Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3RaCb5gyndxCQraMPTEYgDvvbnKaZsktyZjDafGauSbJ/0/323830343a376137383a3a2f33322d3332203d3e20323731333733.roa
File:                     323830343a376137383a3a2f33322d3332203d3e20323731333733.roa (raw, json)
Hash identifier:          Y0he6YFzKkZ3xcUn4HeWlnOMZd4qV4/96PCxivubWpA=
Subject key identifier:   32:58:B0:83:5E:E9:13:26:60:FC:D9:07:AD:B5:C6:C0:40:3D:52:86
Certificate issuer:       /CN=59B22C8D852CE477193A143E511F67619A2E59A6
Certificate serial:       72C1D306B92D9CDEC23D30C12929CE2BCC1A31FC
Authority key identifier: 59:B2:2C:8D:85:2C:E4:77:19:3A:14:3E:51:1F:67:61:9A:2E:59:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59B22C8D852CE477193A143E511F67619A2E59A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RaCb5gyndxCQraMPTEYgDvvbnKaZsktyZjDafGauSbJ/0/323830343a376137383a3a2f33322d3332203d3e20323731333733.roa
Signing time:             Fri 08 May 2026 12:00:05 +0000
ROA not before:           Fri 08 May 2026 11:55:05 +0000
ROA not after:            Fri 07 May 2027 12:00:05 +0000
asID:                     271373
IP address blocks:        2804:7a78::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3RaCb5gyndxCQraMPTEYgDvvbnKaZsktyZjDafGauSbJ/0/59B22C8D852CE477193A143E511F67619A2E59A6.crl
                          rsync://rpki-repo.registro.br/repo/3RaCb5gyndxCQraMPTEYgDvvbnKaZsktyZjDafGauSbJ/0/59B22C8D852CE477193A143E511F67619A2E59A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59B22C8D852CE477193A143E511F67619A2E59A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 01:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c1:d3:06:b9:2d:9c:de:c2:3d:30:c1:29:29:ce:2b:cc:1a:31:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B22C8D852CE477193A143E511F67619A2E59A6
        Validity
            Not Before: May  8 11:55:05 2026 GMT
            Not After : May  7 12:00:05 2027 GMT
        Subject: CN=3258B0835EE9132660FCD907ADB5C6C0403D5286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1c:be:ed:d1:e5:71:61:a2:04:df:f3:42:bd:
                    f2:bd:10:00:c9:33:09:d3:87:f8:ba:f0:5c:6a:38:
                    f4:2f:ae:e1:04:08:82:05:da:51:b6:41:ef:46:6d:
                    2a:71:39:80:03:17:02:4b:fe:36:a4:71:ea:28:40:
                    f4:61:f9:48:9e:3a:79:0c:b0:48:38:c9:df:8f:c5:
                    29:45:75:7d:4e:7e:4f:3f:90:08:c9:2a:51:ee:e3:
                    90:69:47:6e:10:ff:4f:93:a0:c6:c0:1f:22:36:33:
                    8d:99:4b:08:36:5a:76:9a:b8:2a:dc:c5:d2:93:90:
                    cf:3c:92:2f:cd:43:99:31:ec:f2:7a:6a:68:63:aa:
                    e5:d5:5f:c9:ab:a9:58:68:91:de:f5:91:68:89:16:
                    20:28:fb:fb:c4:f8:16:fe:a9:db:f1:44:61:84:c0:
                    65:3f:54:1b:36:b5:34:d8:48:d3:7a:d0:56:07:5c:
                    9d:61:ae:60:87:9a:48:a1:0b:45:f4:db:62:42:40:
                    d1:fe:0f:d7:d1:98:3a:e0:8e:30:f4:f6:98:0a:12:
                    73:57:8b:eb:55:b5:20:9a:8f:04:42:ec:29:f8:d4:
                    65:42:7a:05:9c:9e:a6:3f:ea:c5:70:ad:97:e8:d8:
                    38:e5:82:29:da:7b:04:d9:7a:10:e9:fd:8a:45:aa:
                    47:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:58:B0:83:5E:E9:13:26:60:FC:D9:07:AD:B5:C6:C0:40:3D:52:86
            X509v3 Authority Key Identifier:
                keyid:59:B2:2C:8D:85:2C:E4:77:19:3A:14:3E:51:1F:67:61:9A:2E:59:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RaCb5gyndxCQraMPTEYgDvvbnKaZsktyZjDafGauSbJ/0/59B22C8D852CE477193A143E511F67619A2E59A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59B22C8D852CE477193A143E511F67619A2E59A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RaCb5gyndxCQraMPTEYgDvvbnKaZsktyZjDafGauSbJ/0/323830343a376137383a3a2f33322d3332203d3e20323731333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a78::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:92:44:de:4a:c3:43:ff:e6:69:bf:3b:be:73:ad:27:85:da:
         2c:74:b0:2a:f3:e8:9f:ef:73:cc:65:59:6a:34:9c:36:13:31:
         fd:c1:be:e3:31:5b:35:cf:5c:cc:5f:15:ef:a8:72:d5:47:2b:
         03:64:32:19:77:aa:21:fd:dd:1b:cb:d6:24:28:1c:cc:03:d1:
         da:a6:6b:53:72:a1:d3:68:51:74:77:7c:17:1d:e8:2d:e4:2b:
         ae:f7:59:a2:62:be:71:86:b6:f9:2a:43:81:ad:8d:8e:ed:e2:
         5b:8b:d3:28:72:8a:01:1a:62:d0:c9:ca:eb:12:52:df:e1:c7:
         0c:f0:bd:09:1c:c0:d2:d5:3e:90:82:72:e9:e8:71:74:d8:36:
         f1:01:b5:40:a2:f4:70:3d:fa:24:05:66:4f:bd:2b:31:27:19:
         83:2f:c1:17:89:bb:12:e2:8c:53:16:fc:f2:01:ad:86:d3:c2:
         5e:2f:57:8f:45:b7:46:54:ff:67:73:b8:89:90:8f:3e:12:65:
         bc:ee:37:88:4b:66:fe:76:c4:11:38:04:c3:0b:73:c5:fc:69:
         06:1e:aa:66:fb:1b:61:33:37:62:f9:03:19:e4:19:f2:94:db:
         68:94:7c:e0:17:3b:2e:4e:40:35:79:97:59:45:c6:4e:8a:1a:
         68:30:7d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:51:26 2026 by rpki-client