Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9KdtdQURLJxThUnAeFNe2n2QbNCjhL4EHfA36vAUrzYs/0/323830343a323230633a3a2f33322d313238203d3e20323634353838.roa
File:                     323830343a323230633a3a2f33322d313238203d3e20323634353838.roa (raw, json)
Hash identifier:          5fQ6YrYcEwyU4H7bmhzT7zJqF++q3TrGTmhYpFTSDuw=
Subject key identifier:   00:8D:7A:32:2D:5B:04:4B:65:AA:03:B2:A9:18:ED:D8:A2:32:FF:E8
Certificate issuer:       /CN=EE549953C22F03213F45F7C4F510AF6508282A3F
Certificate serial:       5F8461320EBE8D15EE2B043DC620821CAA2B1355
Authority key identifier: EE:54:99:53:C2:2F:03:21:3F:45:F7:C4:F5:10:AF:65:08:28:2A:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE549953C22F03213F45F7C4F510AF6508282A3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9KdtdQURLJxThUnAeFNe2n2QbNCjhL4EHfA36vAUrzYs/0/323830343a323230633a3a2f33322d313238203d3e20323634353838.roa
Signing time:             Thu 30 Apr 2026 15:00:11 +0000
ROA not before:           Thu 30 Apr 2026 14:55:11 +0000
ROA not after:            Thu 29 Apr 2027 15:00:11 +0000
asID:                     264588
IP address blocks:        2804:220c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9KdtdQURLJxThUnAeFNe2n2QbNCjhL4EHfA36vAUrzYs/0/EE549953C22F03213F45F7C4F510AF6508282A3F.crl
                          rsync://rpki-repo.registro.br/repo/9KdtdQURLJxThUnAeFNe2n2QbNCjhL4EHfA36vAUrzYs/0/EE549953C22F03213F45F7C4F510AF6508282A3F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE549953C22F03213F45F7C4F510AF6508282A3F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 14:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:84:61:32:0e:be:8d:15:ee:2b:04:3d:c6:20:82:1c:aa:2b:13:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE549953C22F03213F45F7C4F510AF6508282A3F
        Validity
            Not Before: Apr 30 14:55:11 2026 GMT
            Not After : Apr 29 15:00:11 2027 GMT
        Subject: CN=008D7A322D5B044B65AA03B2A918EDD8A232FFE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:92:3a:63:d4:59:82:e8:c9:68:c7:f3:0b:f4:
                    64:0f:18:1b:35:67:2d:84:74:84:30:a4:e6:6d:8a:
                    48:47:3c:4d:b6:f3:45:c6:ca:2d:64:5b:53:49:cf:
                    24:bb:7e:a7:61:7f:ab:29:97:32:93:bb:93:82:f7:
                    2e:ac:3c:dd:c4:c2:49:5e:1b:5a:85:54:25:39:75:
                    bc:db:79:a1:f4:5c:ba:b4:02:ae:bb:b1:10:9e:d4:
                    7c:51:5c:99:ce:44:1a:67:40:0f:08:f1:05:90:64:
                    0d:9c:9b:de:df:b4:61:ed:a3:c1:64:d5:b8:7c:5c:
                    c3:a2:45:5d:1a:af:ac:58:46:b7:af:ab:91:b2:55:
                    27:a9:51:5a:55:29:dd:6b:37:e9:75:c7:fd:83:dd:
                    7f:bd:6c:2f:0c:a1:a8:8b:bb:c8:63:96:27:77:0b:
                    10:53:d2:07:14:a0:9e:71:09:2a:b4:50:41:28:5f:
                    44:45:d8:88:77:df:60:46:b8:27:16:75:85:44:ec:
                    58:b5:b0:bf:b3:83:45:ba:d7:23:e1:18:01:f3:57:
                    29:44:aa:8d:0c:ea:3d:20:23:20:ca:39:c7:a3:37:
                    00:b9:dd:3c:f2:fe:f1:e6:28:24:30:6c:0d:fb:dc:
                    34:ab:5f:26:9d:9e:25:22:dd:12:c7:46:eb:09:5e:
                    e6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:8D:7A:32:2D:5B:04:4B:65:AA:03:B2:A9:18:ED:D8:A2:32:FF:E8
            X509v3 Authority Key Identifier:
                keyid:EE:54:99:53:C2:2F:03:21:3F:45:F7:C4:F5:10:AF:65:08:28:2A:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9KdtdQURLJxThUnAeFNe2n2QbNCjhL4EHfA36vAUrzYs/0/EE549953C22F03213F45F7C4F510AF6508282A3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE549953C22F03213F45F7C4F510AF6508282A3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9KdtdQURLJxThUnAeFNe2n2QbNCjhL4EHfA36vAUrzYs/0/323830343a323230633a3a2f33322d313238203d3e20323634353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:220c::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:8e:10:ce:54:72:91:b3:4a:8d:a5:c0:2c:81:24:bf:87:94:
         4f:7e:44:3e:87:20:62:a6:d6:f4:87:a7:6e:33:5c:75:fd:c1:
         c3:43:37:5c:a5:54:a5:a4:bc:20:fa:82:46:c3:49:40:ea:9e:
         06:a3:29:0f:0d:31:47:ce:d5:60:b9:89:64:5b:8d:ce:39:58:
         6d:bd:3b:93:c6:fd:ab:57:ae:b5:2a:6e:6f:d7:47:50:09:56:
         22:74:08:76:7d:a8:8f:ae:3d:7e:16:e2:42:b5:c6:3c:1b:51:
         be:f7:ca:fb:68:05:84:79:5d:92:b7:72:7a:73:53:03:c0:fd:
         08:dc:6b:ce:e1:06:80:23:27:22:d2:7c:08:3b:85:ba:6b:38:
         bd:24:c4:95:60:7f:9b:52:2b:29:19:d5:f6:ec:a1:f5:5f:ca:
         bc:98:0b:1b:fb:98:c0:c0:3b:24:c5:b5:27:44:2c:db:8d:64:
         2d:7a:43:0a:0f:c3:1e:84:e2:92:7f:2d:07:93:66:7c:75:4b:
         f1:b7:75:c5:ef:c3:01:3c:99:e9:64:8d:93:7f:52:8e:f5:27:
         e8:3d:04:78:51:b2:5c:cf:32:2c:af:02:45:b1:30:05:e8:6d:
         af:71:95:16:0c:21:4c:90:24:88:c3:d8:2a:33:9d:72:df:03:
         2a:cf:91:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:58:08 2026 by rpki-client