Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/323830343a363666383a383030303a3a2f33342d3334203d3e20323639353935.roa
File:                     323830343a363666383a383030303a3a2f33342d3334203d3e20323639353935.roa (raw, json)
Hash identifier:          Fl/UWVrG6Rq5YHxanOV5ACbVU3yo1Y8c77e1IA6Wzz8=
Subject key identifier:   E2:E1:20:F2:D7:C4:83:B5:ED:9E:CA:0D:88:E0:AB:97:D8:48:34:D5
Certificate issuer:       /CN=AD81180ED014F2365CDAF7461678A5A8D2038CFA
Certificate serial:       057D228FFA222417DC838FC356840B1297B98094
Authority key identifier: AD:81:18:0E:D0:14:F2:36:5C:DA:F7:46:16:78:A5:A8:D2:03:8C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD81180ED014F2365CDAF7461678A5A8D2038CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/323830343a363666383a383030303a3a2f33342d3334203d3e20323639353935.roa
Signing time:             Wed 22 Apr 2026 20:42:55 +0000
ROA not before:           Wed 22 Apr 2026 20:37:55 +0000
ROA not after:            Wed 21 Apr 2027 20:42:55 +0000
asID:                     269595
IP address blocks:        2804:66f8:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/AD81180ED014F2365CDAF7461678A5A8D2038CFA.crl
                          rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/AD81180ED014F2365CDAF7461678A5A8D2038CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD81180ED014F2365CDAF7461678A5A8D2038CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 01:54:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:7d:22:8f:fa:22:24:17:dc:83:8f:c3:56:84:0b:12:97:b9:80:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD81180ED014F2365CDAF7461678A5A8D2038CFA
        Validity
            Not Before: Apr 22 20:37:55 2026 GMT
            Not After : Apr 21 20:42:55 2027 GMT
        Subject: CN=E2E120F2D7C483B5ED9ECA0D88E0AB97D84834D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9c:69:6a:cf:e4:e0:a7:42:df:df:a7:4c:79:
                    3d:ff:b6:df:8c:ff:fd:4c:7b:7e:0f:41:e7:9a:9c:
                    36:b2:64:1f:58:06:60:7a:39:c7:92:f0:c0:76:ee:
                    8e:15:dd:38:31:2f:24:a1:d3:f9:47:9e:6a:1f:37:
                    af:25:02:b6:20:cf:4f:9d:2d:d9:73:d3:af:76:42:
                    88:ca:12:ee:13:40:4f:a2:70:f4:33:41:a2:12:9b:
                    bf:7c:5a:36:3a:7d:da:9e:ec:cd:97:da:12:ab:f0:
                    d6:c7:40:59:2c:e6:62:ef:e9:07:34:8a:17:1e:c2:
                    1b:57:4e:e6:dd:9a:f6:31:b5:e2:01:fb:a9:76:df:
                    06:c0:d0:65:51:d2:95:c0:ba:65:45:48:78:06:82:
                    b5:45:6d:97:02:e0:f2:3a:6a:70:77:33:8c:57:52:
                    7a:b0:2a:06:5f:26:20:05:b7:3c:27:15:95:6c:e6:
                    cd:66:b6:af:ce:49:ed:af:23:5a:45:58:17:e5:d0:
                    34:5e:6c:76:f8:af:87:25:ba:9f:65:13:b2:21:23:
                    a3:fa:39:13:86:b1:e1:1b:b9:67:49:6e:9f:1f:8c:
                    2f:ee:d2:7b:ee:8d:e4:e5:a4:a8:d5:77:d0:aa:2f:
                    23:8b:c6:42:57:b6:1f:c7:de:b3:1b:dc:1b:38:de:
                    7f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E1:20:F2:D7:C4:83:B5:ED:9E:CA:0D:88:E0:AB:97:D8:48:34:D5
            X509v3 Authority Key Identifier:
                keyid:AD:81:18:0E:D0:14:F2:36:5C:DA:F7:46:16:78:A5:A8:D2:03:8C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/AD81180ED014F2365CDAF7461678A5A8D2038CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD81180ED014F2365CDAF7461678A5A8D2038CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/323830343a363666383a383030303a3a2f33342d3334203d3e20323639353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:66f8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         98:ef:a8:42:47:b7:8c:c1:35:de:db:17:33:b0:a8:59:1d:ba:
         7b:f5:14:0b:ec:f4:2e:f8:d0:5b:a6:75:8e:03:0f:d9:a1:a1:
         9d:06:af:22:a6:b1:44:25:87:28:77:67:5d:9f:a2:5f:d9:ba:
         90:81:fb:72:cc:82:73:13:87:75:3d:29:77:ed:3b:ba:8f:ee:
         65:8f:fc:95:9f:61:82:d8:91:e1:cf:56:ba:2c:49:0d:ec:5e:
         f8:5e:ca:0c:bf:2d:1c:d3:c1:23:e6:83:74:ce:c2:e0:ea:54:
         04:5f:c8:26:95:d0:f0:4c:2c:38:da:cf:79:55:29:93:4f:79:
         c9:37:c8:04:90:b6:6c:38:31:0e:16:b1:47:bf:39:9a:f5:c0:
         b9:40:b8:69:9a:44:0a:1a:54:74:ed:44:f0:be:dc:ea:ae:bc:
         94:fe:bb:2c:c8:23:d6:3c:f9:2e:2d:75:d4:3d:62:81:a1:85:
         eb:7d:73:a7:a3:25:29:2d:e2:7a:07:bb:37:8e:0b:7b:ec:b3:
         23:8b:04:1a:40:ea:d3:7e:4a:0c:5b:17:28:20:a0:b3:aa:1e:
         9b:96:94:a7:bd:81:a1:6e:db:a1:9d:68:7e:89:d3:a5:5c:ef:
         fd:c7:23:59:82:3f:b0:ee:41:16:2f:18:e9:71:25:8f:37:6a:
         e7:65:f0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:08:53 2026 by rpki-client