Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/0/323830343a366262383a3a2f33322d3438203d3e20323730343139.roa
File:                     323830343a366262383a3a2f33322d3438203d3e20323730343139.roa (raw, json)
Hash identifier:          WTapPwMSNNvI1cyB9D8bzJBx5d9cJSDtX7A7vDmbwYk=
Subject key identifier:   44:DC:AE:3C:3E:1A:C2:B3:F6:6D:B9:24:64:F6:27:EC:32:EE:9B:97
Certificate issuer:       /CN=50D550C4971BCF7DFC6692EB9FF38CFDC5444C81
Certificate serial:       71D2A4372B94D49EEA284472851B5B4368F621C1
Authority key identifier: 50:D5:50:C4:97:1B:CF:7D:FC:66:92:EB:9F:F3:8C:FD:C5:44:4C:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50D550C4971BCF7DFC6692EB9FF38CFDC5444C81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/0/323830343a366262383a3a2f33322d3438203d3e20323730343139.roa
Signing time:             Thu 30 Apr 2026 17:55:59 +0000
ROA not before:           Thu 30 Apr 2026 17:50:59 +0000
ROA not after:            Thu 29 Apr 2027 17:55:59 +0000
asID:                     270419
IP address blocks:        2804:6bb8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/0/50D550C4971BCF7DFC6692EB9FF38CFDC5444C81.crl
                          rsync://rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/0/50D550C4971BCF7DFC6692EB9FF38CFDC5444C81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50D550C4971BCF7DFC6692EB9FF38CFDC5444C81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 19:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d2:a4:37:2b:94:d4:9e:ea:28:44:72:85:1b:5b:43:68:f6:21:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50D550C4971BCF7DFC6692EB9FF38CFDC5444C81
        Validity
            Not Before: Apr 30 17:50:59 2026 GMT
            Not After : Apr 29 17:55:59 2027 GMT
        Subject: CN=44DCAE3C3E1AC2B3F66DB92464F627EC32EE9B97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b4:34:cb:5b:5b:d4:30:34:f0:7b:6e:cc:fd:
                    cf:1a:57:53:f5:49:83:1a:db:af:90:c8:b7:bb:bb:
                    61:a0:b1:d7:b0:e7:af:40:31:e9:c1:1e:c1:c1:ab:
                    11:b7:5a:63:51:51:1d:a4:81:b6:e8:5a:af:ff:4c:
                    d8:ca:d8:21:27:14:25:67:0e:89:e2:f5:2a:02:5e:
                    a8:71:39:83:35:a0:3e:64:10:22:32:8f:b0:22:33:
                    c2:b1:36:c5:c5:9e:57:b4:62:12:1d:31:4d:23:14:
                    ef:d1:54:09:0e:67:9a:ff:27:af:9f:70:ea:2f:11:
                    d0:84:33:0a:84:08:fb:c0:67:df:c2:6e:c1:ed:70:
                    2e:81:6d:59:13:86:54:db:b4:ea:43:eb:5f:c1:75:
                    5d:db:57:22:27:d2:81:85:9a:2c:ab:5a:20:1d:0e:
                    a5:fd:73:a6:15:44:b1:96:7f:a8:45:34:1b:80:27:
                    3d:b8:db:4b:6d:2a:21:cc:cf:6b:65:87:3b:9c:63:
                    fb:f0:e2:b6:fe:b3:29:aa:95:b9:62:2e:d6:cb:c7:
                    85:a8:c7:d5:4e:d7:a3:71:b0:92:c6:e3:47:3b:aa:
                    26:6b:8f:3d:38:b6:6e:5a:23:8a:a5:da:0c:42:00:
                    64:df:8e:6c:24:6e:7e:d2:b4:6d:18:be:7a:f1:ee:
                    be:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DC:AE:3C:3E:1A:C2:B3:F6:6D:B9:24:64:F6:27:EC:32:EE:9B:97
            X509v3 Authority Key Identifier:
                keyid:50:D5:50:C4:97:1B:CF:7D:FC:66:92:EB:9F:F3:8C:FD:C5:44:4C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/0/50D550C4971BCF7DFC6692EB9FF38CFDC5444C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50D550C4971BCF7DFC6692EB9FF38CFDC5444C81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/0/323830343a366262383a3a2f33322d3438203d3e20323730343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:17:46:80:9d:4b:cf:d7:3a:c6:aa:18:16:67:64:ce:b4:7b:
         dc:8f:3e:f8:e3:c5:db:1a:5a:0e:b4:8f:9a:c8:6e:6c:c7:bd:
         b5:5f:ea:9d:99:5a:16:17:9f:db:ce:f7:4b:b9:48:b9:71:6d:
         a5:d2:d7:cd:ca:33:f2:c3:f0:f2:bf:96:a2:b1:1e:4b:36:1b:
         bf:7c:e6:1e:84:6c:21:cf:0b:76:ac:06:6c:81:42:da:5c:04:
         ca:d9:1e:c4:e1:84:98:cb:bc:1a:be:2e:8a:00:a7:19:4a:37:
         ed:c3:57:62:e0:6c:d2:26:51:ab:07:17:9a:18:0e:22:66:a3:
         6e:de:72:01:73:5c:96:8c:20:c1:3c:17:7d:42:fa:a3:7a:82:
         e9:83:d6:1b:eb:4a:92:2c:d5:e7:e7:c4:2a:1e:e3:6d:20:de:
         ee:e6:27:e1:d3:35:08:ea:01:2e:11:e5:1e:cf:a3:39:90:f8:
         64:6c:77:2c:ae:c8:66:7a:5f:27:a8:e0:97:05:41:00:55:9d:
         54:27:1e:9e:e3:63:69:8d:36:b2:d0:41:cf:21:d9:97:a7:b0:
         14:16:51:df:a3:c3:c9:65:24:f0:6d:e4:da:c9:53:b3:37:05:
         8f:2c:e5:ba:84:6f:82:f5:05:41:05:a1:9e:7f:49:c1:d3:90:
         a4:d9:76:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:07:12 2026 by rpki-client