Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EuB2FXep3bQnb6KEQvGFt1ZMh8WjWxMAHkVweZuXJ4BC/0/323830343a326435633a3a2f33322d3438203d3e20323635323737.roa
File:                     323830343a326435633a3a2f33322d3438203d3e20323635323737.roa (raw, json)
Hash identifier:          z9KlPTH9L9fRuYqXVyPIaxkAU2EMM/ipSTb9gUMe0nY=
Subject key identifier:   3B:52:06:D7:A0:EE:7D:AC:BE:59:37:85:DA:CF:A1:E3:4C:44:B8:F7
Certificate issuer:       /CN=F5551FC720336A394EEF862D39C06087559B8DD4
Certificate serial:       4E5D546DE0123CE7926E73B341EE54B93548EEF1
Authority key identifier: F5:55:1F:C7:20:33:6A:39:4E:EF:86:2D:39:C0:60:87:55:9B:8D:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5551FC720336A394EEF862D39C06087559B8DD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EuB2FXep3bQnb6KEQvGFt1ZMh8WjWxMAHkVweZuXJ4BC/0/323830343a326435633a3a2f33322d3438203d3e20323635323737.roa
Signing time:             Mon 22 Jun 2026 15:54:52 +0000
ROA not before:           Mon 22 Jun 2026 15:49:52 +0000
ROA not after:            Mon 21 Jun 2027 15:54:52 +0000
asID:                     265277
IP address blocks:        2804:2d5c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EuB2FXep3bQnb6KEQvGFt1ZMh8WjWxMAHkVweZuXJ4BC/0/F5551FC720336A394EEF862D39C06087559B8DD4.crl
                          rsync://rpki-repo.registro.br/repo/EuB2FXep3bQnb6KEQvGFt1ZMh8WjWxMAHkVweZuXJ4BC/0/F5551FC720336A394EEF862D39C06087559B8DD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5551FC720336A394EEF862D39C06087559B8DD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 17:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:5d:54:6d:e0:12:3c:e7:92:6e:73:b3:41:ee:54:b9:35:48:ee:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5551FC720336A394EEF862D39C06087559B8DD4
        Validity
            Not Before: Jun 22 15:49:52 2026 GMT
            Not After : Jun 21 15:54:52 2027 GMT
        Subject: CN=3B5206D7A0EE7DACBE593785DACFA1E34C44B8F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dd:81:83:a5:2b:e8:f9:ae:4a:2f:03:ad:e0:
                    34:8d:8f:f4:80:26:24:76:ab:4b:bd:69:1d:3f:70:
                    7b:46:a8:df:27:2e:88:1b:eb:7e:43:bc:65:e7:85:
                    26:95:a0:62:50:12:8f:40:93:14:07:a7:26:a0:11:
                    61:ca:ea:52:3d:5e:ce:62:bf:d5:59:86:3c:0f:39:
                    ad:94:c0:23:6b:6e:99:8e:5f:a0:07:49:cd:c9:cd:
                    b2:fb:10:7d:78:36:56:cf:c5:05:3c:77:bd:da:eb:
                    21:c3:c7:3a:1e:d2:12:88:d8:89:c1:33:6e:2c:e1:
                    45:b6:9f:6d:49:0f:ac:16:e2:13:2f:75:bd:64:e1:
                    a2:19:85:c8:1b:1a:74:e4:51:71:93:72:7b:2c:2f:
                    10:40:cb:18:0f:e6:ea:a2:a7:05:62:fa:60:32:bb:
                    b9:9d:cd:22:13:27:bd:84:11:d8:a9:d9:f9:2f:02:
                    21:fb:a3:0f:86:7b:f0:3a:6a:7b:40:38:36:84:22:
                    e2:2c:4d:bd:72:9d:91:5b:22:eb:42:67:6e:1f:b0:
                    fe:5d:55:11:94:97:c9:ec:0a:2b:94:0a:44:e9:08:
                    ff:e8:b4:da:02:d0:2d:d5:4f:fd:7d:32:93:76:60:
                    6a:cb:f5:9b:07:f6:aa:41:b5:82:29:75:a1:ac:b7:
                    37:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:52:06:D7:A0:EE:7D:AC:BE:59:37:85:DA:CF:A1:E3:4C:44:B8:F7
            X509v3 Authority Key Identifier:
                keyid:F5:55:1F:C7:20:33:6A:39:4E:EF:86:2D:39:C0:60:87:55:9B:8D:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EuB2FXep3bQnb6KEQvGFt1ZMh8WjWxMAHkVweZuXJ4BC/0/F5551FC720336A394EEF862D39C06087559B8DD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5551FC720336A394EEF862D39C06087559B8DD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EuB2FXep3bQnb6KEQvGFt1ZMh8WjWxMAHkVweZuXJ4BC/0/323830343a326435633a3a2f33322d3438203d3e20323635323737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:7d:4b:19:20:ec:32:18:c5:eb:8c:5f:fd:64:39:aa:47:86:
         07:b9:84:80:01:64:05:44:67:cd:24:c8:a8:6c:4b:e8:52:4c:
         a6:97:4a:b8:80:ee:79:24:ac:42:0e:66:5d:13:3f:d8:b6:02:
         a3:2d:02:67:1c:ee:b8:23:19:d3:d7:6b:87:c9:e2:f2:5d:8b:
         81:63:89:3c:77:ed:3d:66:0b:9f:d9:6a:2f:55:03:da:d5:49:
         09:7b:0d:82:02:d9:1e:1b:d7:aa:8f:d9:ec:f7:62:8d:fd:49:
         de:1d:ec:21:8b:be:09:cd:18:ce:41:85:4c:35:a5:81:17:82:
         61:04:d1:a8:e3:c4:03:88:ed:5a:17:3a:eb:1f:6b:76:c0:11:
         84:30:e8:d1:76:ad:9a:96:de:3a:c4:f4:a9:a9:7c:6c:e6:04:
         f5:2f:31:9d:f9:97:b2:0c:61:21:7c:de:a7:22:79:32:99:70:
         e1:2b:1e:f6:a9:20:00:7c:ba:af:b8:4c:ca:82:6c:8c:a0:6c:
         5d:98:db:13:c1:d1:35:0f:da:76:8c:8a:db:ec:31:6b:a9:d1:
         46:5f:3e:1c:09:49:65:ca:5a:0d:b5:28:4d:03:05:f4:19:9c:
         9d:cf:64:7a:a9:2f:79:0d:bb:36:3b:bb:80:01:41:3f:f3:88:
         c4:e7:1e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:18:32 2026 by rpki-client