Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/323830343a3165633a3a2f33322d3332203d3e203533313237.roa
File:                     323830343a3165633a3a2f33322d3332203d3e203533313237.roa (raw, json)
Hash identifier:          i46cuGBFQ12cUiUo0bllRBSIeXd/Ci8OYtpJ9JNnx9g=
Subject key identifier:   5D:01:23:ED:55:77:C3:EA:33:89:BB:46:C1:2A:8D:C7:AF:CA:1C:96
Certificate issuer:       /CN=5FC32B7879FE9033D1C514ACD7EA5EF1929FC407
Certificate serial:       26BCA0E4C857BCB9763634F33C3F28FFCA30DC48
Authority key identifier: 5F:C3:2B:78:79:FE:90:33:D1:C5:14:AC:D7:EA:5E:F1:92:9F:C4:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/323830343a3165633a3a2f33322d3332203d3e203533313237.roa
Signing time:             Thu 16 Jul 2026 14:50:10 +0000
ROA not before:           Thu 16 Jul 2026 14:45:10 +0000
ROA not after:            Thu 15 Jul 2027 14:50:10 +0000
asID:                     53127
IP address blocks:        2804:1ec::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.crl
                          rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 06:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:bc:a0:e4:c8:57:bc:b9:76:36:34:f3:3c:3f:28:ff:ca:30:dc:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FC32B7879FE9033D1C514ACD7EA5EF1929FC407
        Validity
            Not Before: Jul 16 14:45:10 2026 GMT
            Not After : Jul 15 14:50:10 2027 GMT
        Subject: CN=5D0123ED5577C3EA3389BB46C12A8DC7AFCA1C96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:00:f1:3b:ef:66:cd:62:ea:bd:96:8b:76:86:
                    a8:a8:ce:63:f6:5b:62:68:e8:fd:59:83:bd:63:6b:
                    23:1e:c1:b1:69:3d:aa:dd:a2:b7:d5:35:d7:0a:81:
                    df:06:3e:48:65:8b:26:5b:34:f4:a5:11:7a:0f:d3:
                    22:3d:df:0f:9d:29:3f:89:81:04:1c:b3:e1:58:d0:
                    fa:fb:1f:00:b8:60:fc:b1:cc:96:38:c4:f2:ce:41:
                    9a:7d:f2:c9:48:a3:48:ac:a2:ec:59:d3:0e:8e:08:
                    f5:55:39:91:a4:6d:35:57:28:aa:73:e8:8a:91:ca:
                    13:2b:ea:26:4b:46:8c:0c:9e:40:de:32:13:be:d9:
                    26:c4:72:f9:86:d7:3b:2b:84:83:3d:ec:14:21:4c:
                    81:97:ec:1c:59:a4:df:8a:bf:ad:45:2c:09:3c:a9:
                    45:36:61:0c:fc:40:a1:41:11:6d:bf:dc:f6:a4:fa:
                    0b:a1:3d:5f:eb:57:63:c3:76:a8:9f:fc:da:fa:cf:
                    a0:b6:e6:c3:50:21:a8:47:79:77:43:ed:15:e8:c7:
                    0b:1f:42:2c:2a:6f:63:92:4c:31:f7:07:07:99:8e:
                    ef:35:32:a2:3c:3e:90:cb:57:66:64:cd:2a:e4:41:
                    88:7a:0a:df:5c:b5:88:a9:2f:7c:d3:65:aa:d5:09:
                    a2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:01:23:ED:55:77:C3:EA:33:89:BB:46:C1:2A:8D:C7:AF:CA:1C:96
            X509v3 Authority Key Identifier:
                keyid:5F:C3:2B:78:79:FE:90:33:D1:C5:14:AC:D7:EA:5E:F1:92:9F:C4:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/323830343a3165633a3a2f33322d3332203d3e203533313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:ae:ab:2e:f6:bb:f4:e8:09:f6:c1:00:e1:99:98:81:04:88:
         40:56:06:7d:d5:f0:05:9b:38:cf:3b:db:5e:61:8e:21:7b:79:
         f7:9b:b0:00:c2:c1:a5:71:0a:b4:3a:b4:a8:c9:4e:77:fb:90:
         29:06:52:35:f5:ca:e8:f7:c9:e0:67:64:b9:53:6d:7a:0f:76:
         2c:86:7b:5a:13:7d:f5:c5:0c:ee:2f:ff:a7:cc:00:ca:73:d2:
         c2:56:c7:13:41:66:52:ea:3f:4a:92:bf:e9:71:05:ee:89:34:
         75:6c:5a:f1:a1:3b:02:67:21:05:13:c4:fc:3d:64:a2:5f:e9:
         49:66:9e:b7:da:03:cb:d7:aa:51:af:56:01:b4:08:7c:41:43:
         45:e5:a6:82:cf:cb:d7:8f:66:c3:2a:5d:78:00:01:c1:9e:80:
         64:04:fd:49:37:d9:4b:24:84:98:a4:a4:b4:d4:71:d8:e9:d0:
         ed:03:fa:5b:16:ca:81:e3:13:44:c2:81:a7:0f:3f:cc:ea:40:
         04:59:94:b4:04:31:0c:17:e4:41:91:20:18:f3:08:d0:6c:ef:
         5b:d4:b5:bd:43:b5:45:83:97:d8:6b:7d:7d:41:04:9a:b3:d3:
         37:b6:c8:ec:d7:e6:27:ec:7a:40:af:fa:e0:53:16:4c:78:7d:
         70:71:4c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:37:49 2026 by rpki-client