Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/323830343a363635633a3a2f33322d313238203d3e20323639353533.roa
File:                     323830343a363635633a3a2f33322d313238203d3e20323639353533.roa (raw, json)
Hash identifier:          I0L16WjFSpuykXqED0lnmznyQcL5WDK4OqQ9kE7gKFk=
Subject key identifier:   22:29:51:92:8A:96:6E:75:FD:96:99:46:71:81:C4:BD:CD:34:5C:2C
Certificate issuer:       /CN=57F02E776058156B95AEFD20B6CD5F53BF9CE70F
Certificate serial:       24210AA276EC6FDFFD0C853730845D5EBC2B201E
Authority key identifier: 57:F0:2E:77:60:58:15:6B:95:AE:FD:20:B6:CD:5F:53:BF:9C:E7:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/323830343a363635633a3a2f33322d313238203d3e20323639353533.roa
Signing time:             Tue 28 Apr 2026 17:00:00 +0000
ROA not before:           Tue 28 Apr 2026 16:55:00 +0000
ROA not after:            Tue 27 Apr 2027 17:00:00 +0000
asID:                     269553
IP address blocks:        2804:665c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.crl
                          rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:21:0a:a2:76:ec:6f:df:fd:0c:85:37:30:84:5d:5e:bc:2b:20:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57F02E776058156B95AEFD20B6CD5F53BF9CE70F
        Validity
            Not Before: Apr 28 16:55:00 2026 GMT
            Not After : Apr 27 17:00:00 2027 GMT
        Subject: CN=222951928A966E75FD9699467181C4BDCD345C2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9c:81:06:1e:a0:be:ed:9b:69:4e:ad:20:ae:
                    ee:1d:8b:01:1f:16:09:6e:26:61:cc:fd:ee:f4:f2:
                    f3:4b:57:30:c2:61:f0:63:cf:3d:16:63:a9:ce:30:
                    ad:60:a7:9b:cb:4d:2c:a5:e5:2b:1e:bf:0d:53:36:
                    99:09:0e:ba:0a:0c:e6:64:37:3f:40:99:bf:93:8a:
                    92:f7:25:d9:77:7a:18:cb:db:81:3d:d1:34:96:ff:
                    cb:f9:1f:4c:c5:13:b6:b2:a6:af:3a:73:16:ca:ce:
                    b3:1b:33:de:ce:52:cf:24:7d:cf:ef:4e:33:28:21:
                    79:24:b5:8d:13:41:e0:9a:8b:34:b7:1e:ba:8a:c8:
                    73:fa:e1:4a:f5:9d:52:07:6f:a7:25:52:a4:48:23:
                    89:be:fc:0d:9c:25:dc:4f:d1:dd:07:34:01:ed:f6:
                    47:f5:11:f4:f3:7a:8b:02:77:38:46:36:92:9c:9e:
                    ab:3c:c4:d7:8c:87:6a:e6:16:ba:39:bf:eb:fd:93:
                    36:41:00:7e:7d:16:88:31:94:0c:2b:f1:a8:3c:e8:
                    b1:67:15:6c:47:1c:c7:66:09:50:bf:84:21:5c:4e:
                    ba:53:18:7f:c7:46:67:94:9b:99:f5:8b:5a:81:c7:
                    85:fe:c4:9a:a0:8c:ce:03:10:0c:41:c4:6c:7d:e2:
                    3c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:29:51:92:8A:96:6E:75:FD:96:99:46:71:81:C4:BD:CD:34:5C:2C
            X509v3 Authority Key Identifier:
                keyid:57:F0:2E:77:60:58:15:6B:95:AE:FD:20:B6:CD:5F:53:BF:9C:E7:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/323830343a363635633a3a2f33322d313238203d3e20323639353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:665c::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:0e:58:eb:e6:7a:5a:c4:29:ff:84:8f:91:0f:3b:e8:30:e8:
         17:7f:31:db:bf:da:97:d2:19:7c:4f:35:c1:7c:df:d4:9b:40:
         e0:33:0c:ea:9a:73:1d:38:1c:a2:e4:eb:cc:34:6b:65:1e:4f:
         aa:4c:f6:46:d8:44:9d:ee:1d:52:24:39:09:5a:02:5a:a9:d1:
         f7:54:30:e5:e9:78:d8:ca:ee:27:90:56:45:c7:e6:2e:a9:61:
         6c:77:c5:84:eb:d9:6e:f1:4a:00:cb:14:72:45:46:cf:a1:f6:
         a0:3d:0a:1e:02:ee:e7:47:c7:36:16:93:fd:94:15:ba:de:b4:
         9f:c8:45:e1:1d:03:02:0b:12:1b:1b:03:db:8a:a4:18:8d:9b:
         85:96:ad:64:15:18:2b:54:3d:15:c0:bb:0a:c4:c9:55:61:ec:
         f7:6a:2c:4c:73:ff:6e:e1:43:40:00:f5:41:b0:b7:a3:73:b0:
         d1:5a:b5:bc:f1:50:2d:bb:ba:79:62:00:1c:89:e7:51:c0:bb:
         dc:0d:f9:b4:ca:d4:6b:0d:58:cf:06:bc:0f:e4:4c:3d:3c:d2:
         30:c0:f7:ac:bb:39:e8:dc:94:aa:ad:fe:f5:3a:fc:0f:27:4a:
         b3:4b:b8:84:04:bf:ed:98:c3:7c:e3:c5:0d:2a:ae:a8:92:4b:
         b3:8f:dc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 22:16:08 2026 by rpki-client