Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/323830343a3562383a666666663a3a2f34382d3438203d3e20323632353335.roa
File:                     323830343a3562383a666666663a3a2f34382d3438203d3e20323632353335.roa (raw, json)
Hash identifier:          sxPAJGvZtP8s7Fx8QE5Iiey+dslo3lsRLxx5n/LAk+Y=
Subject key identifier:   A3:76:C8:BA:B8:3E:37:8D:36:5C:09:61:30:70:51:03:8C:4C:81:C6
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       79918FC9AC718E0B239651F606B8FAB167B21A1A
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/323830343a3562383a666666663a3a2f34382d3438203d3e20323632353335.roa
Signing time:             Fri 17 Apr 2026 10:48:28 +0000
ROA not before:           Fri 17 Apr 2026 10:43:28 +0000
ROA not after:            Fri 16 Apr 2027 10:48:28 +0000
asID:                     262535
IP address blocks:        2804:5b8:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 12:28:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:91:8f:c9:ac:71:8e:0b:23:96:51:f6:06:b8:fa:b1:67:b2:1a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: Apr 17 10:43:28 2026 GMT
            Not After : Apr 16 10:48:28 2027 GMT
        Subject: CN=A376C8BAB83E378D365C0961307051038C4C81C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f4:a6:d5:eb:4a:b7:0f:77:08:d9:67:b2:7a:
                    88:64:80:c3:27:a5:45:ee:2a:49:92:61:9f:db:4d:
                    75:34:5d:d4:2e:4a:74:c6:3e:3a:ed:ca:06:26:70:
                    af:f3:0e:2f:97:80:94:28:ad:20:5b:88:23:84:ca:
                    c5:8b:4e:f7:0e:6d:8e:8d:aa:2a:db:e5:ef:2e:84:
                    07:7f:f0:e5:36:1c:c8:e8:b8:67:d4:a3:58:94:ec:
                    55:14:68:03:26:fe:a1:09:52:87:cd:60:ab:f4:ab:
                    9c:e8:f5:70:f5:22:81:5b:37:a9:bc:b6:0f:5f:28:
                    80:ae:a2:f6:29:ff:b1:53:07:f6:02:f6:bd:ec:ea:
                    07:68:fe:c4:45:cd:37:a8:85:56:6a:5d:37:45:6e:
                    89:61:94:0c:d9:6e:92:23:83:b3:76:84:e1:0c:39:
                    7a:f1:e1:4f:74:6b:3b:16:53:f2:d9:0e:38:77:f2:
                    43:2e:4d:7d:d3:a6:dd:8d:c6:87:ee:eb:02:12:eb:
                    53:6a:03:50:87:a4:bb:32:f9:68:6c:58:9f:b1:20:
                    1a:70:25:d4:c2:06:8a:cc:8c:23:a4:a4:cc:0c:4a:
                    43:2d:46:d2:58:1f:f4:3e:9b:a0:1a:fe:14:b0:f7:
                    f2:85:66:fc:b3:c1:92:04:06:7f:95:2e:ca:8d:16:
                    4c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:76:C8:BA:B8:3E:37:8D:36:5C:09:61:30:70:51:03:8C:4C:81:C6
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/323830343a3562383a666666663a3a2f34382d3438203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b8:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:51:38:c6:a5:c2:dc:b9:02:25:89:1a:ea:cf:d9:22:05:ae:
         b2:ac:2d:27:02:7d:3d:96:d6:f4:98:c7:0b:4f:6a:cc:9a:8e:
         b5:30:12:b7:02:cf:35:74:a5:75:d7:39:1e:e2:29:d7:ce:bc:
         8d:58:95:e5:d9:f8:9c:52:3d:10:73:7f:09:89:c8:54:d2:4b:
         5c:ff:31:39:bb:c4:d4:98:a2:9d:3a:76:c6:b6:29:c3:6c:97:
         6b:65:77:10:89:00:b2:2a:9c:fb:b1:7d:c6:6b:7d:78:9b:e0:
         46:ba:24:66:f8:ce:95:23:71:00:4e:f9:17:3f:26:20:5e:07:
         62:27:ec:2e:50:c5:1e:ae:f9:72:75:63:bd:d5:37:84:23:cd:
         92:65:28:3c:4a:03:58:3b:b6:4b:8d:4f:cb:45:08:7b:b4:eb:
         f9:6b:82:1e:7c:76:8a:be:eb:0e:f5:52:27:f8:86:5c:cb:f0:
         ab:e7:5e:83:2c:1f:11:95:bb:33:26:25:b8:f6:43:69:86:ac:
         bf:30:79:31:e9:dd:7b:0d:a4:43:a2:8b:45:62:f1:47:06:01:
         d9:9e:3a:f7:21:e5:51:98:28:20:9b:f8:e9:22:6a:28:38:23:
         e2:40:8c:a0:e4:21:17:64:8d:82:fb:1c:22:ef:a0:ee:8e:7f:
         32:2e:07:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:19:12 2026 by rpki-client