Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F5Sy5H14mPTY1W2HoTb16grREsSWy5enWQndhQa3uui5/0/323830343a313163633a3a2f33322d3438203d3e20323633343430.roa
File:                     323830343a313163633a3a2f33322d3438203d3e20323633343430.roa (raw, json)
Hash identifier:          LsXcd2j+T2m2jUFwIF8cZzGNHC+3Bj6XnrFCFg+G/js=
Subject key identifier:   50:EA:C2:C3:35:F7:82:68:93:EF:17:E6:92:4A:BE:D0:96:BB:A9:76
Certificate issuer:       /CN=5D85A94605AAF5914298D82B5A19565714A32B5A
Certificate serial:       40A4FF91048205715C4879026276F7F234B4E23E
Authority key identifier: 5D:85:A9:46:05:AA:F5:91:42:98:D8:2B:5A:19:56:57:14:A3:2B:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D85A94605AAF5914298D82B5A19565714A32B5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F5Sy5H14mPTY1W2HoTb16grREsSWy5enWQndhQa3uui5/0/323830343a313163633a3a2f33322d3438203d3e20323633343430.roa
Signing time:             Mon 04 May 2026 13:14:59 +0000
ROA not before:           Mon 04 May 2026 13:09:59 +0000
ROA not after:            Mon 03 May 2027 13:14:59 +0000
asID:                     263440
IP address blocks:        2804:11cc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F5Sy5H14mPTY1W2HoTb16grREsSWy5enWQndhQa3uui5/0/5D85A94605AAF5914298D82B5A19565714A32B5A.crl
                          rsync://rpki-repo.registro.br/repo/F5Sy5H14mPTY1W2HoTb16grREsSWy5enWQndhQa3uui5/0/5D85A94605AAF5914298D82B5A19565714A32B5A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D85A94605AAF5914298D82B5A19565714A32B5A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 00:57:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a4:ff:91:04:82:05:71:5c:48:79:02:62:76:f7:f2:34:b4:e2:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D85A94605AAF5914298D82B5A19565714A32B5A
        Validity
            Not Before: May  4 13:09:59 2026 GMT
            Not After : May  3 13:14:59 2027 GMT
        Subject: CN=50EAC2C335F7826893EF17E6924ABED096BBA976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b3:fa:51:2a:24:10:35:5c:13:88:b8:6b:ea:
                    76:e4:a0:59:90:f7:c6:e8:ea:8f:bc:02:4d:c1:16:
                    f9:e7:b2:5b:30:9e:a1:25:5f:a7:fa:25:a0:31:ac:
                    2c:8e:60:b6:05:0e:47:ed:29:e3:fc:2f:05:c3:e2:
                    51:83:1d:7b:f4:fc:21:b2:42:c5:a8:b6:31:c4:9c:
                    dd:af:00:a4:42:d2:4f:87:d6:ba:52:c3:3a:b6:87:
                    d0:06:e4:52:3c:71:db:df:42:5a:c3:fc:6c:af:f4:
                    92:a5:b0:0e:24:a0:f6:14:dd:ba:61:59:df:4a:a8:
                    7f:54:17:d6:23:3a:20:f9:c7:4c:7e:38:aa:15:91:
                    41:c7:af:40:93:ab:29:7e:34:9d:09:49:6f:93:9b:
                    46:e3:84:5d:e8:fa:27:f9:7a:01:15:1a:06:01:cd:
                    e2:9b:63:0e:69:84:b8:26:df:9c:21:69:08:5d:cb:
                    94:59:d9:41:30:4a:4c:a7:2a:37:18:a9:30:56:2e:
                    15:14:78:70:f3:8d:a7:d2:50:9f:f1:e1:4e:9c:a2:
                    0c:df:54:c3:19:aa:27:18:f2:87:e3:28:68:d3:1b:
                    76:6a:fd:fb:9b:93:27:1d:3c:9f:8e:c7:21:17:4e:
                    77:20:9a:b7:63:3a:38:0e:7b:4b:12:ab:15:ea:12:
                    fc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:EA:C2:C3:35:F7:82:68:93:EF:17:E6:92:4A:BE:D0:96:BB:A9:76
            X509v3 Authority Key Identifier:
                keyid:5D:85:A9:46:05:AA:F5:91:42:98:D8:2B:5A:19:56:57:14:A3:2B:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F5Sy5H14mPTY1W2HoTb16grREsSWy5enWQndhQa3uui5/0/5D85A94605AAF5914298D82B5A19565714A32B5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D85A94605AAF5914298D82B5A19565714A32B5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F5Sy5H14mPTY1W2HoTb16grREsSWy5enWQndhQa3uui5/0/323830343a313163633a3a2f33322d3438203d3e20323633343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:11cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:3c:db:d7:20:04:16:74:bb:eb:96:e7:f0:9a:01:b5:83:c2:
         6a:90:cc:f5:77:4e:cd:a1:91:e6:fc:63:26:56:ce:96:aa:e9:
         aa:a0:02:b5:dc:51:28:9b:9f:03:b1:19:21:b1:21:15:c1:48:
         d0:69:4e:e5:60:c1:88:c5:07:bf:74:25:cb:e3:0e:31:f5:73:
         bf:39:aa:56:40:e3:50:db:72:09:45:1a:59:80:4d:4d:5a:3b:
         a1:93:9c:d9:3b:52:09:5b:bb:12:9b:35:52:d1:f5:bb:2f:b4:
         a7:16:d0:77:63:d2:e8:69:e4:1c:e8:c5:87:8b:f1:d2:a7:65:
         6c:5c:9c:69:03:a7:30:4b:94:07:d7:a6:1a:fb:e3:0f:51:65:
         69:e7:97:7f:df:c3:d6:1d:ed:65:79:3a:79:6d:60:5b:2a:ed:
         6b:f1:fe:85:fa:85:14:c1:d5:4c:ec:f5:bf:48:08:73:5b:57:
         c0:aa:7d:4c:b8:1d:c4:59:77:58:50:c0:7a:ee:8e:8a:82:72:
         d2:bc:e1:dd:81:51:6e:65:77:d1:a8:de:6a:9a:b8:f6:a9:33:
         92:38:0b:68:ae:7b:5a:93:0c:78:0a:ce:14:4b:ef:cd:5b:63:
         ed:63:3b:c2:6a:1e:a3:4d:34:3d:9c:7d:4e:e9:c5:06:c3:99:
         c2:f9:6f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:51:11 2026 by rpki-client