Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a343030303a3a2f33342d3334203d3e20323638363738.roa
File:                     323830343a353465633a343030303a3a2f33342d3334203d3e20323638363738.roa (raw, json)
Hash identifier:          RSJ/AFONnueSfEndb/ABstaOLvJ4SHmGxfLGnGSLWes=
Subject key identifier:   1B:40:71:53:C5:F2:48:AE:15:35:FA:88:90:3D:1E:1F:3A:D7:34:69
Certificate issuer:       /CN=13BA12AD11702042688DE1889543FA7A0FCFA16E
Certificate serial:       652DCCA2FDB61C7C814215BDEF9C426C324E908E
Authority key identifier: 13:BA:12:AD:11:70:20:42:68:8D:E1:88:95:43:FA:7A:0F:CF:A1:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13BA12AD11702042688DE1889543FA7A0FCFA16E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a343030303a3a2f33342d3334203d3e20323638363738.roa
Signing time:             Tue 05 May 2026 13:56:13 +0000
ROA not before:           Tue 05 May 2026 13:51:13 +0000
ROA not after:            Tue 04 May 2027 13:56:13 +0000
asID:                     268678
IP address blocks:        2804:54ec:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/13BA12AD11702042688DE1889543FA7A0FCFA16E.crl
                          rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/13BA12AD11702042688DE1889543FA7A0FCFA16E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13BA12AD11702042688DE1889543FA7A0FCFA16E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 06:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:2d:cc:a2:fd:b6:1c:7c:81:42:15:bd:ef:9c:42:6c:32:4e:90:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BA12AD11702042688DE1889543FA7A0FCFA16E
        Validity
            Not Before: May  5 13:51:13 2026 GMT
            Not After : May  4 13:56:13 2027 GMT
        Subject: CN=1B407153C5F248AE1535FA88903D1E1F3AD73469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:47:9d:9d:b4:a8:8a:4c:e6:1f:61:d5:c7:28:
                    92:37:83:b7:b9:99:ef:0f:5a:4b:76:96:6c:5f:83:
                    77:78:f9:e3:b3:df:e4:f9:a7:be:d6:3c:e8:fb:04:
                    43:78:94:da:c0:36:66:95:1d:ce:8d:2f:56:42:c4:
                    4e:e4:85:70:2c:20:12:18:4a:15:0f:68:c7:8b:af:
                    7d:da:c4:a1:94:69:b0:1a:cc:5f:34:98:f0:af:d1:
                    52:ea:15:07:b8:48:dd:25:65:fc:02:7d:ee:44:10:
                    a4:3a:65:a2:47:c0:ae:c6:2f:3f:64:b6:db:98:7e:
                    d0:34:28:37:e4:73:f1:00:55:c8:73:7a:36:d4:ea:
                    7c:90:c9:51:0d:c3:eb:41:49:c1:90:f9:2f:88:a2:
                    ce:fc:38:ed:72:89:2f:8e:96:11:a4:ad:74:b4:8c:
                    08:0a:01:4f:ed:f0:82:30:bd:e3:9e:92:c3:0a:15:
                    b5:02:0f:7a:be:94:17:4a:13:1c:85:66:26:b2:19:
                    26:26:16:a3:a2:78:1c:64:40:95:1b:8e:93:86:d5:
                    68:ed:fa:b2:8d:74:aa:a9:d4:1c:42:c1:39:17:bf:
                    ce:4d:19:56:4c:02:d5:c1:d1:2f:86:50:9c:9c:0b:
                    e6:47:9b:3c:79:55:d7:13:e5:26:fa:7b:77:63:34:
                    c8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:40:71:53:C5:F2:48:AE:15:35:FA:88:90:3D:1E:1F:3A:D7:34:69
            X509v3 Authority Key Identifier:
                keyid:13:BA:12:AD:11:70:20:42:68:8D:E1:88:95:43:FA:7A:0F:CF:A1:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/13BA12AD11702042688DE1889543FA7A0FCFA16E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13BA12AD11702042688DE1889543FA7A0FCFA16E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a343030303a3a2f33342d3334203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54ec:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2a:c0:64:c7:8e:a1:c7:af:b7:51:46:b6:4c:98:8a:b8:03:2f:
         17:37:89:46:49:25:9c:9d:6c:cf:da:35:43:12:6d:a7:e2:3b:
         be:0f:17:47:5a:83:be:22:c9:38:4b:c3:f5:6e:a8:b2:d0:50:
         a7:2b:a7:aa:0f:77:a2:cc:06:5d:2a:4c:6c:ff:37:a0:d3:23:
         d1:10:27:c6:1b:83:20:ad:27:a4:55:ff:d0:d9:11:f3:d8:bd:
         42:58:83:2a:9d:40:20:16:03:bc:79:f8:b3:06:c3:8a:fa:24:
         1c:e0:e8:c5:26:db:dc:b4:75:3d:5f:2a:48:2c:be:16:be:10:
         a3:4b:d9:f9:6a:87:4e:d3:75:a5:46:0f:6d:0e:57:35:fb:2c:
         30:29:77:30:a7:cf:6b:2c:68:1e:05:dd:01:2b:b2:ad:da:96:
         84:73:09:73:54:30:77:17:80:45:62:31:c0:1a:15:b7:37:67:
         8e:dd:67:da:a1:c5:f4:c3:35:ad:9c:0c:78:80:a8:76:35:78:
         66:32:aa:ce:88:08:e6:92:99:9a:ef:2a:95:d1:d1:f6:49:56:
         03:43:ff:fb:aa:21:79:7d:f5:f0:5e:68:e5:79:65:f4:4f:ad:
         fd:b9:8c:cb:5f:55:63:9e:9d:14:79:76:c1:8e:41:6d:a4:4c:
         bd:83:87:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:31:07 2026 by rpki-client