Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a633030303a3a2f33342d3334203d3e20323638363738.roa
File:                     323830343a353465633a633030303a3a2f33342d3334203d3e20323638363738.roa (raw, json)
Hash identifier:          yPXyMB/EO0on/GKJzj/YF2iLs/Ds/yUsVAM+/Gla/DM=
Subject key identifier:   7F:18:BB:04:41:6C:86:9D:1F:81:6B:64:15:A5:A1:97:0D:28:62:9D
Certificate issuer:       /CN=13BA12AD11702042688DE1889543FA7A0FCFA16E
Certificate serial:       0F5BC0A0023AFA3F140D3084EA252552DA3C697F
Authority key identifier: 13:BA:12:AD:11:70:20:42:68:8D:E1:88:95:43:FA:7A:0F:CF:A1:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13BA12AD11702042688DE1889543FA7A0FCFA16E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a633030303a3a2f33342d3334203d3e20323638363738.roa
Signing time:             Tue 05 May 2026 13:56:14 +0000
ROA not before:           Tue 05 May 2026 13:51:14 +0000
ROA not after:            Tue 04 May 2027 13:56:14 +0000
asID:                     268678
IP address blocks:        2804:54ec:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/13BA12AD11702042688DE1889543FA7A0FCFA16E.crl
                          rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/13BA12AD11702042688DE1889543FA7A0FCFA16E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13BA12AD11702042688DE1889543FA7A0FCFA16E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 06:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:5b:c0:a0:02:3a:fa:3f:14:0d:30:84:ea:25:25:52:da:3c:69:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BA12AD11702042688DE1889543FA7A0FCFA16E
        Validity
            Not Before: May  5 13:51:14 2026 GMT
            Not After : May  4 13:56:14 2027 GMT
        Subject: CN=7F18BB04416C869D1F816B6415A5A1970D28629D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4f:9c:c3:1f:60:d6:20:d6:88:e8:5d:09:09:
                    bc:fd:c0:15:3a:c2:b7:ff:8a:04:8b:18:3b:69:b7:
                    e5:89:6b:43:c9:3b:d3:c8:32:ad:3f:1d:21:d7:cc:
                    d5:0b:e8:7c:fa:b3:b1:15:84:53:f1:d8:13:82:6a:
                    ce:1d:0f:3a:68:36:cf:47:30:07:e5:50:55:9d:09:
                    59:50:8a:cb:1a:5d:bd:c2:6b:11:04:7a:f9:1c:d3:
                    7a:77:63:ec:7f:67:cc:5a:46:d1:74:fa:58:7a:01:
                    d1:c9:ee:d3:56:57:a2:a9:8e:34:b3:f8:20:6d:40:
                    96:40:7f:a1:38:78:2c:bb:94:58:8d:43:73:4d:66:
                    93:f2:86:c8:c8:77:76:63:13:2d:67:e8:b4:ac:35:
                    38:75:94:31:69:41:8f:b6:bb:b3:8d:6e:e6:e1:d7:
                    9a:d6:0e:81:be:a0:1e:f1:97:ad:49:4d:d2:af:86:
                    9c:dc:9e:a7:22:54:76:8d:c1:55:dc:62:32:e3:33:
                    cc:ca:40:15:77:a0:8e:aa:8f:ab:3b:6f:c9:3d:61:
                    fb:95:6c:d9:50:96:ef:37:4c:d6:e0:51:eb:83:85:
                    cb:3c:cb:75:4f:38:17:45:37:63:cd:d8:d3:6f:0b:
                    ee:c8:13:45:0a:78:2e:e1:e6:91:9f:1b:97:8b:e0:
                    16:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:18:BB:04:41:6C:86:9D:1F:81:6B:64:15:A5:A1:97:0D:28:62:9D
            X509v3 Authority Key Identifier:
                keyid:13:BA:12:AD:11:70:20:42:68:8D:E1:88:95:43:FA:7A:0F:CF:A1:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/13BA12AD11702042688DE1889543FA7A0FCFA16E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13BA12AD11702042688DE1889543FA7A0FCFA16E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a633030303a3a2f33342d3334203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54ec:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         24:a9:68:b8:00:65:b6:10:fd:6d:c5:9d:b5:dc:a1:f5:f0:1e:
         02:f7:a9:0b:fa:4d:da:f1:80:3d:a8:4f:68:df:4c:f3:39:7d:
         51:e3:d3:ef:ff:ff:fc:e0:09:39:e5:39:c6:2b:f5:f1:2b:23:
         f9:f0:b8:6f:fa:a4:a7:d8:a4:7c:d2:fb:44:ac:7b:bb:87:6d:
         0f:03:a5:0d:bb:1f:f6:df:ba:0f:90:54:67:f1:ef:17:81:e3:
         6c:d1:e1:88:6b:17:32:02:fe:29:56:0e:7b:e8:a5:6c:a9:a7:
         db:0b:ba:8f:da:a6:71:72:f4:34:71:2e:21:75:dd:f7:97:88:
         75:93:b1:9b:d1:b7:63:fa:5a:05:d0:3a:20:8c:97:79:6d:2c:
         3e:bb:49:ef:a7:20:f2:8f:4a:71:2e:7d:9d:fb:23:53:5b:bf:
         49:31:23:1a:ac:74:77:ce:84:c8:61:a1:21:49:ce:92:56:f2:
         17:a2:69:cd:76:da:e1:d0:19:d9:c1:a8:e7:65:5b:55:90:24:
         84:ef:f0:ff:1c:cf:fd:b4:c1:0f:35:dd:ea:5d:d3:98:ac:43:
         84:5d:4e:b4:9e:a3:8a:b2:b7:ba:5f:a0:e8:2d:f5:08:e2:b3:
         05:7a:b1:44:26:8d:a0:fb:4a:9e:fa:74:dc:37:9f:64:ae:32:
         0d:18:bd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:31:08 2026 by rpki-client