Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/323830343a313130633a3a2f33322d3332203d3e203532373030.roa
File:                     323830343a313130633a3a2f33322d3332203d3e203532373030.roa (raw, json)
Hash identifier:          BF6VrDdXvDeuy0UzpLQGjhmBebY0Gu7ps/7P5TrWy8A=
Subject key identifier:   82:BD:9B:36:7C:9C:41:EC:06:B1:E1:36:7E:E6:0D:A9:71:0F:87:EB
Certificate issuer:       /CN=65F3CDB8B2C1A309B5522539AA0030CB2F76B29A
Certificate serial:       079AF27A6589C0A9C1268A793A8037D1F9D8017B
Authority key identifier: 65:F3:CD:B8:B2:C1:A3:09:B5:52:25:39:AA:00:30:CB:2F:76:B2:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65F3CDB8B2C1A309B5522539AA0030CB2F76B29A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/323830343a313130633a3a2f33322d3332203d3e203532373030.roa
Signing time:             Wed 06 May 2026 12:23:00 +0000
ROA not before:           Wed 06 May 2026 12:18:00 +0000
ROA not after:            Wed 05 May 2027 12:23:00 +0000
asID:                     52700
IP address blocks:        2804:110c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/65F3CDB8B2C1A309B5522539AA0030CB2F76B29A.crl
                          rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/65F3CDB8B2C1A309B5522539AA0030CB2F76B29A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65F3CDB8B2C1A309B5522539AA0030CB2F76B29A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 06:24:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:9a:f2:7a:65:89:c0:a9:c1:26:8a:79:3a:80:37:d1:f9:d8:01:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65F3CDB8B2C1A309B5522539AA0030CB2F76B29A
        Validity
            Not Before: May  6 12:18:00 2026 GMT
            Not After : May  5 12:23:00 2027 GMT
        Subject: CN=82BD9B367C9C41EC06B1E1367EE60DA9710F87EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6d:6b:44:00:25:b0:eb:d6:14:bc:62:44:41:
                    d4:9f:8f:f1:8f:c0:5e:12:86:3f:33:8b:f2:74:c2:
                    ac:11:02:e8:c8:e1:cf:2d:0f:57:3a:53:46:b5:30:
                    f7:49:38:b5:0a:52:21:3c:81:9e:5f:92:f7:5f:44:
                    cb:c9:b3:7f:41:bf:eb:1c:00:01:09:95:e0:29:7a:
                    61:88:7c:be:f1:83:8d:26:a9:0e:ea:2c:62:0d:79:
                    07:e5:07:b9:c4:a4:2f:42:e9:f8:66:02:3d:36:a4:
                    3b:47:a1:55:5a:12:0f:3f:9a:03:5a:b3:1c:87:77:
                    22:a9:e8:41:46:b3:6a:ea:2b:a1:f8:37:bf:9c:35:
                    5a:d4:1f:53:a0:5e:a7:30:60:00:6d:0d:16:19:40:
                    7e:24:3a:87:35:a3:fd:b1:f8:ea:c6:eb:7a:2a:8d:
                    0c:23:a4:a5:55:2b:fc:ff:8f:9e:9e:ef:5e:60:02:
                    67:74:8b:08:c4:3d:7a:ce:7d:48:d4:a0:5e:22:ea:
                    af:fc:61:45:86:0b:98:d5:d3:c6:86:e1:7c:ba:f0:
                    7f:f7:96:67:86:04:af:09:67:d7:98:2d:a3:c3:82:
                    aa:73:cf:b6:35:83:f9:80:f0:3d:1a:b1:6f:53:75:
                    e1:d7:d2:d2:be:94:be:b6:9c:9d:85:bb:c8:51:07:
                    09:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:BD:9B:36:7C:9C:41:EC:06:B1:E1:36:7E:E6:0D:A9:71:0F:87:EB
            X509v3 Authority Key Identifier:
                keyid:65:F3:CD:B8:B2:C1:A3:09:B5:52:25:39:AA:00:30:CB:2F:76:B2:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/65F3CDB8B2C1A309B5522539AA0030CB2F76B29A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65F3CDB8B2C1A309B5522539AA0030CB2F76B29A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/323830343a313130633a3a2f33322d3332203d3e203532373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:110c::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:ce:20:f0:3c:e9:50:66:e6:3f:e5:e6:1f:d3:c4:bd:1e:52:
         48:2e:ae:97:62:d5:bf:ea:36:13:07:c9:a0:91:07:a5:4f:ac:
         2b:f1:6a:b1:c9:56:dc:dd:76:58:5c:10:22:35:ed:2b:7b:76:
         11:b8:2a:dd:eb:af:db:12:63:ed:e0:02:41:42:9f:98:c1:15:
         5e:e9:73:f0:2b:a2:82:e6:63:4c:d2:cd:57:e5:2d:ce:f7:34:
         1a:b7:49:32:4b:64:24:15:6a:56:82:eb:31:76:dd:fe:13:6f:
         b1:7c:8d:fa:e5:1e:15:51:8c:aa:dd:c8:3a:4f:17:ad:20:49:
         c9:4a:a9:f3:67:d7:35:20:15:a6:73:6f:01:ac:9a:84:8b:cb:
         bb:92:df:d3:73:60:34:79:82:21:c6:42:4e:70:be:7a:f1:55:
         10:2a:af:23:a2:8a:d5:55:37:9d:0e:e9:ce:f1:ba:0c:ef:3e:
         9a:61:d0:fa:cf:d6:d4:ba:48:f9:2b:0a:90:bc:ee:1a:72:9b:
         3c:5a:9f:fb:81:9a:2a:09:80:aa:9d:71:ea:99:aa:2f:6c:73:
         f7:16:b8:9a:b3:70:eb:70:ad:ba:7d:bd:fa:f5:16:71:ce:6d:
         67:f7:ed:e0:c7:a9:d3:8f:23:66:79:7b:f0:a8:58:38:0d:37:
         e9:a6:e2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:39:40 2026 by rpki-client