Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/323830343a373230303a3a2f33322d313238203d3e20323730383236.roa
File:                     323830343a373230303a3a2f33322d313238203d3e20323730383236.roa (raw, json)
Hash identifier:          DGeP6nuAXDgzQ1YNhqJlz/p3TqI97nFs0kBcPPa4Dsc=
Subject key identifier:   8B:C7:DB:51:71:BA:8E:3B:90:E9:83:AA:CE:12:94:EA:FC:1F:7E:DF
Certificate issuer:       /CN=615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E
Certificate serial:       25EBDEC32CE1B0A510ADBBE94C9B295383E9ECA1
Authority key identifier: 61:5B:BE:24:D3:8E:2F:3D:EF:05:DE:9B:7A:3F:DA:AF:CB:D3:B6:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/323830343a373230303a3a2f33322d313238203d3e20323730383236.roa
Signing time:             Fri 22 May 2026 21:46:29 +0000
ROA not before:           Fri 22 May 2026 21:41:29 +0000
ROA not after:            Fri 21 May 2027 21:46:29 +0000
asID:                     270826
IP address blocks:        2804:7200::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E.crl
                          rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 23:53:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:eb:de:c3:2c:e1:b0:a5:10:ad:bb:e9:4c:9b:29:53:83:e9:ec:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E
        Validity
            Not Before: May 22 21:41:29 2026 GMT
            Not After : May 21 21:46:29 2027 GMT
        Subject: CN=8BC7DB5171BA8E3B90E983AACE1294EAFC1F7EDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7c:d2:4a:3f:96:2d:7e:9b:30:c9:97:a7:f9:
                    1b:90:f3:3b:fb:b5:52:e1:f8:38:bc:4a:30:64:06:
                    6b:42:1f:da:ba:59:03:d2:42:ea:10:dd:9f:b0:3a:
                    f7:09:9e:1e:b4:60:6f:0a:30:a6:16:e2:b2:ff:a9:
                    fa:81:5b:c7:bf:7e:47:df:fb:db:00:1d:44:9e:d6:
                    e3:46:99:cb:5f:38:d4:ab:25:da:b3:51:dd:6b:de:
                    81:5d:39:35:45:27:4e:b6:35:a1:c7:3c:13:2e:a0:
                    20:3d:88:92:03:19:e7:22:db:5a:80:ae:30:a8:9f:
                    0f:48:62:ff:b7:14:9e:bd:6f:37:52:8f:e6:30:8f:
                    3a:fc:a4:d7:f0:3b:9f:5b:ef:e0:76:72:ed:9f:db:
                    60:0c:15:cd:f0:32:ed:f4:7c:a1:b0:aa:02:d8:d7:
                    ea:9e:d4:7b:37:2f:ed:43:bc:0c:7e:07:cb:42:e4:
                    7b:64:67:60:7c:ac:c5:ee:bf:0a:1b:18:af:85:c7:
                    3a:ed:c7:99:3f:21:36:ce:d3:20:33:9b:1c:c5:9a:
                    fe:90:86:f3:6a:3c:c2:c2:e7:0d:a0:f9:6e:48:5c:
                    c2:fa:64:dd:ac:70:3c:ab:8b:18:85:d1:5c:9a:ad:
                    70:48:f1:80:cf:18:48:d5:13:fd:ff:b8:29:d1:04:
                    5a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C7:DB:51:71:BA:8E:3B:90:E9:83:AA:CE:12:94:EA:FC:1F:7E:DF
            X509v3 Authority Key Identifier:
                keyid:61:5B:BE:24:D3:8E:2F:3D:EF:05:DE:9B:7A:3F:DA:AF:CB:D3:B6:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/323830343a373230303a3a2f33322d313238203d3e20323730383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7200::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:71:77:48:6a:e8:cf:2b:ec:75:75:4c:d6:63:e2:f4:0e:bd:
         65:ab:b2:fd:32:83:40:f2:7c:30:de:5f:46:fd:78:7b:b5:2e:
         53:04:17:13:3b:69:88:a7:3b:dc:fb:23:5c:21:1d:35:cf:12:
         0d:c2:7a:77:7a:56:2d:aa:e6:bf:eb:ef:aa:65:c3:e3:ee:31:
         9a:86:b8:91:bb:fd:f5:d6:41:3c:a8:0c:cd:59:b0:85:eb:15:
         de:19:1f:25:b5:a2:0b:e4:41:7a:18:ca:39:1e:31:d7:45:f0:
         d7:7e:94:71:5f:22:87:c5:1a:b8:23:5b:75:49:cc:d2:2e:b0:
         7c:1f:3c:d7:d9:3d:8b:4e:ef:21:6a:b2:96:5b:b0:79:a1:6d:
         07:5a:fa:fb:6c:0f:3d:d3:2d:c7:9b:c5:9c:89:57:cc:93:b8:
         ca:d6:0f:ac:75:c0:20:7c:8b:48:99:6d:f1:ba:a5:30:31:05:
         38:24:67:34:dc:5a:b6:bf:e2:40:ac:f2:96:92:cc:68:85:d5:
         ff:b7:8b:7d:76:22:f5:61:91:d1:8f:52:3d:93:ee:4b:f9:a6:
         06:4f:2f:72:4d:5b:47:67:d7:f7:3a:9d:0e:4e:2d:0a:aa:a8:
         63:08:ac:7d:6c:e4:be:89:1b:7e:1a:6d:09:6c:bc:77:b3:7f:
         36:5d:cd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:42:51 2026 by rpki-client