Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a326162633a3a2f34382d3438203d3e20323634343835.roa
File:                     323830343a323035303a326162633a3a2f34382d3438203d3e20323634343835.roa (raw, json)
Hash identifier:          929WT3wI+5q7F4i7Y1WPcUcjQEogkmxn2MzVr6u0Vgw=
Subject key identifier:   19:E2:5A:6A:E9:60:8F:5C:72:34:53:0B:A7:A4:80:9D:F8:77:F4:69
Certificate issuer:       /CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
Certificate serial:       7C500CEA4BDB3DDF1B80E510D7EFA6210AF9A400
Authority key identifier: 13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a326162633a3a2f34382d3438203d3e20323634343835.roa
Signing time:             Tue 28 Apr 2026 19:36:47 +0000
ROA not before:           Tue 28 Apr 2026 19:31:47 +0000
ROA not after:            Tue 27 Apr 2027 19:36:47 +0000
asID:                     264485
IP address blocks:        2804:2050:2abc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 13:37:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:50:0c:ea:4b:db:3d:df:1b:80:e5:10:d7:ef:a6:21:0a:f9:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
        Validity
            Not Before: Apr 28 19:31:47 2026 GMT
            Not After : Apr 27 19:36:47 2027 GMT
        Subject: CN=19E25A6AE9608F5C7234530BA7A4809DF877F469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bf:2c:7d:54:a3:0e:4d:b3:3f:e7:78:f7:9b:
                    e8:d8:43:10:7d:84:4c:1d:fa:c0:47:d9:de:ca:27:
                    5d:98:a9:94:3d:65:55:c3:a0:5a:63:a9:d9:97:63:
                    74:f8:a0:bb:65:38:2c:cb:ee:21:b4:e1:db:e9:5d:
                    40:dc:8b:fe:d0:6f:9e:87:15:fe:20:e5:1e:5c:28:
                    e5:f9:e8:74:92:36:d4:12:99:27:18:62:50:fc:cf:
                    50:f4:db:a4:a8:83:46:fc:ba:be:12:72:74:26:67:
                    04:98:78:63:54:6c:53:b0:12:7a:54:28:0d:c9:0e:
                    b3:dd:4c:47:66:70:80:95:7f:6c:dd:46:44:c1:e5:
                    ce:8f:7b:7b:b0:6b:73:ff:ea:e8:d3:ae:69:2e:85:
                    46:a5:54:f2:7d:cc:50:f8:81:d1:4c:74:9d:ef:ce:
                    02:3e:4a:1f:34:6d:0d:bb:b2:30:54:30:a4:a7:3d:
                    07:9e:54:e1:ff:ac:25:aa:0f:5c:ed:c2:b1:dc:e6:
                    3c:5c:5e:d9:bf:9d:f9:f1:b0:9f:f6:64:17:fc:63:
                    d6:52:49:3e:94:4f:fa:5a:40:16:8d:88:cc:61:12:
                    a8:1e:a6:f8:74:a6:d6:6d:30:b0:9a:c2:f7:a2:af:
                    2d:de:b9:78:39:92:94:3e:dd:12:9e:dc:a6:f6:97:
                    66:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E2:5A:6A:E9:60:8F:5C:72:34:53:0B:A7:A4:80:9D:F8:77:F4:69
            X509v3 Authority Key Identifier:
                keyid:13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a326162633a3a2f34382d3438203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2050:2abc::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:77:8f:23:c2:1c:4c:ca:82:1e:76:ad:74:e2:14:1b:7e:b0:
         74:dc:0a:82:4e:b3:f7:86:06:69:8d:e5:d9:87:73:78:80:fe:
         ac:80:7d:1c:92:0e:4f:1a:30:d8:a6:6e:30:46:26:bb:3d:f3:
         44:e2:e8:f0:47:57:ef:76:ed:b7:26:43:e2:be:d4:3a:a7:1c:
         0c:8a:25:93:ca:1f:eb:7b:e4:08:5a:a1:01:b7:81:56:17:c9:
         38:78:0c:42:0f:60:f5:74:c1:ef:93:e1:89:ca:47:3a:68:d0:
         51:f2:ea:f6:d3:c9:b5:0d:52:ba:f3:e1:6e:03:4e:77:2c:c6:
         6d:6e:60:3d:a1:db:08:21:44:53:5f:53:76:a6:97:6d:f4:60:
         dc:cf:2e:26:16:4f:ec:d1:f5:58:c1:cc:7b:99:cd:bd:29:3a:
         d6:c8:52:20:56:8c:d5:ea:ee:b3:8f:25:45:6a:35:f4:0b:69:
         6c:0a:40:3c:ce:53:99:2a:d5:56:eb:fc:e9:3b:33:46:c5:b2:
         50:e3:67:25:63:15:67:bd:9f:fa:2f:68:bf:02:e3:58:5c:75:
         03:86:e0:5a:72:b4:80:25:12:7f:80:59:ef:8a:3e:11:0b:b6:
         4d:9a:ce:44:02:ad:36:27:a0:26:a1:57:22:d6:f1:7c:fa:f4:
         14:2d:a8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:02:22 2026 by rpki-client