Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/323830343a326637633a3a2f33322d3430203d3e20323634383934.roa
File:                     323830343a326637633a3a2f33322d3430203d3e20323634383934.roa (raw, json)
Hash identifier:          4TXSCUIUEO7Zw09/o5yxTywrm2ZViQqCQ4DatFwELkc=
Subject key identifier:   C8:91:F2:12:04:7E:13:37:AD:B4:E5:34:92:94:EF:1B:B5:0F:33:93
Certificate issuer:       /CN=5534C39A465F9E5D47762E20F30C75897285DDAF
Certificate serial:       4C2D053F32969BE952E23B1B6C9C0644EE3BA571
Authority key identifier: 55:34:C3:9A:46:5F:9E:5D:47:76:2E:20:F3:0C:75:89:72:85:DD:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/323830343a326637633a3a2f33322d3430203d3e20323634383934.roa
Signing time:             Thu 30 Apr 2026 20:00:26 +0000
ROA not before:           Thu 30 Apr 2026 19:55:26 +0000
ROA not after:            Thu 29 Apr 2027 20:00:26 +0000
asID:                     264894
IP address blocks:        2804:2f7c::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.crl
                          rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:56:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:2d:05:3f:32:96:9b:e9:52:e2:3b:1b:6c:9c:06:44:ee:3b:a5:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5534C39A465F9E5D47762E20F30C75897285DDAF
        Validity
            Not Before: Apr 30 19:55:26 2026 GMT
            Not After : Apr 29 20:00:26 2027 GMT
        Subject: CN=C891F212047E1337ADB4E5349294EF1BB50F3393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2a:93:d7:f5:ce:7a:25:ee:b8:79:1c:f3:2a:
                    e0:a9:06:71:ec:15:12:3c:1b:39:c4:55:59:bc:07:
                    32:08:9c:64:bc:25:5a:d6:09:9a:7f:c2:17:f3:70:
                    d5:f7:93:ac:49:48:59:be:eb:73:92:cc:dc:c8:d1:
                    99:ba:dd:04:81:74:4e:57:f2:58:a3:74:9a:28:d8:
                    88:23:41:c6:de:9d:58:23:69:71:af:cf:4b:e0:1d:
                    a0:24:26:c5:dc:3d:9d:a1:9b:69:2e:27:21:78:bc:
                    a4:46:7d:94:28:76:d2:d4:b8:ad:4d:23:41:5b:b8:
                    95:d3:f4:b7:94:0d:08:1d:15:08:c1:1b:ed:64:c4:
                    a3:7d:81:17:47:4c:26:d9:44:41:6a:5c:d5:e6:02:
                    6a:54:74:c8:72:89:00:55:c0:7f:bc:0e:d8:05:9d:
                    38:cd:a9:f0:72:2d:d4:45:68:ce:27:df:99:3e:9d:
                    6c:18:6e:54:d4:9c:bb:db:8a:f3:9f:ea:c0:e6:67:
                    be:a1:3a:47:4e:d6:d8:87:86:4d:0a:40:4f:4c:c1:
                    8a:bd:7e:bf:b2:78:c4:b1:32:80:05:25:ba:78:7c:
                    8e:35:d4:8e:ad:81:72:bd:2a:a6:7a:24:78:4c:e7:
                    ed:1b:a7:30:20:1a:69:78:57:65:a4:10:5a:ff:8f:
                    b8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:91:F2:12:04:7E:13:37:AD:B4:E5:34:92:94:EF:1B:B5:0F:33:93
            X509v3 Authority Key Identifier:
                keyid:55:34:C3:9A:46:5F:9E:5D:47:76:2E:20:F3:0C:75:89:72:85:DD:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/323830343a326637633a3a2f33322d3430203d3e20323634383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:b0:f9:9d:58:93:18:1a:d4:5e:c9:56:ee:77:1f:63:3a:dc:
         17:3c:3a:2d:59:5e:1d:0e:92:7e:9c:60:d5:94:de:de:25:a7:
         e1:6d:33:67:82:26:97:82:b6:5e:da:89:fe:e8:53:cd:f0:ac:
         fd:67:3f:03:cf:d3:0d:89:c7:48:da:0d:26:a1:42:5b:8e:41:
         37:0b:15:da:be:30:81:26:07:87:21:37:74:f3:3f:94:e7:3b:
         5e:fa:2e:f2:fe:80:68:fd:fe:10:d6:7c:c0:b8:20:ea:97:dc:
         82:55:9a:00:10:e6:db:6c:81:8c:be:d7:1f:9c:41:3e:56:78:
         f7:5c:64:20:7d:e0:1a:99:2f:c5:df:c9:78:c2:17:08:48:0d:
         16:b2:f3:47:d2:2e:c0:c8:fc:08:ea:09:c0:c6:b1:2e:79:65:
         ff:26:c8:da:5d:68:43:a5:66:66:3b:a7:e9:59:0d:98:92:8c:
         16:7d:b3:66:65:1c:a0:56:b5:0b:ba:5b:0e:ae:81:19:c3:42:
         1c:ec:0f:39:d2:b7:7a:5f:fc:23:a7:ea:da:4e:fb:37:87:17:
         b9:f7:fa:36:56:33:c6:47:f9:34:86:50:ca:34:4a:6d:bf:e8:
         19:da:81:b4:49:79:7a:e1:19:39:2b:39:61:c7:3f:11:3f:15:
         03:96:79:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:16:36 2026 by rpki-client