Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/323830343a356438303a3a2f33322d313238203d3e20323638393736.roa
File:                     323830343a356438303a3a2f33322d313238203d3e20323638393736.roa (raw, json)
Hash identifier:          Bv2Xazx9MRqWZ5V6atxU6OgqR6yKi2lkndg3PcWG2og=
Subject key identifier:   CB:0C:63:F7:BE:1F:C9:5C:B1:E0:2A:54:8E:A1:B0:29:21:0C:30:72
Certificate issuer:       /CN=134699DE05FA0114D9EBD9657A4AC646F0601BB1
Certificate serial:       1B84D8056684941D1BCBD57007896838AFC132BF
Authority key identifier: 13:46:99:DE:05:FA:01:14:D9:EB:D9:65:7A:4A:C6:46:F0:60:1B:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134699DE05FA0114D9EBD9657A4AC646F0601BB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/323830343a356438303a3a2f33322d313238203d3e20323638393736.roa
Signing time:             Mon 11 May 2026 17:45:52 +0000
ROA not before:           Mon 11 May 2026 17:40:52 +0000
ROA not after:            Mon 10 May 2027 17:45:52 +0000
asID:                     268976
IP address blocks:        2804:5d80::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/134699DE05FA0114D9EBD9657A4AC646F0601BB1.crl
                          rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/134699DE05FA0114D9EBD9657A4AC646F0601BB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134699DE05FA0114D9EBD9657A4AC646F0601BB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:84:d8:05:66:84:94:1d:1b:cb:d5:70:07:89:68:38:af:c1:32:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134699DE05FA0114D9EBD9657A4AC646F0601BB1
        Validity
            Not Before: May 11 17:40:52 2026 GMT
            Not After : May 10 17:45:52 2027 GMT
        Subject: CN=CB0C63F7BE1FC95CB1E02A548EA1B029210C3072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cd:81:59:ff:7a:af:15:65:31:f5:7e:1a:32:
                    be:fa:35:6a:b8:3f:6a:d7:a5:84:04:9c:28:0b:6b:
                    0d:a5:cc:d5:53:99:d3:bd:4e:8a:72:a0:c2:58:7d:
                    14:2b:55:f6:82:68:63:ac:fc:5f:f7:fa:1c:97:2f:
                    0a:a6:4d:51:23:cd:87:54:08:f8:9d:c2:13:96:88:
                    4c:d0:40:d1:ba:98:c6:d0:19:e2:15:93:b2:2c:db:
                    32:de:3c:dc:ef:ff:d4:36:52:bd:5f:4c:5e:c0:45:
                    75:e9:c5:7d:5d:96:44:09:61:d9:f9:e4:84:9c:71:
                    7f:67:76:1f:7f:b6:b5:65:b8:42:5d:95:4b:1c:a1:
                    a4:76:ea:c6:2f:30:5c:56:e0:88:72:dc:7c:86:f3:
                    8a:1d:ac:c7:a1:c3:f2:08:1b:e3:a0:50:b9:8a:3e:
                    88:de:4e:1d:66:69:c1:56:bd:b8:33:0b:83:59:5c:
                    c6:5a:72:2d:23:63:c5:59:43:2d:0d:83:5f:d9:ef:
                    87:7c:13:3b:19:a3:2c:ae:5e:3a:54:75:28:e6:de:
                    2a:4d:9a:1a:6f:d6:a6:76:9b:96:79:e8:b3:ea:5f:
                    19:cb:8a:57:d5:1b:19:1a:53:8a:9c:5b:9a:0f:86:
                    20:2d:b4:07:7e:e2:82:39:b5:4d:b5:24:6c:cd:fc:
                    12:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:0C:63:F7:BE:1F:C9:5C:B1:E0:2A:54:8E:A1:B0:29:21:0C:30:72
            X509v3 Authority Key Identifier:
                keyid:13:46:99:DE:05:FA:01:14:D9:EB:D9:65:7A:4A:C6:46:F0:60:1B:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/134699DE05FA0114D9EBD9657A4AC646F0601BB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134699DE05FA0114D9EBD9657A4AC646F0601BB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/323830343a356438303a3a2f33322d313238203d3e20323638393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:71:9c:aa:3b:4a:46:d1:91:19:d1:0b:6c:4f:06:9d:f6:d5:
         ac:97:de:27:21:80:5e:24:71:85:f4:92:2f:e5:03:2b:bd:f9:
         08:41:7e:23:f4:6a:bd:24:78:6c:71:ef:ae:05:11:2a:21:97:
         71:8f:0e:c7:8d:cd:c9:79:49:12:13:99:33:93:8b:5e:d6:a2:
         af:c7:c9:c2:f1:dc:1d:58:77:85:de:90:08:34:b7:a7:89:3e:
         fb:c4:70:85:3c:48:49:3d:69:33:5f:e9:58:f9:ba:d2:11:34:
         c6:e2:09:ab:ff:3b:b1:c9:71:03:02:63:a2:7a:26:83:0d:69:
         48:21:22:89:87:05:e1:1b:a1:92:54:6c:02:5a:b2:62:f8:8a:
         25:f9:d6:9b:e7:da:e8:c2:0a:91:61:c0:36:29:44:e9:c9:04:
         8b:d1:f2:3b:a5:1c:21:f7:8a:18:55:0a:f2:67:d3:1c:7f:96:
         58:37:58:16:da:77:59:da:7e:ef:93:99:36:21:7c:fa:7d:51:
         b1:2a:84:4d:18:14:cb:ba:4e:86:c2:5a:7d:32:19:b7:78:50:
         60:43:22:9a:f3:3f:c8:78:9b:50:2b:47:50:90:02:12:89:5f:
         1c:4c:0e:87:92:ce:c3:d4:6c:b5:04:59:1b:c3:05:8f:ce:bd:
         12:de:1d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:33:37 2026 by rpki-client