Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/323830343a346131383a626263623a3a2f34382d3438203d3e20323637323138.roa
File:                     323830343a346131383a626263623a3a2f34382d3438203d3e20323637323138.roa (raw, json)
Hash identifier:          q95Lgpn3XAOMt1OPhEubvSnKufT0s7IBq/Fxv/pIljY=
Subject key identifier:   C8:2F:8F:98:59:BE:9A:C4:EB:1D:7F:06:C4:75:81:40:04:5C:77:99
Certificate issuer:       /CN=FCE673648244EB441465D6651FC7A10BCB1109BE
Certificate serial:       11CB89531EA9FDED2F3FE099FD781DC6446F063F
Authority key identifier: FC:E6:73:64:82:44:EB:44:14:65:D6:65:1F:C7:A1:0B:CB:11:09:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/323830343a346131383a626263623a3a2f34382d3438203d3e20323637323138.roa
Signing time:             Thu 02 Jul 2026 12:48:26 +0000
ROA not before:           Thu 02 Jul 2026 12:43:26 +0000
ROA not after:            Thu 01 Jul 2027 12:48:26 +0000
asID:                     267218
IP address blocks:        2804:4a18:bbcb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.crl
                          rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 10:41:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:cb:89:53:1e:a9:fd:ed:2f:3f:e0:99:fd:78:1d:c6:44:6f:06:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCE673648244EB441465D6651FC7A10BCB1109BE
        Validity
            Not Before: Jul  2 12:43:26 2026 GMT
            Not After : Jul  1 12:48:26 2027 GMT
        Subject: CN=C82F8F9859BE9AC4EB1D7F06C4758140045C7799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f6:9c:08:e9:b6:51:94:88:ec:cc:f2:41:d9:
                    f5:8b:22:89:aa:5d:85:f1:42:53:d9:ca:5c:81:ce:
                    a9:ee:6b:c1:cd:e4:a3:17:af:c1:69:9c:14:53:14:
                    b0:09:f8:54:ad:e3:3d:6f:f1:45:4d:7d:1b:bd:12:
                    92:3b:d4:5f:8e:ba:55:d9:09:29:ef:88:65:a1:28:
                    30:3f:a1:04:ab:a4:9d:84:d6:64:5f:19:9d:9e:a3:
                    09:4b:ae:e6:9f:9c:d3:66:ec:6e:4c:a9:9f:dd:79:
                    b9:ea:fa:fe:ec:f2:e7:e2:75:a1:bc:d1:69:f6:18:
                    2c:bf:26:93:16:95:2a:a0:df:d6:ec:86:cc:8f:f0:
                    f4:6a:ab:ee:d5:91:fe:de:38:f5:42:78:90:74:74:
                    fa:2c:f9:70:e4:b1:44:34:0c:d7:1d:07:13:13:09:
                    80:f8:75:5d:31:c4:2a:70:14:2f:52:bc:89:41:8e:
                    9f:27:e2:80:9b:21:16:58:8c:55:23:f8:58:54:89:
                    6b:8a:c2:9b:03:e7:28:f7:1a:a2:13:52:70:42:46:
                    ac:90:f2:1e:e3:07:77:1b:e8:91:4c:d3:31:4a:a6:
                    53:5c:cc:4c:82:7f:54:73:71:f5:ad:5c:2b:d4:ba:
                    06:7e:dd:6e:10:1f:4b:82:b6:e9:00:b8:f4:14:1e:
                    c6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:2F:8F:98:59:BE:9A:C4:EB:1D:7F:06:C4:75:81:40:04:5C:77:99
            X509v3 Authority Key Identifier:
                keyid:FC:E6:73:64:82:44:EB:44:14:65:D6:65:1F:C7:A1:0B:CB:11:09:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/323830343a346131383a626263623a3a2f34382d3438203d3e20323637323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a18:bbcb::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:98:37:8d:f3:2f:9d:b7:ec:60:80:0f:48:d9:ee:80:4d:b6:
         f0:f2:6a:dd:22:d4:e5:20:80:e2:6d:97:0c:6c:b9:9f:36:8f:
         6a:7e:43:25:10:63:64:32:b5:36:0f:2e:7d:a7:96:d1:09:43:
         80:26:89:6c:5d:df:6b:69:e8:bf:ff:21:3a:65:36:ed:86:74:
         06:5a:9d:c1:6a:25:65:10:a4:9b:ad:8f:33:55:a4:21:52:5e:
         fd:89:55:6f:5c:25:56:68:99:7e:ea:ba:1d:1e:b4:9f:fe:38:
         67:95:f8:c3:de:36:f0:1e:cc:c9:12:21:50:e5:54:bc:4f:2e:
         be:84:21:f3:c7:67:55:45:83:e2:bd:65:50:a5:7b:93:1a:12:
         9b:6a:dd:20:9c:78:1a:b7:d6:bc:0c:2f:9d:8b:73:6f:dc:2b:
         1f:9b:05:44:06:65:a1:fb:8d:b2:58:d7:f4:48:00:e2:51:15:
         50:84:bc:a8:48:ac:e3:da:7e:c9:d2:4e:c1:2f:67:8a:d5:6a:
         1d:8c:fc:d3:0a:92:a4:6b:30:d0:3d:bd:ef:31:1d:5f:35:01:
         ca:38:4e:f0:25:57:20:31:b7:d6:ec:ff:ba:1a:8a:3d:d8:31:
         6f:cc:8a:06:3b:e3:9d:51:e7:c4:e0:70:b9:40:96:65:16:30:
         cc:5a:27:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:55:12 2026 by rpki-client