Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArZhjjD2CzfDTzPv7hhtgYMToRBZocWFuMP7tF83knPD/1/323830343a353433633a633030303a3a2f33342d3334203d3e20323638363336.roa
File:                     323830343a353433633a633030303a3a2f33342d3334203d3e20323638363336.roa (raw, json)
Hash identifier:          5Fe1q5DnT4hVyjeK43sqFpLltU5d4MB4Y0o9smC6fiM=
Subject key identifier:   F0:F3:6F:6E:D1:FA:9E:2A:A2:8C:61:D6:F6:2C:4D:5F:6B:FE:E4:27
Certificate issuer:       /CN=BB90587BB24E47FC1B4E0BAFAA1C24D2EC55109E
Certificate serial:       677F5612D35848F62BB21C2C5B3C85C47508B13B
Authority key identifier: BB:90:58:7B:B2:4E:47:FC:1B:4E:0B:AF:AA:1C:24:D2:EC:55:10:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB90587BB24E47FC1B4E0BAFAA1C24D2EC55109E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArZhjjD2CzfDTzPv7hhtgYMToRBZocWFuMP7tF83knPD/1/323830343a353433633a633030303a3a2f33342d3334203d3e20323638363336.roa
Signing time:             Tue 28 Apr 2026 13:14:24 +0000
ROA not before:           Tue 28 Apr 2026 13:09:24 +0000
ROA not after:            Tue 27 Apr 2027 13:14:24 +0000
asID:                     268636
IP address blocks:        2804:543c:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArZhjjD2CzfDTzPv7hhtgYMToRBZocWFuMP7tF83knPD/1/BB90587BB24E47FC1B4E0BAFAA1C24D2EC55109E.crl
                          rsync://rpki-repo.registro.br/repo/ArZhjjD2CzfDTzPv7hhtgYMToRBZocWFuMP7tF83knPD/1/BB90587BB24E47FC1B4E0BAFAA1C24D2EC55109E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB90587BB24E47FC1B4E0BAFAA1C24D2EC55109E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 17:48:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:7f:56:12:d3:58:48:f6:2b:b2:1c:2c:5b:3c:85:c4:75:08:b1:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB90587BB24E47FC1B4E0BAFAA1C24D2EC55109E
        Validity
            Not Before: Apr 28 13:09:24 2026 GMT
            Not After : Apr 27 13:14:24 2027 GMT
        Subject: CN=F0F36F6ED1FA9E2AA28C61D6F62C4D5F6BFEE427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ed:d5:ed:88:e4:c3:06:26:ce:e9:29:d4:44:
                    c3:2b:4c:67:f9:df:e5:3c:71:cf:7a:ab:27:31:f7:
                    68:cb:c0:0c:0d:9e:a0:9c:0f:6c:90:d2:fe:37:52:
                    d8:8b:7c:dd:ee:27:33:dd:92:93:f7:95:88:23:4c:
                    94:6d:dd:1e:c0:67:b1:dc:46:07:42:19:1c:c2:be:
                    79:2e:4e:79:3f:6a:6e:55:22:dc:77:2e:b0:4f:6b:
                    f4:2a:fd:4d:f9:7e:50:7f:20:78:44:36:1c:41:88:
                    b0:ee:49:f8:c4:e0:f9:01:fe:3d:10:22:b9:b3:9a:
                    25:13:ab:33:6b:6f:7e:37:57:ff:72:c7:53:67:9f:
                    16:14:71:69:09:ce:a9:99:0e:68:c1:85:50:8d:6c:
                    96:fa:52:db:a2:3c:a3:4b:4b:fe:42:f8:9e:2f:7e:
                    fe:26:53:89:d5:79:ac:b7:23:1f:17:80:b3:b2:6b:
                    ed:98:a4:1e:4c:49:26:da:a3:bd:85:53:c2:1a:fe:
                    75:d6:c7:5c:74:0d:5d:2f:ca:9e:80:25:9a:46:05:
                    cd:2c:7e:ac:bf:eb:0c:f3:c6:26:8b:97:a5:6f:66:
                    21:fd:14:5b:da:ea:a0:7b:da:9c:ed:e6:79:96:7a:
                    0e:29:de:57:f5:4b:b6:ab:65:2c:7e:c1:3d:8c:f5:
                    5b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F3:6F:6E:D1:FA:9E:2A:A2:8C:61:D6:F6:2C:4D:5F:6B:FE:E4:27
            X509v3 Authority Key Identifier:
                keyid:BB:90:58:7B:B2:4E:47:FC:1B:4E:0B:AF:AA:1C:24:D2:EC:55:10:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArZhjjD2CzfDTzPv7hhtgYMToRBZocWFuMP7tF83knPD/1/BB90587BB24E47FC1B4E0BAFAA1C24D2EC55109E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB90587BB24E47FC1B4E0BAFAA1C24D2EC55109E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArZhjjD2CzfDTzPv7hhtgYMToRBZocWFuMP7tF83knPD/1/323830343a353433633a633030303a3a2f33342d3334203d3e20323638363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:543c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a3:4c:04:46:39:56:91:36:52:8f:16:44:9e:4d:6e:58:0e:d2:
         c6:33:e0:20:7d:f1:fe:93:64:33:90:88:61:63:f3:42:e6:c2:
         ad:8e:64:f9:85:4a:bb:60:33:18:e9:15:ee:90:b9:13:35:2e:
         7a:b7:4d:50:46:b5:88:18:f6:50:c5:65:a4:1b:94:8b:41:af:
         ab:50:b1:fc:a2:ef:b6:3a:79:a5:e8:80:6c:c3:d4:d8:d0:57:
         a1:19:c2:44:c5:ae:b0:fb:25:06:f5:d8:e0:44:86:a3:42:d6:
         dd:74:ec:4c:b5:1b:6f:e7:45:c0:a1:2b:9a:4d:16:56:bf:56:
         ca:cf:4f:09:41:e1:d3:e1:83:ed:f9:59:ac:71:3b:32:31:32:
         11:01:70:fe:62:cf:cc:90:f9:e2:05:85:6d:ba:09:76:6a:23:
         7b:cb:46:16:15:91:ef:7f:e1:4d:cc:71:fc:90:88:32:01:f1:
         b2:48:c3:e6:61:ed:43:86:cd:0c:4a:5b:58:21:80:a7:1d:ed:
         2e:a4:21:76:3b:fb:f9:4d:35:fc:e9:77:35:12:64:7a:40:75:
         a2:70:6f:91:7a:95:a3:2e:09:cb:79:91:48:ca:d5:0f:95:39:
         84:bd:fb:7b:5d:54:bf:c2:15:be:99:28:5d:0a:a8:a4:43:d4:
         29:d9:b9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:11:49 2026 by rpki-client