Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/323830343a3635383a633030303a3a2f33352d3335203d3e20323632353738.roa
File:                     323830343a3635383a633030303a3a2f33352d3335203d3e20323632353738.roa (raw, json)
Hash identifier:          0R5EgyEU/IHVjtqCzfxpSkUMLRWhOty10f1cyoqLBW8=
Subject key identifier:   75:45:2C:09:15:F8:A7:88:97:C7:4F:DD:97:56:4E:49:51:D5:21:B1
Certificate issuer:       /CN=A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76
Certificate serial:       1D07471BA390024800CCB5A49EAA184FD5B5D6A8
Authority key identifier: A8:04:9D:06:C9:C3:DD:09:DB:B1:A4:8A:F9:DA:94:6E:9F:57:AE:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/323830343a3635383a633030303a3a2f33352d3335203d3e20323632353738.roa
Signing time:             Fri 01 May 2026 18:18:34 +0000
ROA not before:           Fri 01 May 2026 18:13:34 +0000
ROA not after:            Fri 30 Apr 2027 18:18:34 +0000
asID:                     262578
IP address blocks:        2804:658:c000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.crl
                          rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:07:47:1b:a3:90:02:48:00:cc:b5:a4:9e:aa:18:4f:d5:b5:d6:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76
        Validity
            Not Before: May  1 18:13:34 2026 GMT
            Not After : Apr 30 18:18:34 2027 GMT
        Subject: CN=75452C0915F8A78897C74FDD97564E4951D521B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c1:eb:fa:26:a2:a3:e4:f6:b5:41:41:fd:d4:
                    37:31:f8:dc:5e:dc:9d:05:7f:b7:a5:41:e3:d4:38:
                    d2:38:d0:40:f5:1d:4b:da:c8:9d:2e:df:90:7c:46:
                    89:06:02:e4:3c:3a:d4:5f:6d:01:b1:3f:e1:11:6b:
                    67:de:71:04:95:94:ac:7f:c7:a7:df:93:a9:95:93:
                    19:c0:36:cb:e4:7d:6c:77:8f:a2:90:ff:51:a1:b8:
                    aa:c7:2a:4a:3d:3f:b1:cc:a9:cc:b7:42:1e:15:da:
                    06:e7:ff:69:85:20:29:a2:6a:0c:73:21:df:2b:1d:
                    80:43:54:50:6e:04:4b:e7:8e:cc:d5:32:18:8c:f5:
                    b4:f2:dc:19:9a:7a:44:02:4a:cf:8f:6b:e9:e1:ca:
                    6b:32:2c:41:62:d0:f4:17:71:5c:02:2f:d2:3c:d3:
                    2e:50:6f:2e:d5:94:0f:c7:7b:99:1f:ce:d4:f9:33:
                    87:2a:39:4e:a0:8c:b3:74:10:b9:5b:ca:70:f6:00:
                    b4:0d:30:5d:23:38:ef:35:2b:31:c4:79:c8:8f:e9:
                    a1:f8:98:d7:db:e2:9c:ef:7d:60:e0:3e:ee:a1:5c:
                    68:ac:9f:28:a1:9b:a1:3c:18:f9:b5:b5:af:41:2f:
                    72:d2:e7:c9:93:cd:e3:66:d6:bb:9c:49:7d:93:47:
                    9f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:45:2C:09:15:F8:A7:88:97:C7:4F:DD:97:56:4E:49:51:D5:21:B1
            X509v3 Authority Key Identifier:
                keyid:A8:04:9D:06:C9:C3:DD:09:DB:B1:A4:8A:F9:DA:94:6E:9F:57:AE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/323830343a3635383a633030303a3a2f33352d3335203d3e20323632353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:658:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         aa:6b:1f:eb:13:86:6a:1f:96:b3:62:7b:9b:16:94:8a:71:be:
         05:08:a5:e1:8d:41:4a:d5:bc:5f:b8:91:b0:fc:c8:53:a0:e2:
         02:b9:75:09:03:72:f9:2c:46:c7:ec:a0:ed:43:a3:b3:d3:9a:
         4b:ee:a4:15:41:6c:4f:54:62:94:de:18:51:57:d0:6e:cd:d7:
         41:05:dc:11:7b:ea:e6:76:b0:4b:68:ed:ef:61:43:e1:c4:c5:
         aa:a2:61:73:c6:63:4c:d9:a3:7a:2d:2d:11:3e:be:ce:f2:2b:
         3d:12:69:6a:59:11:f7:c8:74:19:c0:2f:fb:98:e9:1b:38:2c:
         46:e7:9d:73:60:13:b8:2f:ef:00:c4:be:5b:53:b1:f4:b2:76:
         75:e9:b0:86:34:9f:81:36:53:80:92:58:a0:94:bd:09:6c:f8:
         99:c6:67:b8:9f:85:96:cb:d0:c5:85:8b:a3:cc:60:b3:f4:2d:
         d6:1c:0d:89:96:d3:fe:3e:d8:3a:3a:5c:ec:54:8f:f2:05:53:
         c3:7c:fe:61:50:19:fc:f7:b0:ff:a4:2f:ce:ce:7e:35:33:01:
         11:39:b3:f1:a6:6e:b1:81:9d:67:2e:c4:87:ed:7e:39:35:df:
         09:38:49:19:cf:28:e1:0d:cf:cc:52:7e:3b:3e:3b:24:e2:64:
         2e:ee:36:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:20:45 2026 by rpki-client