Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/323830343a326136303a3a2f33322d3438203d3e20323633303839.roa
File:                     323830343a326136303a3a2f33322d3438203d3e20323633303839.roa (raw, json)
Hash identifier:          YMm+PSycgKzfaXq3bjHCn0Kw3rZ1tsqp7S+BleCtCqA=
Subject key identifier:   99:7F:51:47:DA:20:EC:88:4F:E7:B5:C9:0A:D4:3B:6B:A2:E6:45:F2
Certificate issuer:       /CN=5BE9CCE7A97244EC28E9B494A1182882E32B2EF8
Certificate serial:       7B4A38AB6BAB26FBA58214CA05313A522071054B
Authority key identifier: 5B:E9:CC:E7:A9:72:44:EC:28:E9:B4:94:A1:18:28:82:E3:2B:2E:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE9CCE7A97244EC28E9B494A1182882E32B2EF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/323830343a326136303a3a2f33322d3438203d3e20323633303839.roa
Signing time:             Fri 24 Apr 2026 18:01:24 +0000
ROA not before:           Fri 24 Apr 2026 17:56:24 +0000
ROA not after:            Fri 23 Apr 2027 18:01:24 +0000
asID:                     263089
IP address blocks:        2804:2a60::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/5BE9CCE7A97244EC28E9B494A1182882E32B2EF8.crl
                          rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/5BE9CCE7A97244EC28E9B494A1182882E32B2EF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE9CCE7A97244EC28E9B494A1182882E32B2EF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 11:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4a:38:ab:6b:ab:26:fb:a5:82:14:ca:05:31:3a:52:20:71:05:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BE9CCE7A97244EC28E9B494A1182882E32B2EF8
        Validity
            Not Before: Apr 24 17:56:24 2026 GMT
            Not After : Apr 23 18:01:24 2027 GMT
        Subject: CN=997F5147DA20EC884FE7B5C90AD43B6BA2E645F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ae:a8:04:cb:37:5a:17:c0:ff:39:08:bb:35:
                    9d:c7:2d:ee:e0:63:e5:cd:a1:4d:8d:64:31:ae:a2:
                    da:05:21:82:be:c5:37:7d:8f:2a:b9:49:cf:c7:9b:
                    d9:2d:67:41:85:3a:2e:cd:49:c0:8e:82:a6:8e:7d:
                    a3:f0:5b:b7:87:ee:ba:05:86:83:0a:92:6d:80:ea:
                    9e:60:34:66:cd:4b:e6:77:a3:69:39:48:95:95:23:
                    88:50:6a:93:17:21:5b:31:1b:a4:d8:6b:40:37:3f:
                    f8:74:6a:9a:2e:38:97:84:14:a8:54:be:53:8a:6e:
                    ca:91:b4:e8:85:e2:6d:33:40:6a:89:0d:a8:75:a2:
                    22:da:4c:c5:ec:f6:de:23:b4:6d:9b:c2:f7:b6:4f:
                    8c:e6:9b:5e:52:9f:da:0c:9e:ec:29:0a:42:86:45:
                    0f:74:45:ba:92:62:e5:f8:64:f7:94:e9:73:b4:64:
                    49:1a:97:6b:90:ca:6e:f8:68:b1:9f:d4:fe:bd:e8:
                    5f:79:75:b7:91:a1:9d:fd:1c:28:33:ce:59:1b:da:
                    41:3c:bc:91:a5:ae:6b:0a:30:f6:f0:9f:1c:be:8a:
                    05:ff:f9:da:f1:71:76:09:b2:be:69:bf:13:fc:9a:
                    dc:50:e9:7a:6e:83:8a:4b:df:a4:5b:d6:4b:30:10:
                    86:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7F:51:47:DA:20:EC:88:4F:E7:B5:C9:0A:D4:3B:6B:A2:E6:45:F2
            X509v3 Authority Key Identifier:
                keyid:5B:E9:CC:E7:A9:72:44:EC:28:E9:B4:94:A1:18:28:82:E3:2B:2E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/5BE9CCE7A97244EC28E9B494A1182882E32B2EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE9CCE7A97244EC28E9B494A1182882E32B2EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/323830343a326136303a3a2f33322d3438203d3e20323633303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:85:b8:db:75:7a:7d:cd:8f:c7:22:7e:4d:17:71:b0:68:a9:
         51:66:fc:50:a9:c3:a5:fd:bb:8c:fa:8d:d1:49:ea:2d:20:a3:
         05:cc:2d:33:38:6e:78:d8:7c:2e:76:ae:e5:f2:3a:a5:98:b6:
         4a:df:31:37:14:58:ca:e5:98:e5:84:7a:0a:4a:3d:3b:bb:d8:
         c6:7b:f0:82:98:4a:47:3a:bf:f0:0a:86:78:9b:c2:97:71:94:
         16:ad:06:42:36:5e:3a:12:eb:56:9e:d2:8d:b4:3c:b3:2d:a3:
         aa:5c:f2:5f:c2:c2:2d:f0:2e:2e:b0:0a:00:93:5f:4c:3c:48:
         b6:3f:15:5b:6a:29:2b:7d:df:c0:95:0d:33:87:43:34:04:e1:
         c3:18:1f:20:45:2f:67:15:d5:d8:c5:57:be:fd:8a:d0:b4:67:
         fd:92:0a:86:de:a5:28:e5:24:17:9a:ab:af:e9:23:35:b4:49:
         05:1b:a6:85:a3:a5:e7:b4:7a:03:68:ca:73:58:3f:aa:96:67:
         32:09:76:b3:f5:80:ab:b8:9c:af:3f:b5:dd:68:d9:d7:1c:b9:
         76:ef:cf:25:51:bc:93:5a:2b:c8:3c:91:3f:7e:14:36:bf:eb:
         08:f1:72:e9:02:b7:bf:ff:ab:4b:67:72:ee:15:81:80:01:7f:
         b6:3c:d7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:46:11 2026 by rpki-client