Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a3a2f33332d3336203d3e20323638373037.roa
File:                     323830343a353938343a3a2f33332d3336203d3e20323638373037.roa (raw, json)
Hash identifier:          Az/e7N7BlgBXJj6a0i/eOzGFUIqbP2dMgQTK0pKQwsU=
Subject key identifier:   0C:4F:56:F0:57:8B:24:DF:86:59:70:FE:FE:EE:C3:8B:65:8B:10:66
Certificate issuer:       /CN=7A3E04BC39BC4943D868F41EA53C0123F668C379
Certificate serial:       0461BC8DCA420EF9B44D087250645C0F84D495AA
Authority key identifier: 7A:3E:04:BC:39:BC:49:43:D8:68:F4:1E:A5:3C:01:23:F6:68:C3:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3E04BC39BC4943D868F41EA53C0123F668C379.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a3a2f33332d3336203d3e20323638373037.roa
Signing time:             Sun 10 May 2026 06:09:08 +0000
ROA not before:           Sun 10 May 2026 06:04:08 +0000
ROA not after:            Sun 09 May 2027 06:09:08 +0000
asID:                     268707
IP address blocks:        2804:5984::/33 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/7A3E04BC39BC4943D868F41EA53C0123F668C379.crl
                          rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/7A3E04BC39BC4943D868F41EA53C0123F668C379.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3E04BC39BC4943D868F41EA53C0123F668C379.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 08:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:61:bc:8d:ca:42:0e:f9:b4:4d:08:72:50:64:5c:0f:84:d4:95:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A3E04BC39BC4943D868F41EA53C0123F668C379
        Validity
            Not Before: May 10 06:04:08 2026 GMT
            Not After : May  9 06:09:08 2027 GMT
        Subject: CN=0C4F56F0578B24DF865970FEFEEEC38B658B1066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e9:91:1e:63:0d:18:02:85:2f:49:d0:78:ce:
                    31:0a:13:c9:9a:92:e7:97:94:e3:65:49:6d:4e:d2:
                    0d:fb:25:b9:52:5b:10:a7:46:3b:8e:ef:92:8a:fb:
                    08:a2:25:86:dc:4a:61:28:a1:80:12:cc:47:22:0d:
                    75:57:50:09:8e:ff:4d:a9:02:15:71:8b:dd:8a:2d:
                    ab:ef:90:87:ef:79:37:72:16:c7:59:66:f8:c3:d4:
                    3a:6f:9f:c8:fe:22:3c:9b:cb:f6:64:01:04:a9:57:
                    8b:17:a2:75:bc:da:c3:7d:ad:89:f0:79:5b:bf:f6:
                    93:d4:38:4b:15:0d:40:bb:e8:f3:31:5f:ea:39:a7:
                    99:02:41:1f:0b:94:f1:a5:81:98:ff:11:92:d1:fa:
                    ff:0d:71:7b:e4:2d:7e:cf:97:92:4e:2a:a3:58:f7:
                    e7:49:86:9d:fc:c4:f5:50:b2:06:4c:95:d0:5f:6e:
                    7f:c9:1f:48:ad:12:87:25:bb:de:99:fc:bc:cb:b4:
                    a4:0b:e3:43:40:bb:fb:5d:c6:59:ef:88:59:e2:ff:
                    d1:e5:b4:96:1c:f5:d1:cd:7d:df:30:2f:05:45:f7:
                    30:db:d2:cc:8e:8f:2a:4e:85:eb:7b:38:42:a7:29:
                    db:38:c3:c5:cd:92:60:80:02:7d:36:3e:b3:92:c5:
                    96:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4F:56:F0:57:8B:24:DF:86:59:70:FE:FE:EE:C3:8B:65:8B:10:66
            X509v3 Authority Key Identifier:
                keyid:7A:3E:04:BC:39:BC:49:43:D8:68:F4:1E:A5:3C:01:23:F6:68:C3:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/7A3E04BC39BC4943D868F41EA53C0123F668C379.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3E04BC39BC4943D868F41EA53C0123F668C379.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a3a2f33332d3336203d3e20323638373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5984::/33

    Signature Algorithm: sha256WithRSAEncryption
         5c:2d:3b:6d:5f:ee:44:ea:e7:0e:0b:f0:93:11:81:da:32:f1:
         b8:d4:27:11:d7:70:99:56:3e:8d:d1:53:d5:a2:7a:d4:db:76:
         af:71:a1:aa:88:8c:71:83:2c:82:98:e9:e8:de:6d:79:0a:09:
         46:a7:af:ae:d4:58:d2:c2:65:32:b8:62:d3:47:05:b6:8c:ac:
         21:74:33:87:57:b1:a8:30:6e:a4:82:f3:af:18:92:d8:e8:c4:
         30:9e:4b:4a:05:ea:5d:ca:81:1e:85:54:db:1c:a7:e5:49:bb:
         a4:6a:56:0f:ba:f3:a4:71:af:ec:d2:03:e3:b4:3e:8a:74:f7:
         01:9c:78:84:a8:7a:1b:5e:1e:52:03:14:ae:5a:24:4a:e5:33:
         e6:69:34:b1:0e:03:13:50:ff:fa:8d:f0:41:7c:0d:19:76:20:
         25:3d:bb:06:54:3b:b2:45:f5:e4:d6:01:ec:2c:d9:db:1e:1f:
         00:af:a4:83:c2:ad:55:11:ce:0a:dc:eb:8b:78:24:22:17:0b:
         e7:00:0b:f8:53:96:c3:82:d0:ca:8f:e5:7c:1c:a2:e1:37:13:
         d9:b4:ca:aa:c4:20:67:8f:ac:44:60:36:ef:32:c0:2f:cc:7f:
         a1:ab:2d:7f:a1:79:d7:c5:89:49:5f:45:ce:2e:7b:ca:48:9a:
         53:68:11:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:40:24 2026 by rpki-client