Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/323830343a6666343a3a2f33322d313238203d3e203533323138.roa
File:                     323830343a6666343a3a2f33322d313238203d3e203533323138.roa (raw, json)
Hash identifier:          /mhfetzQio/E/qnhQ9kuqb/6RsmTfwL8dwBK4dlPe6E=
Subject key identifier:   D5:DA:72:09:71:5F:BE:A1:2C:73:B7:FF:71:3F:9F:3E:06:2A:47:1E
Certificate issuer:       /CN=2942F22000F3A7315703CF3B13100D76386FCAD1
Certificate serial:       1BE9F49275CFCD8465EDD7C118585E4D6A935771
Authority key identifier: 29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/323830343a6666343a3a2f33322d313238203d3e203533323138.roa
Signing time:             Mon 20 Jul 2026 20:18:13 +0000
ROA not before:           Mon 20 Jul 2026 20:13:13 +0000
ROA not after:            Mon 19 Jul 2027 20:18:13 +0000
asID:                     53218
IP address blocks:        2804:ff4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl
                          rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e9:f4:92:75:cf:cd:84:65:ed:d7:c1:18:58:5e:4d:6a:93:57:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2942F22000F3A7315703CF3B13100D76386FCAD1
        Validity
            Not Before: Jul 20 20:13:13 2026 GMT
            Not After : Jul 19 20:18:13 2027 GMT
        Subject: CN=D5DA7209715FBEA12C73B7FF713F9F3E062A471E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cb:53:29:03:3e:b0:46:da:6d:cf:cd:f3:02:
                    0c:14:67:07:ae:0c:b8:3b:76:22:c0:8e:e5:5c:6a:
                    02:32:fa:69:51:1e:f4:df:00:52:5c:7b:8a:e0:db:
                    8d:08:89:09:38:5c:ba:af:02:ff:97:6c:86:26:c3:
                    1f:09:c3:03:dc:6d:a7:40:fa:ba:65:7e:ea:fa:af:
                    40:a0:47:ff:ad:1b:28:20:80:01:50:cb:33:d8:21:
                    32:28:cf:61:5b:4f:42:e6:36:33:aa:28:a3:76:5c:
                    c4:a7:f6:a4:41:1a:80:cc:69:8b:4b:8f:d1:82:26:
                    52:b7:89:64:08:3a:89:9c:0e:12:ee:d6:22:87:bf:
                    b8:1d:29:be:bc:4e:d9:cb:23:01:33:f7:84:c5:38:
                    95:32:e7:f5:54:6a:b3:37:22:8a:21:55:75:cf:69:
                    80:d2:c6:d6:bf:a6:8e:85:77:47:4d:91:0d:01:7f:
                    d5:df:44:7c:16:e1:47:36:bc:0c:4d:3d:ae:c2:cb:
                    98:51:2b:60:77:76:bf:42:27:7a:9b:8d:25:eb:96:
                    93:ad:1b:6d:3f:0d:b7:22:65:9b:8f:fe:3f:c4:3f:
                    8a:bb:b8:21:ed:a8:07:82:ea:88:2c:63:20:da:17:
                    83:b4:c9:a6:91:2f:a4:39:f1:d1:ed:f8:37:7c:df:
                    73:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:DA:72:09:71:5F:BE:A1:2C:73:B7:FF:71:3F:9F:3E:06:2A:47:1E
            X509v3 Authority Key Identifier:
                keyid:29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/323830343a6666343a3a2f33322d313238203d3e203533323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ff4::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:71:27:c9:ea:b9:fc:e3:b0:ad:1f:c1:bd:63:53:d2:ad:30:
         41:0a:67:cc:4f:ef:b2:fb:93:e6:87:1d:74:7a:7d:70:44:1d:
         91:f3:1b:78:70:a9:c2:2a:af:87:23:1e:e1:0e:30:35:99:41:
         77:1d:40:97:c2:62:7d:bb:39:37:c8:97:28:f3:26:5d:7b:fe:
         a5:fa:67:7b:10:77:26:94:6e:86:62:3b:f8:d0:e8:5e:64:6a:
         4a:49:0d:77:86:d7:9d:66:0e:94:66:5f:00:db:11:cd:40:95:
         0f:c0:1f:f4:77:b3:a1:a4:55:a1:bd:72:a2:b9:d5:e1:09:06:
         1c:a5:8d:ff:a5:86:16:7d:f4:4d:db:c5:f9:82:55:21:79:5a:
         fa:a5:91:6c:99:6d:b8:a1:15:cd:35:97:cf:81:65:15:14:86:
         62:3e:2e:08:91:71:8c:3c:1c:44:4c:c3:cd:70:ed:00:13:7e:
         8a:e9:8c:b9:59:53:a4:66:b7:62:03:90:8b:d3:03:2e:6d:b6:
         69:45:1f:13:17:7f:f7:0e:1d:9c:27:4d:e9:45:d1:b9:e4:72:
         aa:d1:56:85:ba:ce:ec:bf:85:aa:a2:f0:29:b2:f6:5a:c9:13:
         a7:ba:6f:7c:9b:59:8a:ca:34:ce:4f:33:39:33:91:a4:da:3d:
         cf:68:bf:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:26:51 2026 by rpki-client