Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/323830343a6262633a3a2f33322d313238203d3e203532383232.roa
File:                     323830343a6262633a3a2f33322d313238203d3e203532383232.roa (raw, json)
Hash identifier:          UncjGq5TZGfZozMutXMWV+C/0UpTQ5K5N19Rbyzx5qU=
Subject key identifier:   5D:31:09:91:1D:ED:FE:B7:1C:3A:AE:5D:04:30:6E:C8:01:40:A9:5A
Certificate issuer:       /CN=2ECFD6270713C15F56BC52BA66D1A749FFE56168
Certificate serial:       5D8BAA549DB80B82837C594A4EE4E1FB1443890F
Authority key identifier: 2E:CF:D6:27:07:13:C1:5F:56:BC:52:BA:66:D1:A7:49:FF:E5:61:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ECFD6270713C15F56BC52BA66D1A749FFE56168.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/323830343a6262633a3a2f33322d313238203d3e203532383232.roa
Signing time:             Wed 22 Apr 2026 18:31:32 +0000
ROA not before:           Wed 22 Apr 2026 18:26:32 +0000
ROA not after:            Wed 21 Apr 2027 18:31:32 +0000
asID:                     52822
IP address blocks:        2804:bbc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.crl
                          rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ECFD6270713C15F56BC52BA66D1A749FFE56168.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:46:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:8b:aa:54:9d:b8:0b:82:83:7c:59:4a:4e:e4:e1:fb:14:43:89:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ECFD6270713C15F56BC52BA66D1A749FFE56168
        Validity
            Not Before: Apr 22 18:26:32 2026 GMT
            Not After : Apr 21 18:31:32 2027 GMT
        Subject: CN=5D3109911DEDFEB71C3AAE5D04306EC80140A95A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c2:96:c7:13:51:bb:55:ec:f7:53:ce:0e:76:
                    f9:ac:ff:ca:4e:0a:a4:54:4d:0f:40:10:bb:20:85:
                    42:42:b8:97:1f:88:64:e7:68:d0:b5:65:f8:fa:5f:
                    e1:bc:e0:cc:b8:c7:3d:dd:46:8c:c1:db:c9:eb:04:
                    98:e0:69:0d:d8:b0:fe:c2:16:67:53:42:83:7f:e6:
                    ab:c6:ad:52:c2:c9:38:43:3b:c6:6a:12:ee:e7:18:
                    df:90:10:5e:7d:27:01:09:98:46:1d:a6:d1:6e:5d:
                    d1:dc:c0:a0:42:31:6a:c2:c5:e3:5f:1d:d3:f9:97:
                    91:ab:f5:5c:52:db:9b:57:96:f4:e0:94:9e:c0:88:
                    74:ce:6e:01:8c:de:ca:e2:c4:67:a2:00:65:8a:f8:
                    6b:b6:dd:3b:8b:7f:91:4b:40:80:98:ce:a4:72:9e:
                    d5:3d:30:ce:76:67:ee:c2:9f:ed:bf:eb:bb:c2:f8:
                    49:b6:c0:3f:d6:e8:e0:fb:e1:4f:ea:eb:c0:b5:ea:
                    b1:ff:31:8c:3d:4f:78:ec:01:04:0c:2a:5b:be:99:
                    8c:fe:3c:ef:dc:af:a0:a9:f1:b8:9c:f6:d8:e8:6b:
                    a5:3b:68:36:85:43:0f:5e:4c:91:1d:c2:49:fa:e1:
                    93:42:85:16:f8:d7:ce:1d:d0:b7:d7:c6:98:b8:23:
                    8c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:31:09:91:1D:ED:FE:B7:1C:3A:AE:5D:04:30:6E:C8:01:40:A9:5A
            X509v3 Authority Key Identifier:
                keyid:2E:CF:D6:27:07:13:C1:5F:56:BC:52:BA:66:D1:A7:49:FF:E5:61:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ECFD6270713C15F56BC52BA66D1A749FFE56168.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/323830343a6262633a3a2f33322d313238203d3e203532383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:bbc::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:70:4f:0d:91:56:76:4c:8d:28:31:3e:87:d2:7e:c5:9f:55:
         3d:fe:fe:c7:bd:55:fb:dd:19:af:51:6c:b2:86:be:cf:fc:5b:
         46:5a:e9:97:48:59:ce:75:5d:95:a9:7c:f5:be:2c:55:8a:54:
         e0:3f:2c:51:e2:fd:b5:b5:a4:6f:c1:92:fd:23:cd:6c:68:5a:
         9a:97:80:be:12:3a:85:e2:3c:02:4e:2d:a7:39:02:44:a4:98:
         da:d8:b2:86:6d:60:23:af:55:bc:df:a8:61:a4:cb:00:f7:6a:
         3d:ff:06:34:2b:58:45:e9:74:cc:a3:9a:cf:55:dd:50:15:dc:
         c4:1b:c4:a0:d7:23:5f:3e:c1:0f:56:8f:f3:f8:cd:de:50:93:
         26:a2:10:e4:5e:68:84:81:6d:f1:1c:b1:d1:31:49:ca:e9:99:
         38:1a:2b:96:71:31:04:38:88:57:b9:5f:87:77:82:25:54:09:
         83:8e:01:75:17:08:fe:c1:7f:ff:00:86:2c:ea:4b:45:bb:07:
         6e:b1:46:47:82:c3:b2:f0:68:75:01:27:cd:08:08:f3:3b:93:
         02:0f:96:93:10:72:54:fe:ac:93:11:aa:03:23:f3:78:36:10:
         7f:ca:a7:fb:56:76:ff:2c:02:73:95:26:73:8d:14:0e:4d:0d:
         84:6f:52:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:15:48 2026 by rpki-client