Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/323830343a3562383a386330303a3a2f34312d3431203d3e20323632353335.roa
File:                     323830343a3562383a386330303a3a2f34312d3431203d3e20323632353335.roa (raw, json)
Hash identifier:          mBrf+IEHxMtdpSHlAJK6IYybWztJtPH0rKGgH/5S7Kg=
Subject key identifier:   86:21:3C:7E:B5:58:1F:85:28:C9:D8:1E:D7:D3:2D:CE:DA:19:2B:59
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       32D60E0895565A5CFFCDB8084942E13B2B9F6EEB
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/323830343a3562383a386330303a3a2f34312d3431203d3e20323632353335.roa
Signing time:             Fri 17 Apr 2026 10:48:28 +0000
ROA not before:           Fri 17 Apr 2026 10:43:28 +0000
ROA not after:            Fri 16 Apr 2027 10:48:28 +0000
asID:                     262535
IP address blocks:        2804:5b8:8c00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 12:28:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d6:0e:08:95:56:5a:5c:ff:cd:b8:08:49:42:e1:3b:2b:9f:6e:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: Apr 17 10:43:28 2026 GMT
            Not After : Apr 16 10:48:28 2027 GMT
        Subject: CN=86213C7EB5581F8528C9D81ED7D32DCEDA192B59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:af:14:e5:a4:e8:ba:bd:be:17:91:e8:d6:9d:
                    25:70:d6:90:8b:55:6a:e1:d2:d9:56:7f:2d:2d:fc:
                    55:d6:5b:3e:0f:bf:20:69:44:4d:38:bc:4f:d4:1e:
                    cb:18:c6:77:5c:19:c6:d9:c2:a3:db:58:15:d6:83:
                    1c:c8:4d:a6:7e:c0:93:45:5b:42:25:bb:76:cf:2b:
                    b6:f2:f3:43:27:4d:ac:75:e3:6f:7d:98:9d:ad:37:
                    16:21:25:5c:1b:a2:50:a3:c1:2b:ae:9c:f9:3c:02:
                    1e:46:dc:94:23:fa:72:39:76:e7:e5:3e:cf:3a:2d:
                    07:03:07:6b:bf:c4:8e:5e:0a:a8:40:12:8e:b4:fb:
                    dc:38:df:c9:2b:e9:f8:cc:94:ac:5c:d9:9c:d8:ab:
                    30:71:73:64:96:15:d7:ca:5e:d6:2e:cb:cd:d5:b2:
                    32:a2:d6:ea:a8:f3:69:ea:34:25:36:72:4e:2e:19:
                    73:b4:ca:49:ec:64:62:57:15:a1:49:4d:68:f5:a9:
                    96:ee:69:16:7d:3e:cb:a7:22:89:f7:29:b2:eb:d6:
                    94:21:3c:1a:d4:67:9b:87:50:de:23:9c:8f:d9:c4:
                    77:fa:c4:5b:5f:51:19:a0:bf:29:27:8c:c6:bf:b4:
                    22:57:fb:8b:b6:e3:10:f7:0f:5d:d0:ac:76:2c:da:
                    88:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:21:3C:7E:B5:58:1F:85:28:C9:D8:1E:D7:D3:2D:CE:DA:19:2B:59
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/323830343a3562383a386330303a3a2f34312d3431203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b8:8c00::/41

    Signature Algorithm: sha256WithRSAEncryption
         83:14:49:20:6c:39:3d:a4:62:86:04:b8:56:81:2c:b6:47:44:
         af:37:22:a9:3c:36:fe:84:77:e8:e3:cc:09:86:19:9e:32:ae:
         23:d6:95:91:c5:3b:3f:62:84:c2:ed:70:33:47:35:bf:6b:2c:
         b1:e7:a5:b3:d1:4e:c3:56:b3:fa:fa:a0:23:0d:74:10:3d:79:
         a3:ce:a1:c2:85:29:0d:36:50:ac:b6:47:c6:81:d8:41:8e:60:
         4c:ae:fb:9a:75:22:e0:b3:13:42:bb:4a:ca:f9:90:4b:d9:1a:
         9b:c5:f9:d7:83:12:95:fb:b1:60:46:eb:8a:e4:37:58:8a:e0:
         dd:b2:dc:63:f7:0d:b4:56:8d:e0:04:36:46:80:32:01:f8:e1:
         14:49:a4:7b:a6:cb:77:19:f0:6a:16:70:0f:03:15:13:ca:98:
         3f:46:6c:32:55:c9:dd:7e:db:6f:f7:cf:b7:33:6e:81:2c:27:
         eb:3b:22:24:a0:9a:6f:d0:5d:2c:94:e7:ba:b7:2f:d3:7b:0e:
         e6:37:80:cd:d0:70:19:2c:d6:4a:76:a8:80:49:8d:30:df:12:
         d0:a0:af:16:42:f8:ec:0c:be:7f:dc:4b:3f:58:67:fe:6b:5b:
         63:09:d4:0e:f2:23:5f:b4:cf:b5:ae:69:0d:6f:1a:06:dc:b9:
         24:0b:10:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:19:12 2026 by rpki-client