:b3:c1:93:66:6a:a3:13:61:a0:a4:
                    c2:35:19:ca:27:15:60:66:1a:96:d4:6d:cc:86:23:
                    06:60:eb:af:2f:5a:f2:7a:30:2d:9e:84:32:38:bd:
                    a3:e2:3e:98:d6:33:e7:fc:14:cb:64:91:ef:a6:09:
                    27:26:87:4e:39:9e:29:cb:b1:ea:36:9b:b6:a7:a5:
                    9a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3C:7E:07:37:6F:90:90:8D:CC:0A:2B:16:76:F9:68:4A:71:A2:C0
            X509v3 Authority Key Identifier:
                keyid:D7:B6:63:28:E7:7D:26:A8:5B:C2:4A:62:09:55:2A:FF:3F:D4:B6:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/D7B66328E77D26A85BC24A6209552AFF3FD4B6CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B66328E77D26A85BC24A6209552AFF3FD4B6CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/323830343a343135303a383030303a3a2f33342d3334203d3e20323637343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4150:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         14:c9:59:30:bb:31:17:5d:dc:a4:b9:80:39:35:d7:53:37:96:
         c7:7a:32:e5:e3:64:5d:b4:66:6b:a4:8f:f2:09:a0:30:11:eb:
         3f:92:fe:98:fe:c2:1e:fd:dd:c4:a3:ac:75:94:7c:56:5e:46:
         69:27:1d:9d:91:f8:1d:09:a3:6b:d9:c3:c3:ab:7f:8d:c6:df:
         37:89:16:9d:a5:ae:6d:e3:4d:d9:87:68:8a:54:70:08:3c:a2:
         79:87:08:04:0c:b7:77:96:a0:8a:a8:4a:6c:17:20:6a:c8:2a:
         b2:30:4a:98:e1:b8:5f:14:c7:84:93:8a:56:0e:f8:4d:e2:e7:
         5e:f1:ed:11:cb:9e:5d:ef:f5:a6:68:9c:a4:c6:ae:da:78:c2:
         b7:ca:5e:c6:54:d1:58:a9:7f:66:80:77:92:7a:e4:81:ba:7b:
         e2:9d:1f:01:e0:31:b0:01:06:49:2f:6c:f5:b3:a2:8e:7f:e6:
         3c:05:0c:a7:5e:de:a7:18:ca:8c:82:e3:ed:5c:e7:21:b0:24:
         77:37:bb:43:71:df:86:66:51:5e:65:82:14:6d:23:4b:af:a7:
         1a:68:22:f8:d5:8a:e1:02:88:24:69:02:a5:fc:1b:9e:78:d2:
         50:f1:da:ea:00:c3:cb:67:a7:fb:3e:82:ce:7d:8b:81:6f:fb:
         22:14:ac:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:19:01 2026 by rpki-client