Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/323830343a6232633a3a2f33322d313238203d3e203532393436.roa
File:                     323830343a6232633a3a2f33322d313238203d3e203532393436.roa (raw, json)
Hash identifier:          UNbQ3jB/XyHb+hRfgGJ3ILlpDV7B2OcMZUn6i3ircws=
Subject key identifier:   4E:D1:4A:9D:BB:53:42:37:28:00:6B:8F:77:47:65:17:4C:2A:6E:15
Certificate issuer:       /CN=EEEFDF0561F507F6A8EEC33D55604D7A011BB588
Certificate serial:       2C11C27618048D62F89EEB889C4E93B77822F15E
Authority key identifier: EE:EF:DF:05:61:F5:07:F6:A8:EE:C3:3D:55:60:4D:7A:01:1B:B5:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/323830343a6232633a3a2f33322d313238203d3e203532393436.roa
Signing time:             Thu 12 Mar 2026 20:45:41 +0000
ROA not before:           Thu 12 Mar 2026 20:40:41 +0000
ROA not after:            Thu 11 Mar 2027 20:45:41 +0000
asID:                     52946
IP address blocks:        2804:b2c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.crl
                          rsync://rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 18:06:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:11:c2:76:18:04:8d:62:f8:9e:eb:88:9c:4e:93:b7:78:22:f1:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEEFDF0561F507F6A8EEC33D55604D7A011BB588
        Validity
            Not Before: Mar 12 20:40:41 2026 GMT
            Not After : Mar 11 20:45:41 2027 GMT
        Subject: CN=4ED14A9DBB53423728006B8F774765174C2A6E15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c6:fa:87:f6:58:17:45:77:d7:23:60:62:53:
                    97:67:be:84:ad:bd:48:39:1c:27:20:52:d9:d2:94:
                    16:4c:60:b8:d2:17:a4:f6:4b:8e:3c:f3:a5:af:40:
                    34:93:e8:2b:dc:2b:da:46:fd:56:3d:86:a6:a3:d2:
                    cd:df:13:06:bf:a9:99:93:5c:67:21:2a:94:a7:a8:
                    ba:af:b4:b4:89:0e:e0:0a:a8:d4:a0:10:0d:4a:fc:
                    d2:62:80:60:4f:12:50:42:95:ba:9e:e6:e6:e0:a8:
                    c8:85:e0:20:9e:4f:12:3a:86:dc:92:b0:7d:32:a5:
                    dd:1c:7f:9d:3e:35:56:63:72:66:3c:2d:5e:1c:5a:
                    58:f9:b6:ec:b0:c4:b4:b2:cb:58:d1:d5:58:32:36:
                    52:b1:71:bf:71:19:13:fa:86:39:9b:85:8f:02:3b:
                    ba:8c:f0:68:13:5d:6a:93:3d:13:32:e8:dc:72:4f:
                    9b:f7:0e:cd:4d:de:d3:6e:bc:fd:ce:6b:82:e4:09:
                    ed:e8:52:6e:76:97:6b:c4:95:d2:86:3d:94:11:a7:
                    64:56:75:69:bd:c5:f2:0b:78:38:4c:96:bd:1b:e7:
                    64:c6:2d:aa:00:38:3b:92:67:02:dd:76:1a:bb:e0:
                    f0:f2:7f:ee:c3:35:d1:54:ce:c5:c1:9a:c6:e1:8f:
                    f1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D1:4A:9D:BB:53:42:37:28:00:6B:8F:77:47:65:17:4C:2A:6E:15
            X509v3 Authority Key Identifier:
                keyid:EE:EF:DF:05:61:F5:07:F6:A8:EE:C3:3D:55:60:4D:7A:01:1B:B5:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEEFDF0561F507F6A8EEC33D55604D7A011BB588.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Mk7j6YDanNNZn8NGgKgo352Jc75cBRvVCpDW7pfZBjL/0/323830343a6232633a3a2f33322d313238203d3e203532393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:c9:92:20:f0:9f:b2:ca:86:bc:e8:bc:c8:df:80:1b:cc:c3:
         94:e7:0b:5c:c7:3b:e8:38:b9:44:2d:56:34:3e:37:5f:4a:da:
         ca:d9:54:3e:fa:3f:05:5b:22:e8:70:9b:27:01:71:97:03:45:
         dc:82:55:3f:19:9a:21:cf:40:e1:22:a7:89:bc:74:8d:55:c6:
         f8:dc:6b:56:a9:9b:8c:a5:f4:bf:49:31:1e:76:4d:5b:a3:37:
         ae:e8:84:ae:66:25:56:d5:48:3d:bc:b4:80:e3:f5:3c:09:18:
         1e:f2:46:37:c2:8b:a6:d2:93:35:98:b4:42:13:3c:ef:6d:84:
         6c:c8:c1:2f:12:f1:be:7b:d8:90:3c:7f:2a:39:e4:6d:66:58:
         09:28:45:0c:9d:ef:c7:27:f5:ce:f5:79:41:8d:a8:a6:e7:aa:
         75:51:1c:72:30:68:22:7b:a3:a3:20:30:11:5c:6f:af:db:63:
         90:66:f0:fd:d1:ef:75:47:26:cc:f7:5d:0e:9e:99:07:42:2b:
         62:8a:4a:44:8a:98:b8:5e:d9:07:79:3b:ad:b0:6d:3b:fe:46:
         14:4d:7d:5d:6d:c8:b5:cc:4c:9b:9e:cd:2c:55:f3:74:1f:6e:
         cf:2f:ce:c4:af:40:04:77:c0:46:4f:64:1a:de:d9:0d:35:fe:
         9e:fb:35:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:08:59 2026 by rpki-client