Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a383030303a3a2f33342d3334203d3e20323638313331.roa
File:                     323830343a353837383a383030303a3a2f33342d3334203d3e20323638313331.roa (raw, json)
Hash identifier:          pMHnFBUfO8TEgXcS1YOnFXAn+6wbfxogt4tigNUSQHI=
Subject key identifier:   85:C5:C3:76:F6:70:45:20:02:09:42:CB:D7:54:36:E2:99:2B:40:46
Certificate issuer:       /CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
Certificate serial:       5BBBCDBE82DE821F56E63E36B13075D20E8AFA6E
Authority key identifier: A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a383030303a3a2f33342d3334203d3e20323638313331.roa
Signing time:             Tue 05 May 2026 17:09:38 +0000
ROA not before:           Tue 05 May 2026 17:04:38 +0000
ROA not after:            Tue 04 May 2027 17:09:38 +0000
asID:                     268131
IP address blocks:        2804:5878:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl
                          rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 03:34:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:bb:cd:be:82:de:82:1f:56:e6:3e:36:b1:30:75:d2:0e:8a:fa:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
        Validity
            Not Before: May  5 17:04:38 2026 GMT
            Not After : May  4 17:09:38 2027 GMT
        Subject: CN=85C5C376F6704520020942CBD75436E2992B4046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9c:e2:ef:9f:ab:85:8c:4a:7b:fd:58:dc:0d:
                    59:78:26:21:68:36:30:75:37:3d:5c:2f:59:4e:78:
                    fa:9d:1d:7a:84:a2:a7:d8:df:23:0d:65:2a:e7:fa:
                    36:c4:29:4c:4a:1d:26:0a:4b:a1:74:3e:a1:dd:8a:
                    1f:83:eb:d3:40:4b:1f:63:37:46:b7:d4:f2:4f:95:
                    c6:71:40:f3:fc:c3:de:8c:12:d7:bc:1b:33:50:ac:
                    05:6f:d5:f5:86:32:3e:e4:58:ff:21:98:d4:45:09:
                    95:7e:3e:29:36:82:f9:b6:f8:a1:b1:51:d8:eb:5e:
                    8a:14:ac:c4:e2:14:cc:30:d8:45:4e:b6:37:f5:20:
                    d9:b5:77:e0:20:3e:a1:e4:db:51:26:50:27:c3:86:
                    8a:72:c7:01:66:15:5b:2a:f0:96:f1:57:00:09:8e:
                    a9:9f:ec:09:d3:ea:aa:ab:11:f8:58:e4:be:85:d3:
                    d4:d6:56:c8:7c:d3:62:16:20:89:3d:ba:63:bd:53:
                    82:4e:84:7b:50:da:8a:a6:5e:e9:b2:1e:e7:6d:73:
                    4a:d1:89:f1:a9:e9:7e:ad:65:fc:cf:a0:2b:4b:86:
                    2a:e6:4c:f7:fd:dc:64:fb:d2:b0:10:1c:e5:c9:f8:
                    87:c9:c5:19:a7:da:e4:d2:e8:55:7c:e5:fb:d4:fc:
                    ba:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C5:C3:76:F6:70:45:20:02:09:42:CB:D7:54:36:E2:99:2B:40:46
            X509v3 Authority Key Identifier:
                keyid:A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a383030303a3a2f33342d3334203d3e20323638313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5878:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         93:46:b5:5f:2f:0e:98:43:47:17:85:22:80:20:06:89:a2:c6:
         63:b5:31:c5:25:c4:98:b8:bf:52:fa:26:40:24:81:d7:3b:34:
         4b:07:3c:b3:58:42:5c:c6:c0:06:04:33:c8:ff:18:b8:cb:e5:
         18:dd:84:5b:48:38:09:b9:d9:96:80:43:af:3f:58:cc:6a:7a:
         62:e5:ae:2c:69:d5:b3:f4:45:66:6d:4d:94:6f:2d:eb:93:40:
         84:59:43:4a:9e:a1:36:26:83:ac:83:b9:9a:88:1f:88:be:71:
         e9:c8:4d:c5:51:d3:30:a9:5d:bf:fa:cd:6b:ce:cf:cb:47:8f:
         97:0b:9b:bd:66:b0:25:ac:32:d5:b5:40:f1:24:e0:18:83:81:
         33:18:65:65:20:e7:1e:1c:a8:7a:38:f7:c2:b1:bb:24:a2:4e:
         e8:db:34:56:99:44:3b:0f:0f:92:5f:1c:47:5a:29:fa:0d:4f:
         0c:96:cb:65:83:c2:48:74:cd:92:45:70:f4:a1:2a:e2:00:94:
         47:59:01:6f:61:8e:91:4c:24:b9:af:2d:fc:6d:60:de:75:da:
         a1:e8:60:98:08:e0:0b:e8:5c:52:c9:aa:09:ae:70:74:d6:79:
         e4:a4:8e:fc:ec:75:e0:84:4b:01:9c:a4:83:a9:ac:f8:d3:d5:
         7d:5c:bd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:47:53 2026 by rpki-client