Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a3a2f33342d3334203d3e20323638313331.roa
File:                     323830343a353837383a3a2f33342d3334203d3e20323638313331.roa (raw, json)
Hash identifier:          HwODV17VGbVreKNTF/bFQMSt3kZcAFy1Fp403+jTK4U=
Subject key identifier:   5B:31:A8:AF:23:63:67:05:35:40:44:CB:D1:A1:27:50:00:EE:46:1B
Certificate issuer:       /CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
Certificate serial:       2C65EF41CF079E8C10903E7B8B3861CB1FF89FD0
Authority key identifier: A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a3a2f33342d3334203d3e20323638313331.roa
Signing time:             Tue 05 May 2026 17:09:40 +0000
ROA not before:           Tue 05 May 2026 17:04:40 +0000
ROA not after:            Tue 04 May 2027 17:09:40 +0000
asID:                     268131
IP address blocks:        2804:5878::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl
                          rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 03:34:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:65:ef:41:cf:07:9e:8c:10:90:3e:7b:8b:38:61:cb:1f:f8:9f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
        Validity
            Not Before: May  5 17:04:40 2026 GMT
            Not After : May  4 17:09:40 2027 GMT
        Subject: CN=5B31A8AF23636705354044CBD1A1275000EE461B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e3:bf:0d:72:92:c2:1e:1c:ae:f5:cb:89:92:
                    b8:56:4b:2a:bb:88:83:1f:cd:d3:e0:6f:cd:cf:75:
                    1e:c9:a4:2d:f9:06:29:61:39:af:54:ef:c7:1b:1d:
                    70:06:e2:81:25:02:9b:c9:7d:e5:60:50:80:5c:c1:
                    f7:cb:41:a7:e5:70:71:c6:8f:e9:ee:68:be:66:58:
                    4c:6a:58:a3:f3:e8:38:ff:71:e7:cc:03:bf:c2:b7:
                    96:f2:c0:af:ac:e1:be:22:ec:c8:eb:fa:c8:11:7e:
                    c8:37:31:7b:13:ed:a3:e5:ff:78:21:94:17:10:52:
                    06:fd:ed:f0:ca:b3:98:0e:74:14:83:68:e5:1f:a2:
                    c7:33:b4:de:2b:ca:32:b1:4e:1d:bd:3f:ff:52:db:
                    74:c0:a4:db:01:3b:6d:09:3f:4b:cc:3d:b5:f1:25:
                    f3:60:06:22:44:56:56:df:af:7e:80:fa:d6:ea:5f:
                    b1:ca:e9:52:0d:6d:7c:80:03:7a:b5:84:77:ff:2c:
                    be:e5:4f:eb:7c:6d:d1:d7:df:0a:9d:92:ee:40:21:
                    f1:2e:5d:64:bb:b2:40:23:33:d9:35:43:d3:b5:73:
                    7b:a2:9f:db:9c:ca:c8:32:cf:d5:95:f6:fe:dd:04:
                    6e:47:19:74:04:15:fa:50:ee:00:ba:6e:4b:70:f2:
                    b9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:31:A8:AF:23:63:67:05:35:40:44:CB:D1:A1:27:50:00:EE:46:1B
            X509v3 Authority Key Identifier:
                keyid:A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a3a2f33342d3334203d3e20323638313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5878::/34

    Signature Algorithm: sha256WithRSAEncryption
         5d:12:1f:ce:75:c1:08:b7:15:82:48:fd:3e:85:37:7b:c8:a3:
         ca:40:4c:18:27:e8:d2:02:e5:0b:bd:14:d0:e0:a2:3e:b8:e0:
         14:76:69:70:15:73:0f:f2:dd:ae:03:74:96:a3:3c:b0:0f:6e:
         9c:99:a1:55:d2:7f:15:df:fb:44:8f:dd:9c:57:fc:c0:04:51:
         07:2c:d6:8b:3a:b4:3a:39:64:2c:07:ac:d6:5b:5f:92:88:a1:
         58:83:cc:9f:70:57:84:eb:52:32:9e:94:15:53:db:f4:dd:57:
         35:be:1f:c4:ae:b0:c4:f7:db:84:e5:c5:57:3d:94:a6:f4:d2:
         d0:23:51:26:21:e4:ab:c5:5f:e6:67:30:2f:24:65:99:28:ab:
         dd:f7:f9:ff:15:e2:6b:3a:22:36:ed:98:bc:57:1f:91:e5:1c:
         4c:8d:16:04:f6:99:77:02:69:3c:d5:a6:87:cd:8a:76:16:7e:
         3f:80:4f:94:25:43:f1:ad:33:58:8b:e4:6d:0c:9d:da:05:11:
         0a:52:7b:e7:80:ed:19:71:6d:0d:5b:b5:3d:b2:dd:cd:ad:6f:
         e9:2d:7c:0d:70:66:e2:09:36:27:31:d3:1a:d8:97:27:a2:27:
         66:69:a7:25:08:f2:13:a2:b1:0a:5e:f3:dd:fd:c8:a9:d9:cb:
         cc:07:d9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:34:09 2026 by rpki-client