Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/323830343a323864303a3a2f33322d3434203d3e20323633393832.roa
File:                     323830343a323864303a3a2f33322d3434203d3e20323633393832.roa (raw, json)
Hash identifier:          tpPo4oi/1V2vjdouRD1meFyKC9+x/tpnS4wm1XKd4YU=
Subject key identifier:   5B:D4:7D:91:CC:97:AE:8A:97:63:09:63:FC:AD:B0:31:5F:51:30:21
Certificate issuer:       /CN=7D571DA7BE6740284BB9A931D664B9482AA6C653
Certificate serial:       3EA6CBB1CBCFBA7BD985B63F82CF975077059B81
Authority key identifier: 7D:57:1D:A7:BE:67:40:28:4B:B9:A9:31:D6:64:B9:48:2A:A6:C6:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D571DA7BE6740284BB9A931D664B9482AA6C653.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/323830343a323864303a3a2f33322d3434203d3e20323633393832.roa
Signing time:             Thu 07 May 2026 16:28:08 +0000
ROA not before:           Thu 07 May 2026 16:23:08 +0000
ROA not after:            Thu 06 May 2027 16:28:08 +0000
asID:                     263982
IP address blocks:        2804:28d0::/32 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/7D571DA7BE6740284BB9A931D664B9482AA6C653.crl
                          rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/7D571DA7BE6740284BB9A931D664B9482AA6C653.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D571DA7BE6740284BB9A931D664B9482AA6C653.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:18:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a6:cb:b1:cb:cf:ba:7b:d9:85:b6:3f:82:cf:97:50:77:05:9b:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D571DA7BE6740284BB9A931D664B9482AA6C653
        Validity
            Not Before: May  7 16:23:08 2026 GMT
            Not After : May  6 16:28:08 2027 GMT
        Subject: CN=5BD47D91CC97AE8A97630963FCADB0315F513021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e2:d5:27:b0:b5:dc:d1:9b:a1:06:1f:60:96:
                    8f:fe:19:cf:cf:31:b3:7e:8d:eb:d7:38:03:40:39:
                    10:17:79:7a:2d:67:65:dd:12:58:3d:bb:f6:c5:ac:
                    f4:12:e6:79:fc:16:23:39:7c:bc:da:7f:24:58:7b:
                    09:f9:24:bb:8c:05:11:d7:3e:b1:08:c3:23:80:2c:
                    9c:81:8b:a8:18:de:6d:64:23:7f:a6:b8:5a:2a:60:
                    b5:3c:a2:12:e9:1c:81:2d:10:0c:2b:7c:c2:47:11:
                    47:76:57:5c:69:ea:b5:f4:b3:a4:6e:98:2a:f0:f1:
                    12:85:15:d3:7b:50:56:81:e6:e1:26:61:80:5f:f5:
                    7e:7f:1b:8b:b3:57:7c:cf:39:af:85:1e:b6:83:18:
                    cb:66:cd:15:98:fa:d3:53:33:93:2f:89:40:eb:1b:
                    37:e0:ee:3e:51:a6:af:ba:3d:80:0c:77:8c:ac:e7:
                    10:5e:67:0e:0f:97:07:b6:7a:87:6d:f1:ef:11:9b:
                    5c:32:82:59:67:65:cd:5e:0e:cf:0b:ca:2d:02:a9:
                    57:15:06:e4:e4:44:b1:27:25:e9:43:3d:bb:8d:1e:
                    d8:4a:8c:a5:ef:8f:d6:a5:f5:d3:21:01:7e:49:b4:
                    c0:e0:1d:ae:5a:96:ca:04:d4:e1:00:36:ac:3f:a2:
                    d2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D4:7D:91:CC:97:AE:8A:97:63:09:63:FC:AD:B0:31:5F:51:30:21
            X509v3 Authority Key Identifier:
                keyid:7D:57:1D:A7:BE:67:40:28:4B:B9:A9:31:D6:64:B9:48:2A:A6:C6:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/7D571DA7BE6740284BB9A931D664B9482AA6C653.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D571DA7BE6740284BB9A931D664B9482AA6C653.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/323830343a323864303a3a2f33322d3434203d3e20323633393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:12:14:41:62:8f:4e:44:93:fd:89:3f:47:29:61:f7:a6:11:
         5a:9c:23:c8:c6:2b:65:78:e7:a5:91:3d:0b:c3:31:79:ee:d6:
         21:dc:f9:70:9c:4a:b5:80:c5:89:02:e3:83:03:1e:ee:51:f1:
         40:ec:72:95:82:3b:27:c1:a3:bc:95:a3:ff:90:ff:77:77:cb:
         20:e9:c8:d2:bd:28:58:7a:ee:0d:56:84:61:db:a2:a2:28:13:
         28:c5:98:fd:1d:b9:eb:ab:b2:58:9d:64:7c:b2:0b:8c:84:24:
         31:fd:4c:29:a8:9f:67:b3:5d:fe:cf:3f:72:bd:f3:30:5a:2c:
         e1:34:9c:aa:0b:5f:d0:c9:3d:50:68:b3:6c:9c:15:f5:25:33:
         2b:21:1e:21:52:55:f8:16:cf:5e:23:b0:e3:46:30:46:d4:14:
         d2:d6:c3:ee:19:40:0c:08:c6:00:65:3d:a1:e2:15:11:4d:cf:
         b3:ee:f7:96:a1:a5:d1:08:70:22:3e:bc:06:bc:54:ee:fe:3c:
         07:0c:a5:33:5c:89:12:67:39:b8:37:e0:b6:69:3c:9c:27:78:
         a6:6e:cd:df:ae:9e:4b:51:84:8f:63:c7:41:0e:11:41:52:41:
         99:83:bb:59:c7:09:45:5d:7b:db:06:6d:6b:c1:5a:37:ea:0e:
         7d:da:e3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:19:37 2026 by rpki-client