Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a356162633a3a2f34382d3438203d3e20323634343835.roa
File:                     323830343a323035303a356162633a3a2f34382d3438203d3e20323634343835.roa (raw, json)
Hash identifier:          Z+FKmWHT3+khnFZYVDJSeQNcxywQLwzQsFnboQxOeg4=
Subject key identifier:   69:1A:3E:0D:13:26:A7:25:0C:70:E1:A0:DF:58:93:E4:9D:89:E9:15
Certificate issuer:       /CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
Certificate serial:       6A5CADD527FDC213F2377ED3157D1A545B59DC05
Authority key identifier: 13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a356162633a3a2f34382d3438203d3e20323634343835.roa
Signing time:             Tue 28 Apr 2026 19:36:41 +0000
ROA not before:           Tue 28 Apr 2026 19:31:41 +0000
ROA not after:            Tue 27 Apr 2027 19:36:41 +0000
asID:                     264485
IP address blocks:        2804:2050:5abc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 13:37:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:5c:ad:d5:27:fd:c2:13:f2:37:7e:d3:15:7d:1a:54:5b:59:dc:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
        Validity
            Not Before: Apr 28 19:31:41 2026 GMT
            Not After : Apr 27 19:36:41 2027 GMT
        Subject: CN=691A3E0D1326A7250C70E1A0DF5893E49D89E915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d5:25:6a:19:75:d2:82:f1:aa:84:af:62:42:
                    7c:20:d3:cc:8e:2e:ad:f4:44:36:7a:85:03:1e:ec:
                    ca:6b:61:71:ad:e1:6f:bf:84:ac:f2:1d:a1:da:f4:
                    5a:0e:13:bd:34:08:04:d2:9b:1a:76:61:a3:58:ca:
                    19:ab:e0:81:81:90:fb:aa:42:5d:80:07:b3:43:c4:
                    c4:e7:8a:a5:a9:e0:fd:ab:bb:56:1c:33:41:b5:5a:
                    03:46:b1:45:45:1d:bf:6e:07:2a:47:58:eb:d2:cc:
                    98:79:4b:57:ed:d4:44:36:48:1f:02:c8:60:cb:04:
                    f9:0a:63:99:83:c2:5a:83:66:db:77:eb:55:2b:d6:
                    38:a3:c0:f7:2f:00:9f:67:e4:3a:33:da:14:28:39:
                    76:22:a3:b7:7d:ae:84:62:9d:4e:e2:bb:22:81:27:
                    fd:0e:89:bf:ee:d2:82:9d:0a:6b:17:35:6e:7c:60:
                    8f:68:3f:82:43:32:c9:93:ad:27:71:f1:ef:59:00:
                    70:9f:df:aa:77:30:28:49:ee:2a:27:06:6c:7e:28:
                    aa:71:cb:88:97:34:35:06:fd:92:8b:ec:51:81:2d:
                    d7:4d:dd:25:30:e0:36:ef:fe:92:bb:f1:98:0c:1d:
                    b2:26:ec:0d:72:f2:27:6f:6f:5b:5f:4f:33:0d:7a:
                    0e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1A:3E:0D:13:26:A7:25:0C:70:E1:A0:DF:58:93:E4:9D:89:E9:15
            X509v3 Authority Key Identifier:
                keyid:13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a356162633a3a2f34382d3438203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2050:5abc::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:89:53:ad:a3:0d:a0:18:5f:9f:9a:7d:0f:50:59:46:eb:13:
         7d:63:fa:26:c6:e7:25:16:c5:c4:e2:66:02:0d:9c:00:36:03:
         55:d3:b3:a0:a2:48:b1:0a:65:19:e5:17:98:8b:d3:d9:c5:2e:
         db:5a:89:4f:84:65:ce:aa:e7:9d:63:39:fc:46:58:f0:c1:22:
         17:75:63:56:f5:34:5b:0b:35:22:1b:7e:08:85:9b:86:15:e5:
         0f:d4:ad:d7:4e:38:1c:78:03:94:e8:52:7a:36:8a:3b:44:ab:
         a9:27:93:ec:c2:89:bc:0f:aa:13:40:22:23:5b:f4:60:71:0c:
         43:59:b9:bc:d7:09:d3:0d:ff:92:5d:30:c6:5a:da:49:1b:51:
         07:4a:b6:36:e6:ad:34:53:33:a2:58:2c:af:24:dc:a7:6b:58:
         56:ef:f2:06:2e:89:dd:7b:c4:b2:a6:6f:dd:f5:e4:4e:e5:15:
         51:e8:44:8a:fb:e3:a6:e0:11:18:d4:a4:05:94:32:5f:27:a4:
         45:ee:64:4b:91:65:9c:15:92:a8:c5:c6:d1:a2:ab:0e:dc:a2:
         89:37:ba:8b:53:8e:2e:c8:ce:a6:70:6e:90:28:34:00:db:c1:
         8a:b8:a6:72:7e:1a:5b:5a:4b:b6:a2:bf:d6:11:07:c0:98:e2:
         28:4c:cd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:44:15 2026 by rpki-client