Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EzHVyQgdzSNGbfWLWtY1LLgU9kHGn8psmh8NcfUSuaah/0/323830343a373431633a3a2f33322d313238203d3e20323730393539.roa
File:                     323830343a373431633a3a2f33322d313238203d3e20323730393539.roa (raw, json)
Hash identifier:          Pb4B7NpJN4HX9V44LPy7lGBx5NQWUaAzzTF/sSHsPgM=
Subject key identifier:   76:D4:EC:78:37:6B:38:02:97:40:55:D3:09:2E:A9:78:80:FD:CA:8E
Certificate issuer:       /CN=19765B7E797B246EDB361ED3AEECE7B636538C60
Certificate serial:       6ABEBC43F0EB539F0A3F1723DD0E43695C9A3618
Authority key identifier: 19:76:5B:7E:79:7B:24:6E:DB:36:1E:D3:AE:EC:E7:B6:36:53:8C:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19765B7E797B246EDB361ED3AEECE7B636538C60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EzHVyQgdzSNGbfWLWtY1LLgU9kHGn8psmh8NcfUSuaah/0/323830343a373431633a3a2f33322d313238203d3e20323730393539.roa
Signing time:             Wed 27 May 2026 22:04:21 +0000
ROA not before:           Wed 27 May 2026 21:59:21 +0000
ROA not after:            Wed 26 May 2027 22:04:21 +0000
asID:                     270959
IP address blocks:        2804:741c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EzHVyQgdzSNGbfWLWtY1LLgU9kHGn8psmh8NcfUSuaah/0/19765B7E797B246EDB361ED3AEECE7B636538C60.crl
                          rsync://rpki-repo.registro.br/repo/EzHVyQgdzSNGbfWLWtY1LLgU9kHGn8psmh8NcfUSuaah/0/19765B7E797B246EDB361ED3AEECE7B636538C60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19765B7E797B246EDB361ED3AEECE7B636538C60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 17:43:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:be:bc:43:f0:eb:53:9f:0a:3f:17:23:dd:0e:43:69:5c:9a:36:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19765B7E797B246EDB361ED3AEECE7B636538C60
        Validity
            Not Before: May 27 21:59:21 2026 GMT
            Not After : May 26 22:04:21 2027 GMT
        Subject: CN=76D4EC78376B3802974055D3092EA97880FDCA8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:72:55:00:dc:7d:5a:56:1b:d4:56:e6:ce:aa:
                    1e:0f:91:58:36:cc:5a:3f:1e:40:0a:82:64:20:e4:
                    22:93:2c:8d:df:aa:ac:35:ce:47:72:47:b7:ef:05:
                    17:3f:b3:9c:a7:49:49:ed:ec:82:4d:0f:97:27:77:
                    99:0a:2d:35:19:28:5c:af:f3:d2:92:2a:92:12:db:
                    7f:bd:0f:80:ec:66:2c:42:fc:3a:ac:12:27:7c:bb:
                    95:76:99:47:61:74:76:6e:2d:f2:84:88:49:05:88:
                    29:1d:b9:80:5f:49:5f:b1:58:a6:76:01:be:bf:e0:
                    df:37:76:84:a3:d7:62:1e:49:7d:b0:14:90:e4:90:
                    fb:d4:98:06:b8:19:44:a1:9d:3f:49:5e:ca:04:57:
                    bb:15:25:0b:b9:94:fc:aa:d9:0a:52:10:3e:24:a7:
                    68:2d:2b:b2:4e:97:87:26:dc:44:76:89:f4:0c:60:
                    b8:00:e6:cf:b5:61:a5:0d:d8:d0:00:4a:64:08:46:
                    29:08:26:5a:8e:26:de:35:b7:de:d5:ec:93:72:dc:
                    73:fc:e3:9e:53:e3:f8:99:76:eb:4a:a8:86:9e:43:
                    f8:11:6f:1c:68:0e:d9:3b:ee:cc:c5:a9:db:6a:a5:
                    11:84:ee:4f:d4:43:6d:4d:f1:52:4a:18:45:f9:b9:
                    b9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D4:EC:78:37:6B:38:02:97:40:55:D3:09:2E:A9:78:80:FD:CA:8E
            X509v3 Authority Key Identifier:
                keyid:19:76:5B:7E:79:7B:24:6E:DB:36:1E:D3:AE:EC:E7:B6:36:53:8C:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EzHVyQgdzSNGbfWLWtY1LLgU9kHGn8psmh8NcfUSuaah/0/19765B7E797B246EDB361ED3AEECE7B636538C60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19765B7E797B246EDB361ED3AEECE7B636538C60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EzHVyQgdzSNGbfWLWtY1LLgU9kHGn8psmh8NcfUSuaah/0/323830343a373431633a3a2f33322d313238203d3e20323730393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:741c::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:79:b8:31:a1:cc:1f:dc:8b:da:9d:fc:ee:6c:d0:4b:a7:e2:
         47:f7:c6:86:8d:9f:13:20:3b:ad:f3:f4:58:e4:da:b0:63:0a:
         22:fe:4b:6f:89:7b:70:d0:40:68:d6:9f:fe:2f:f7:72:50:69:
         81:6e:71:7c:83:b4:db:f3:fc:c1:02:46:44:ec:65:d5:61:c9:
         3d:3a:41:a2:88:3e:a0:d4:e3:cb:1e:5a:84:30:87:0e:07:d3:
         26:51:be:c4:73:eb:ee:ee:d2:c1:de:f8:48:ba:ff:d9:11:51:
         77:8d:42:ae:46:7b:c1:e4:f3:7e:f7:a5:45:4f:e6:e5:fc:1c:
         07:e1:0c:30:f3:68:61:02:63:ad:40:11:3c:86:03:75:59:14:
         d4:87:72:de:a3:ad:26:cc:f1:ea:0c:ba:d8:74:09:35:95:8b:
         23:de:2a:b4:24:1a:a2:fd:5b:cf:07:dd:30:ae:a6:3d:36:9a:
         38:42:22:b2:a2:4b:ad:ab:c6:23:2b:41:73:90:4c:24:ba:83:
         b3:5d:42:5f:15:72:b1:92:cf:2b:8b:92:d7:1d:16:dd:e3:de:
         3e:8a:4a:15:ff:96:29:2a:0d:33:ac:8e:a2:e2:02:bc:db:88:
         6a:eb:69:73:50:e3:b3:9c:cb:81:dc:bf:a7:2a:15:c6:e0:24:
         17:4e:e2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:06:01 2026 by rpki-client