Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/323830343a333435343a3a2f33322d3334203d3e20323635343531.roa
File:                     323830343a333435343a3a2f33322d3334203d3e20323635343531.roa (raw, json)
Hash identifier:          hl16Wv0lVR8vqXrZaUf4XmVt7Y5qzLwK+RFwsBNNLG0=
Subject key identifier:   7E:5C:27:04:B3:F9:7A:55:03:20:75:53:8E:A7:35:67:88:12:F4:10
Certificate issuer:       /CN=5DBF389DE84A8068D72BA7A5E030F90D8F670D31
Certificate serial:       0C1B5A3B31BEC9277B27956544A041C91C38A1D5
Authority key identifier: 5D:BF:38:9D:E8:4A:80:68:D7:2B:A7:A5:E0:30:F9:0D:8F:67:0D:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/323830343a333435343a3a2f33322d3334203d3e20323635343531.roa
Signing time:             Fri 24 Apr 2026 15:07:56 +0000
ROA not before:           Fri 24 Apr 2026 15:02:56 +0000
ROA not after:            Fri 23 Apr 2027 15:07:56 +0000
asID:                     265451
IP address blocks:        2804:3454::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl
                          rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 14:08:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:1b:5a:3b:31:be:c9:27:7b:27:95:65:44:a0:41:c9:1c:38:a1:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DBF389DE84A8068D72BA7A5E030F90D8F670D31
        Validity
            Not Before: Apr 24 15:02:56 2026 GMT
            Not After : Apr 23 15:07:56 2027 GMT
        Subject: CN=7E5C2704B3F97A55032075538EA735678812F410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6c:1c:22:24:11:ce:d5:c4:16:20:e2:77:35:
                    69:6f:d2:7d:67:3d:2f:71:5c:6c:cf:ce:10:22:4c:
                    4b:04:6a:1d:a0:0a:05:1c:29:12:4a:0f:80:7f:99:
                    43:14:9f:ae:10:56:02:ec:2d:28:e4:3f:88:13:9b:
                    03:35:37:bc:06:57:e2:3e:e1:b7:5b:46:f0:d3:b3:
                    ce:91:19:57:6e:83:11:1b:1f:3e:d5:8b:5a:83:bf:
                    bf:84:ab:b4:8c:c6:60:71:3e:39:ee:50:df:c9:20:
                    4f:02:61:8e:97:bb:b0:b5:94:10:69:92:60:f7:6e:
                    87:4f:6c:49:f8:ec:e8:c5:e4:2d:23:53:f0:58:cd:
                    94:eb:a6:c7:77:f5:45:c7:9b:6f:c1:d6:78:a7:15:
                    d0:db:14:5f:94:4d:ca:06:a0:05:15:b4:c0:6c:f6:
                    c9:81:ba:5a:4e:4d:81:62:e1:3f:dd:76:1d:2a:3e:
                    59:56:39:33:7b:fb:c9:6c:ad:a9:08:e3:ad:1b:2f:
                    27:50:04:39:85:94:fc:a4:ff:1b:eb:03:20:a3:0a:
                    2e:b6:ef:25:41:ed:a8:ce:cd:6f:a7:cf:77:d3:09:
                    06:5d:33:b6:d3:a8:d5:68:56:b3:05:14:a5:b0:cb:
                    25:c9:68:73:ca:30:f1:7c:5d:a1:76:35:ec:b9:b5:
                    c6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:5C:27:04:B3:F9:7A:55:03:20:75:53:8E:A7:35:67:88:12:F4:10
            X509v3 Authority Key Identifier:
                keyid:5D:BF:38:9D:E8:4A:80:68:D7:2B:A7:A5:E0:30:F9:0D:8F:67:0D:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/323830343a333435343a3a2f33322d3334203d3e20323635343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3454::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:24:79:83:94:66:93:e1:f0:3b:5e:3c:49:7c:a1:ef:cf:5a:
         ab:6e:28:26:bd:6f:f5:9c:6a:a1:34:ae:30:e9:75:fb:01:b3:
         f8:03:73:50:e5:e1:01:09:ec:a0:8d:5f:bd:d0:25:53:21:92:
         c1:cc:a2:35:20:54:c5:3a:5a:15:f4:50:f8:f6:ec:1d:86:8e:
         1e:73:70:08:d4:df:81:71:66:10:e2:dc:f3:ee:30:ae:39:8f:
         60:82:2e:60:76:be:5a:b8:c4:e0:5a:1a:24:89:53:d5:3b:7b:
         bd:ae:16:98:18:5e:19:88:ee:0f:4a:68:72:0e:6c:6d:bd:1e:
         9f:26:c4:ee:08:0b:a9:db:62:cb:40:8a:7b:b5:ec:3e:ca:49:
         29:18:74:c1:7a:a2:6e:aa:31:b2:39:20:e6:8f:fd:c2:40:22:
         61:61:90:d8:8c:e9:04:0e:5b:c6:18:db:59:28:65:0f:5b:a1:
         99:67:ff:a9:73:46:2f:73:fa:c6:b7:41:19:00:65:5d:29:55:
         94:59:6f:49:a8:c6:1e:52:80:27:55:34:a9:b4:67:0e:97:41:
         7f:e4:14:6a:00:f9:90:80:06:e9:f7:5d:09:4d:c7:7d:33:2d:
         86:b8:20:f5:e5:a4:8d:ed:3a:11:d6:55:69:b7:27:67:50:e4:
         25:35:3e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:41:33 2026 by rpki-client