Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/323830343a386538633a3a2f33322d3332203d3e20323733343333.roa
File:                     323830343a386538633a3a2f33322d3332203d3e20323733343333.roa (raw, json)
Hash identifier:          cfjfRWNwKN/N+UOBnbrCSS7ITr2IvrlprKg1za4Voyo=
Subject key identifier:   40:ED:5D:8F:C6:51:73:48:5B:DB:C0:EA:9A:70:D9:48:82:90:24:A6
Certificate issuer:       /CN=52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E
Certificate serial:       45E6B88656F18EBB51352633A3F4DD3C8B70CCFC
Authority key identifier: 52:FD:38:C5:D0:DF:36:5C:D8:DE:3B:D1:DD:0E:92:C1:A6:B6:9F:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/323830343a386538633a3a2f33322d3332203d3e20323733343333.roa
Signing time:             Mon 04 May 2026 15:39:00 +0000
ROA not before:           Mon 04 May 2026 15:34:00 +0000
ROA not after:            Mon 03 May 2027 15:39:00 +0000
asID:                     273433
IP address blocks:        2804:8e8c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.crl
                          rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 02:14:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e6:b8:86:56:f1:8e:bb:51:35:26:33:a3:f4:dd:3c:8b:70:cc:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E
        Validity
            Not Before: May  4 15:34:00 2026 GMT
            Not After : May  3 15:39:00 2027 GMT
        Subject: CN=40ED5D8FC65173485BDBC0EA9A70D948829024A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:63:40:f7:cd:3f:ab:bd:7d:b1:3a:33:62:b0:
                    a5:8a:e0:1f:39:1d:3e:e1:72:88:02:bb:06:82:dd:
                    67:be:8f:86:4e:54:67:a8:02:38:cf:96:1d:e6:9c:
                    9c:37:ca:57:0d:a4:4c:e1:24:ad:4b:a7:86:55:cb:
                    cf:af:aa:99:5e:49:48:3b:61:e5:56:d7:7f:78:58:
                    cb:44:77:21:1b:e7:59:89:c9:b2:bf:42:0d:21:ea:
                    cc:0b:43:8c:e9:81:eb:b3:83:7a:89:d7:7c:6e:22:
                    4f:56:f6:1c:74:f3:5d:58:fb:90:1a:c7:7a:0d:c2:
                    34:a4:6a:d3:5b:4b:a3:c1:b5:a5:a5:05:72:f4:19:
                    a3:f7:21:88:be:30:cf:5a:eb:07:a7:d3:d5:f3:a0:
                    6a:e6:3c:7e:9e:53:07:2f:4b:16:9f:52:10:52:3d:
                    14:9c:c4:ff:b2:66:c5:42:d9:c8:a1:7e:34:0b:00:
                    9f:52:10:02:c8:b1:6d:79:26:d6:36:0e:b1:ec:ae:
                    00:f6:f5:cc:9c:70:74:55:87:eb:ff:28:aa:0b:ae:
                    10:01:95:46:bc:2d:d1:f4:52:be:e1:c4:a7:ec:72:
                    c1:cb:de:11:57:bc:46:68:27:a3:4a:48:ba:a7:ed:
                    2e:7f:2d:bd:96:42:df:2e:54:33:fc:7b:ab:00:49:
                    08:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:ED:5D:8F:C6:51:73:48:5B:DB:C0:EA:9A:70:D9:48:82:90:24:A6
            X509v3 Authority Key Identifier:
                keyid:52:FD:38:C5:D0:DF:36:5C:D8:DE:3B:D1:DD:0E:92:C1:A6:B6:9F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/323830343a386538633a3a2f33322d3332203d3e20323733343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:e4:19:48:a2:19:6b:1b:a1:62:08:a8:0b:ba:a2:19:eb:07:
         7e:55:bc:c7:73:2a:31:b0:9f:8e:4f:0d:d6:6e:b4:bf:1c:ab:
         3f:11:66:34:8f:b4:60:8b:4a:cf:01:e6:3b:c9:44:b6:f1:1d:
         3b:c1:a2:f3:b3:1d:d0:5f:15:26:01:2b:22:55:24:21:07:e6:
         35:31:60:83:17:ec:fa:a0:f7:d1:82:46:60:87:9b:74:c8:47:
         5b:b2:f6:a3:4a:0f:cc:44:36:96:f5:a5:84:87:e9:f7:73:09:
         5b:b3:8e:4f:ae:49:24:e8:8d:da:93:31:f4:4a:da:55:b3:f5:
         f2:da:2b:ee:b1:db:6c:31:c2:a6:0a:94:82:9f:24:e3:90:5b:
         63:41:01:60:00:75:1a:cf:37:8e:44:dc:71:9f:ed:d9:47:35:
         e2:95:79:32:df:e0:ae:3d:51:13:4f:ae:c8:25:6f:f0:8a:14:
         8f:33:ae:ea:b1:96:41:be:9b:b6:c7:42:9d:22:fc:04:3a:8b:
         07:ba:5f:a5:18:41:89:5c:ec:49:5e:83:5d:b1:c3:e4:23:8c:
         66:e1:39:05:40:90:37:cb:30:fd:69:58:e6:9b:40:cf:66:d7:
         40:ec:dc:f9:6a:8f:ff:bf:6f:95:45:95:b6:61:69:46:ad:58:
         47:cb:7c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:17:55 2026 by rpki-client