Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/323830343a376435633a383030303a3a2f33332d3333203d3e20323731353536.roa
File:                     323830343a376435633a383030303a3a2f33332d3333203d3e20323731353536.roa (raw, json)
Hash identifier:          /d8nwIAs68YIjJfxAx8MLDbDW4JOFVMflZGJMEz8Co4=
Subject key identifier:   80:07:80:93:0A:4A:53:CB:B2:9A:78:E9:8A:40:AF:9F:36:07:3D:C0
Certificate issuer:       /CN=790CDB25F92375A77BEE4926A0F919ECA374CD1D
Certificate serial:       6DDDC47503B22231E38BF052976F936AB97F6EBD
Authority key identifier: 79:0C:DB:25:F9:23:75:A7:7B:EE:49:26:A0:F9:19:EC:A3:74:CD:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/790CDB25F92375A77BEE4926A0F919ECA374CD1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/323830343a376435633a383030303a3a2f33332d3333203d3e20323731353536.roa
Signing time:             Tue 24 Feb 2026 23:10:49 +0000
ROA not before:           Tue 24 Feb 2026 23:05:49 +0000
ROA not after:            Tue 23 Feb 2027 23:10:49 +0000
asID:                     271556
IP address blocks:        2804:7d5c:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/790CDB25F92375A77BEE4926A0F919ECA374CD1D.crl
                          rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/790CDB25F92375A77BEE4926A0F919ECA374CD1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/790CDB25F92375A77BEE4926A0F919ECA374CD1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 15:53:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:dd:c4:75:03:b2:22:31:e3:8b:f0:52:97:6f:93:6a:b9:7f:6e:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790CDB25F92375A77BEE4926A0F919ECA374CD1D
        Validity
            Not Before: Feb 24 23:05:49 2026 GMT
            Not After : Feb 23 23:10:49 2027 GMT
        Subject: CN=800780930A4A53CBB29A78E98A40AF9F36073DC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:80:f7:ce:77:6f:54:a2:56:29:de:d6:52:5a:
                    96:74:14:19:9b:86:5a:5c:f5:b5:a3:2b:54:e8:57:
                    4b:fa:a8:7c:16:b3:57:0d:8c:14:9e:9b:78:2f:a9:
                    54:26:d9:31:fb:77:9f:6a:cb:8d:46:86:79:3b:9a:
                    64:0b:82:78:ce:ca:98:00:08:e4:df:31:66:73:56:
                    5e:b7:c3:10:80:88:8e:96:4a:40:64:cb:51:fb:53:
                    f6:f4:6e:33:88:70:d3:54:63:ed:65:0e:7c:68:c3:
                    02:29:0d:58:72:7c:83:55:ab:8d:29:3a:63:6f:a6:
                    ed:b6:cd:23:9b:43:ad:eb:64:ce:c2:c2:04:42:3d:
                    98:97:d6:5e:cc:b9:e0:f6:95:aa:e7:6e:a1:b9:fa:
                    a1:da:be:0c:41:83:a4:d0:e3:40:4a:dc:18:29:73:
                    b5:8b:85:41:7c:02:ec:2a:ed:e1:6b:12:96:10:ca:
                    92:92:a7:51:d0:1a:ad:71:da:30:a9:7a:08:f2:96:
                    69:b9:4d:1c:a5:13:83:83:a9:a0:59:55:6a:44:98:
                    6a:fe:e4:a0:5b:07:0a:43:e7:47:8d:5c:1d:c7:50:
                    35:ac:f9:b4:10:69:eb:ae:07:ad:0d:63:4a:8c:0c:
                    14:41:38:81:ed:92:ea:17:ea:d2:2e:ab:50:dd:72:
                    d7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:07:80:93:0A:4A:53:CB:B2:9A:78:E9:8A:40:AF:9F:36:07:3D:C0
            X509v3 Authority Key Identifier:
                keyid:79:0C:DB:25:F9:23:75:A7:7B:EE:49:26:A0:F9:19:EC:A3:74:CD:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/790CDB25F92375A77BEE4926A0F919ECA374CD1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/790CDB25F92375A77BEE4926A0F919ECA374CD1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/323830343a376435633a383030303a3a2f33332d3333203d3e20323731353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d5c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         49:ba:ac:cd:fb:a2:4d:56:ce:d8:e5:16:a3:57:29:f4:08:32:
         26:8a:9d:a5:1d:f6:e3:a7:fa:08:33:e9:ea:bc:fe:e7:ac:87:
         90:39:fc:f6:2f:a7:64:a5:d2:43:44:de:35:7d:8f:6b:f6:dc:
         db:bf:c4:6c:c2:29:a8:79:76:66:2f:62:44:f1:1e:cb:a8:95:
         f7:71:0a:f8:4d:2e:8f:b5:df:dd:1a:15:0d:be:c7:3a:af:15:
         7b:76:3c:62:93:73:7a:78:db:2b:1b:31:f8:e5:c3:ab:15:3c:
         59:83:9c:00:94:38:2b:ef:4e:9f:e9:05:ee:c2:06:c4:9c:01:
         08:05:85:d3:e4:63:41:21:b5:4d:a2:8a:e3:7e:0e:92:19:bb:
         b8:a1:bb:ad:7a:6a:da:3b:d6:3e:73:11:d4:59:b5:b1:99:fd:
         84:48:12:60:18:5b:c8:f3:09:47:c4:f1:f7:79:5d:cf:99:f1:
         20:9a:57:e1:05:ed:c2:6c:bd:f8:3d:d7:83:cf:af:8e:c4:20:
         7b:05:84:8a:d5:f2:cb:96:43:d3:11:e4:bf:3b:8b:b2:6a:a5:
         ab:f6:74:10:48:74:56:c3:ca:ca:51:12:a5:f6:cb:35:78:33:
         90:5d:36:04:3c:f1:f9:47:81:25:c7:6b:0c:83:95:c5:0a:c9:
         9d:9b:30:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:32:18 2026 by rpki-client