Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/323830343a323232633a3a2f33322d3438203d3e20323634353936.roa
File:                     323830343a323232633a3a2f33322d3438203d3e20323634353936.roa (raw, json)
Hash identifier:          C74EJ5MR6Ku8L+5rgtkn1rg6DwIW/IKmia53HyqIy/A=
Subject key identifier:   DB:B3:10:FE:E6:42:0D:BA:37:83:98:1E:9C:5D:4A:89:9A:0D:91:33
Certificate issuer:       /CN=9BC72C654C44A1223EF673AE1BB336DA92203C42
Certificate serial:       45498ACDFB5B051FBD235F6A2D2883AB520B2CB8
Authority key identifier: 9B:C7:2C:65:4C:44:A1:22:3E:F6:73:AE:1B:B3:36:DA:92:20:3C:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BC72C654C44A1223EF673AE1BB336DA92203C42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/323830343a323232633a3a2f33322d3438203d3e20323634353936.roa
Signing time:             Mon 11 May 2026 15:51:42 +0000
ROA not before:           Mon 11 May 2026 15:46:42 +0000
ROA not after:            Mon 10 May 2027 15:51:42 +0000
asID:                     264596
IP address blocks:        2804:222c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/9BC72C654C44A1223EF673AE1BB336DA92203C42.crl
                          rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/9BC72C654C44A1223EF673AE1BB336DA92203C42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BC72C654C44A1223EF673AE1BB336DA92203C42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 11:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:49:8a:cd:fb:5b:05:1f:bd:23:5f:6a:2d:28:83:ab:52:0b:2c:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BC72C654C44A1223EF673AE1BB336DA92203C42
        Validity
            Not Before: May 11 15:46:42 2026 GMT
            Not After : May 10 15:51:42 2027 GMT
        Subject: CN=DBB310FEE6420DBA3783981E9C5D4A899A0D9133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2f:d3:8f:6b:5b:71:51:0e:ec:4b:7c:51:9c:
                    2d:6f:f7:87:56:d8:95:a5:31:59:33:d1:55:6c:73:
                    ad:fb:af:fd:44:c4:7f:94:97:2f:8c:00:f9:fd:c2:
                    cc:6c:4b:0e:0e:6c:92:7e:1b:d1:70:af:25:d6:1f:
                    cf:0d:11:f9:23:01:62:9b:2d:7e:1b:5d:e2:b3:99:
                    bf:98:72:7e:8d:c9:57:9e:04:6e:1f:7a:0f:b3:3a:
                    18:01:1b:9f:e6:43:bc:5d:40:df:46:53:af:53:f3:
                    b7:fd:b4:26:3c:8f:2f:6c:ca:9d:0c:a9:38:36:63:
                    da:c0:5b:76:84:96:c2:83:4f:62:3e:06:19:0c:fb:
                    c0:99:cc:3a:41:a3:71:84:84:b2:7f:42:c4:ea:fe:
                    43:c5:6d:6b:11:40:00:df:f1:ac:1f:ef:dd:64:83:
                    d0:45:da:97:9f:b4:d1:7c:ae:e9:5f:f1:01:d9:31:
                    76:b8:f9:1b:38:31:75:83:3b:f4:12:76:ea:a2:f6:
                    ba:01:0f:7d:89:6e:49:2f:12:5f:e3:ea:68:a1:7a:
                    ea:4e:11:f0:89:e9:1a:a2:e2:d5:d8:5f:04:cd:54:
                    ec:37:a6:74:6d:8e:4a:97:3e:64:ad:f5:cb:10:74:
                    1b:56:05:80:39:a2:c0:b4:f3:a8:c5:40:c2:74:a1:
                    e0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B3:10:FE:E6:42:0D:BA:37:83:98:1E:9C:5D:4A:89:9A:0D:91:33
            X509v3 Authority Key Identifier:
                keyid:9B:C7:2C:65:4C:44:A1:22:3E:F6:73:AE:1B:B3:36:DA:92:20:3C:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/9BC72C654C44A1223EF673AE1BB336DA92203C42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BC72C654C44A1223EF673AE1BB336DA92203C42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/323830343a323232633a3a2f33322d3438203d3e20323634353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:222c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:c7:00:87:21:39:1d:a4:66:b4:d2:0d:d3:de:54:db:72:57:
         22:46:d2:93:8c:21:2d:ad:07:88:7f:c5:75:bf:b9:5e:93:51:
         15:45:f8:bf:14:99:71:e3:93:56:24:c1:94:3f:06:8f:81:e7:
         20:b4:59:cd:6d:3c:79:c3:65:37:a5:66:96:a5:75:89:d1:44:
         45:51:d4:72:7e:2d:2b:79:d9:fe:c8:25:c6:e3:6d:45:25:34:
         bc:5a:7c:b5:38:1b:2f:e4:fe:75:21:f9:3c:4d:bf:0d:47:9e:
         e7:fa:83:d5:bf:a1:9f:47:96:b7:4e:ec:fd:25:b7:d1:34:27:
         cf:13:92:2d:71:5b:b3:d8:7e:c9:44:72:ac:1e:0c:21:fe:5a:
         89:81:da:4a:65:91:7e:d6:8d:86:36:be:03:c2:88:d0:4f:f2:
         53:15:a3:53:9e:6b:76:10:53:8e:5d:63:df:63:6b:9e:cd:11:
         51:1c:e0:10:82:a7:b7:53:9b:ac:a9:ed:00:10:79:cd:2c:6b:
         fb:01:05:1b:d9:cc:85:4e:e5:c5:01:9b:86:0b:a5:ec:78:f6:
         be:8f:35:c6:a0:76:9f:60:15:34:51:0f:5e:83:1c:bd:f0:8f:
         d7:b5:8f:7f:35:9c:f0:79:6b:3c:7a:25:0c:0f:29:2b:f4:c3:
         81:00:5a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:58:28 2026 by rpki-client