Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6RVar3sUGwuqQEAHvmeQ2rCFtCBabXP3toZaDCQtuWjP/0/323830343a393434633a3a2f33322d3438203d3e20323734383334.roa
File:                     323830343a393434633a3a2f33322d3438203d3e20323734383334.roa (raw, json)
Hash identifier:          1KaW3ulA4/VAycFMAc8T0R9OhVIZ8v4liVAtxyO9lYk=
Subject key identifier:   14:DB:5C:17:5F:D3:5E:3D:03:37:B4:7E:E5:24:B3:87:AF:D8:1F:16
Certificate issuer:       /CN=5E145D0D94E884F8DBE03306345F8FD4E0A337B2
Certificate serial:       03322155960BDC29CFC4D3E0314DF5EFD01C5637
Authority key identifier: 5E:14:5D:0D:94:E8:84:F8:DB:E0:33:06:34:5F:8F:D4:E0:A3:37:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E145D0D94E884F8DBE03306345F8FD4E0A337B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6RVar3sUGwuqQEAHvmeQ2rCFtCBabXP3toZaDCQtuWjP/0/323830343a393434633a3a2f33322d3438203d3e20323734383334.roa
Signing time:             Thu 23 Apr 2026 14:40:17 +0000
ROA not before:           Thu 23 Apr 2026 14:35:17 +0000
ROA not after:            Thu 22 Apr 2027 14:40:17 +0000
asID:                     274834
IP address blocks:        2804:944c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6RVar3sUGwuqQEAHvmeQ2rCFtCBabXP3toZaDCQtuWjP/0/5E145D0D94E884F8DBE03306345F8FD4E0A337B2.crl
                          rsync://rpki-repo.registro.br/repo/6RVar3sUGwuqQEAHvmeQ2rCFtCBabXP3toZaDCQtuWjP/0/5E145D0D94E884F8DBE03306345F8FD4E0A337B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E145D0D94E884F8DBE03306345F8FD4E0A337B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 02:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:32:21:55:96:0b:dc:29:cf:c4:d3:e0:31:4d:f5:ef:d0:1c:56:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E145D0D94E884F8DBE03306345F8FD4E0A337B2
        Validity
            Not Before: Apr 23 14:35:17 2026 GMT
            Not After : Apr 22 14:40:17 2027 GMT
        Subject: CN=14DB5C175FD35E3D0337B47EE524B387AFD81F16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bc:6c:f8:c2:08:93:63:16:e4:65:4a:c1:09:
                    32:72:d8:d8:3f:aa:85:a8:00:7c:0c:96:b3:3e:48:
                    64:a5:13:d5:f7:b3:79:b5:d1:1f:60:d3:79:dc:f6:
                    6e:a4:6a:40:86:30:2d:bb:16:0b:76:3f:8b:80:35:
                    fe:7e:1d:71:06:a4:b8:3a:87:67:c8:10:1f:a2:44:
                    3d:87:5c:76:f5:42:eb:fa:d8:be:36:44:93:15:18:
                    09:d1:0e:ca:26:a0:d7:cc:d7:e9:af:f0:b5:0c:6e:
                    de:26:db:a9:d1:16:2c:c1:00:e9:c5:bb:f8:31:51:
                    f5:c3:c8:2e:35:0b:ad:3b:47:fd:ce:3d:68:6c:5c:
                    34:ce:6e:f6:ba:2a:7f:6e:0c:46:69:75:fb:24:5e:
                    da:81:25:f7:b1:4e:e5:58:13:b5:95:ee:57:37:14:
                    38:d3:d8:a0:84:73:0d:b3:f7:d8:82:f0:65:97:6e:
                    d4:17:b0:c9:f0:9d:0e:29:09:24:71:3a:9c:61:4a:
                    ee:a1:42:0b:db:2b:b0:4d:d1:5b:20:9f:70:cc:a9:
                    da:5c:ee:f1:0f:69:a8:e1:29:64:cc:3c:3d:f5:87:
                    bb:5e:15:54:39:5e:86:6b:96:a9:c0:69:19:19:81:
                    3d:f5:c8:5a:ad:bd:83:85:b5:fc:5b:dd:bd:48:2c:
                    f4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:DB:5C:17:5F:D3:5E:3D:03:37:B4:7E:E5:24:B3:87:AF:D8:1F:16
            X509v3 Authority Key Identifier:
                keyid:5E:14:5D:0D:94:E8:84:F8:DB:E0:33:06:34:5F:8F:D4:E0:A3:37:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6RVar3sUGwuqQEAHvmeQ2rCFtCBabXP3toZaDCQtuWjP/0/5E145D0D94E884F8DBE03306345F8FD4E0A337B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E145D0D94E884F8DBE03306345F8FD4E0A337B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6RVar3sUGwuqQEAHvmeQ2rCFtCBabXP3toZaDCQtuWjP/0/323830343a393434633a3a2f33322d3438203d3e20323734383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:944c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:16:40:24:18:e7:40:ae:6a:99:df:1f:e5:86:82:f2:4d:b7:
         eb:f5:a9:9e:ba:c6:88:2d:26:9d:14:23:39:95:cb:2e:b6:27:
         67:e7:d7:d0:19:a8:f7:97:47:0b:0f:64:d4:e1:87:fe:d7:7c:
         ec:86:b2:f9:17:b0:9b:fc:8d:2a:9d:90:62:72:a2:6f:af:11:
         9e:8a:e7:b9:9f:a6:c0:7b:5a:b6:90:4b:79:20:d2:b9:7b:9a:
         cd:a1:04:bc:31:db:c5:ce:41:49:14:b7:17:ee:8e:92:4d:c7:
         00:9a:77:90:a0:7e:ba:de:03:a2:ef:78:07:c1:3d:1d:61:86:
         99:f3:a4:33:09:d4:c0:33:a2:a1:6d:85:6e:a4:8e:57:1c:b2:
         03:34:e7:3b:07:84:cd:8c:21:bc:6d:0c:7a:ad:62:00:68:98:
         b5:39:18:72:be:06:47:99:cd:08:9b:76:d8:61:5a:d1:b3:46:
         9e:a3:1a:e6:84:f3:1d:7e:26:49:cd:dd:d3:61:b4:88:93:fc:
         c0:4c:35:a8:0b:e3:6b:c5:53:25:2c:34:33:14:58:89:36:2d:
         4e:06:b3:bd:f8:5f:59:96:d3:2e:7c:91:56:37:9d:c9:f9:2a:
         50:90:25:0e:a0:0b:77:71:88:32:80:b1:52:3c:90:76:b0:4c:
         2b:f6:46:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:35:44 2026 by rpki-client