Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/323830343a353330633a633030303a3a2f33342d3334203d3e20323638353630.roa
File:                     323830343a353330633a633030303a3a2f33342d3334203d3e20323638353630.roa (raw, json)
Hash identifier:          J7KpFFeX3xpVkaStIRrjDg95CzcpeQLse0yRLAxtIzQ=
Subject key identifier:   2D:38:A2:93:23:08:5E:F4:73:AA:B6:C7:37:CB:3E:D3:70:58:66:75
Certificate issuer:       /CN=5C29F2932419957E47C4D277E53183F70D734498
Certificate serial:       563FBBBD7CC79C52C91453F4BAFC0080C42C5F42
Authority key identifier: 5C:29:F2:93:24:19:95:7E:47:C4:D2:77:E5:31:83:F7:0D:73:44:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C29F2932419957E47C4D277E53183F70D734498.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/323830343a353330633a633030303a3a2f33342d3334203d3e20323638353630.roa
Signing time:             Sat 09 May 2026 14:54:12 +0000
ROA not before:           Sat 09 May 2026 14:49:12 +0000
ROA not after:            Sat 08 May 2027 14:54:12 +0000
asID:                     268560
IP address blocks:        2804:530c:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/5C29F2932419957E47C4D277E53183F70D734498.crl
                          rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/5C29F2932419957E47C4D277E53183F70D734498.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C29F2932419957E47C4D277E53183F70D734498.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 10:05:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:3f:bb:bd:7c:c7:9c:52:c9:14:53:f4:ba:fc:00:80:c4:2c:5f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C29F2932419957E47C4D277E53183F70D734498
        Validity
            Not Before: May  9 14:49:12 2026 GMT
            Not After : May  8 14:54:12 2027 GMT
        Subject: CN=2D38A29323085EF473AAB6C737CB3ED370586675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:81:4a:4f:ea:30:f6:a3:41:cb:9f:3c:7c:cb:
                    60:36:a3:ab:85:d9:f9:48:e9:3e:86:e9:d9:73:62:
                    ea:9a:3e:03:a1:37:3b:98:6e:76:f6:1e:08:b0:18:
                    58:b6:57:2e:39:3b:4d:f7:ed:c0:86:95:42:b1:03:
                    5d:58:cb:8a:d0:40:39:7d:58:87:9d:3d:4d:16:4c:
                    30:66:ae:b5:dd:98:59:b8:ec:ee:b4:c9:94:cf:c4:
                    18:b7:5b:da:63:9c:64:4a:33:b2:72:f3:84:33:57:
                    5d:d6:4e:dc:7f:c7:08:84:3c:b0:73:2d:3c:58:b7:
                    06:59:56:89:54:3f:92:1b:9a:85:5e:77:f6:e2:45:
                    e4:30:d7:7d:18:d1:68:51:62:be:26:2d:fe:57:4f:
                    70:89:25:8c:14:43:46:a8:a3:46:5e:97:7d:0f:83:
                    ff:56:07:7d:f6:24:63:b8:cb:25:87:49:2f:60:0c:
                    fd:98:47:bb:fe:1e:fa:30:56:dd:da:52:d9:c0:f6:
                    62:f1:8a:12:0a:6b:cb:a5:35:a1:85:35:05:6b:4c:
                    29:b1:a6:35:ac:2b:bb:a1:3a:46:00:12:72:d8:6c:
                    2b:59:e3:c1:67:5e:03:c8:f0:fc:44:8a:7f:33:81:
                    c4:59:8e:0a:8b:dc:69:f9:7f:ef:10:4c:8d:8e:6c:
                    ee:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:38:A2:93:23:08:5E:F4:73:AA:B6:C7:37:CB:3E:D3:70:58:66:75
            X509v3 Authority Key Identifier:
                keyid:5C:29:F2:93:24:19:95:7E:47:C4:D2:77:E5:31:83:F7:0D:73:44:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/5C29F2932419957E47C4D277E53183F70D734498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C29F2932419957E47C4D277E53183F70D734498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/323830343a353330633a633030303a3a2f33342d3334203d3e20323638353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:530c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4c:a8:e2:71:bf:6a:ea:3d:c2:e3:85:f6:f3:45:18:b0:d4:0c:
         2b:1c:ea:cd:23:4c:6c:aa:4e:61:a9:48:4b:71:26:23:e3:ae:
         9d:2b:86:d1:cd:59:ab:f4:d4:b3:d1:15:a6:ec:7a:b2:da:bb:
         0d:fe:6b:01:ef:28:ec:8c:4a:ed:b1:90:48:cb:8f:e6:44:54:
         29:ca:15:f8:8e:f9:de:91:13:b7:7b:bb:50:e5:a3:6c:dc:4f:
         fc:3c:29:2d:23:d8:86:97:ec:fc:68:60:24:36:cf:90:01:fc:
         eb:31:80:71:50:f9:64:45:9c:ec:14:3f:f7:2d:3c:5f:b3:07:
         d8:0d:a4:38:54:6d:45:e5:c3:48:b3:29:dd:b0:40:8c:ba:81:
         9f:47:74:95:62:cb:53:4f:d8:82:ae:51:db:77:ac:eb:e0:23:
         69:67:00:ea:32:da:0b:c6:ae:ac:e3:2b:d2:3f:01:b3:bc:96:
         30:33:81:cf:ce:f1:eb:22:5a:3c:e1:6b:58:62:03:66:97:dc:
         d9:67:df:15:e7:3b:e4:00:d0:35:d6:d4:67:51:bb:60:8e:e7:
         de:29:75:18:b8:34:3e:82:b6:9e:da:43:6b:0e:b0:37:2b:82:
         bd:a5:62:51:11:ba:43:d4:21:78:fd:09:cc:21:54:77:8a:38:
         86:55:00:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:14:04 2026 by rpki-client