Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/1/323830343a326537633a3a2f33342d3334203d3e20323635333438.roa
File:                     323830343a326537633a3a2f33342d3334203d3e20323635333438.roa (raw, json)
Hash identifier:          yR7EuH8IaqYdhoJpuFi5S8+qsw1PHj9ywqypXkIuBs8=
Subject key identifier:   2C:48:13:94:32:50:29:27:1F:D3:24:2A:0F:F7:83:0D:68:CC:D6:3A
Certificate issuer:       /CN=472250E53192AC047B60F6623A559D453E09DCB0
Certificate serial:       1DC5E0F7B027CA39621B0A4676E2A1BAE4275B28
Authority key identifier: 47:22:50:E5:31:92:AC:04:7B:60:F6:62:3A:55:9D:45:3E:09:DC:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/472250E53192AC047B60F6623A559D453E09DCB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/1/323830343a326537633a3a2f33342d3334203d3e20323635333438.roa
Signing time:             Fri 08 May 2026 20:12:24 +0000
ROA not before:           Fri 08 May 2026 20:07:24 +0000
ROA not after:            Fri 07 May 2027 20:12:24 +0000
asID:                     265348
IP address blocks:        2804:2e7c::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/1/472250E53192AC047B60F6623A559D453E09DCB0.crl
                          rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/1/472250E53192AC047B60F6623A559D453E09DCB0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/472250E53192AC047B60F6623A559D453E09DCB0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 09:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c5:e0:f7:b0:27:ca:39:62:1b:0a:46:76:e2:a1:ba:e4:27:5b:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472250E53192AC047B60F6623A559D453E09DCB0
        Validity
            Not Before: May  8 20:07:24 2026 GMT
            Not After : May  7 20:12:24 2027 GMT
        Subject: CN=2C481394325029271FD3242A0FF7830D68CCD63A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fb:5d:b2:dd:31:ad:65:8d:ae:21:57:6b:be:
                    72:8b:c6:37:06:1f:57:24:96:a3:e7:80:1b:ae:ee:
                    d7:57:f3:08:a1:13:2a:11:9b:1f:1e:d7:92:f5:21:
                    0d:7c:5b:73:cd:ea:23:c5:f5:2a:ab:c2:9c:ca:cb:
                    dc:65:69:16:0d:d5:a8:fb:ce:58:ff:3e:d5:59:df:
                    a8:83:66:72:9c:a1:47:60:f7:c6:de:b0:20:6d:11:
                    f0:73:12:9a:2c:f5:fc:9e:b6:95:e9:ca:9e:b7:31:
                    9b:50:b7:ab:6e:be:44:92:65:9b:23:0a:58:84:95:
                    af:9a:30:96:ac:0b:e8:03:85:30:a6:4e:ce:e1:28:
                    4c:7a:3f:d8:a0:77:a1:71:dc:66:84:55:8f:b7:c5:
                    ee:1d:63:c4:7b:63:34:a5:50:f5:9e:9f:93:83:96:
                    39:25:d6:a6:13:c9:c4:78:0f:6a:57:9a:c3:69:1a:
                    1d:6b:ea:31:f2:34:d9:5a:de:98:17:0d:e7:3a:2e:
                    91:29:dc:c9:9a:af:d8:6c:25:55:80:43:40:61:50:
                    a4:7e:75:9b:12:5b:c7:16:bb:bb:15:ba:15:0e:10:
                    c8:51:81:2e:73:86:e8:c6:7d:95:d0:cc:fb:1e:5f:
                    8a:49:4c:33:ff:49:53:d4:d1:ac:d6:28:8d:8e:18:
                    3c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:48:13:94:32:50:29:27:1F:D3:24:2A:0F:F7:83:0D:68:CC:D6:3A
            X509v3 Authority Key Identifier:
                keyid:47:22:50:E5:31:92:AC:04:7B:60:F6:62:3A:55:9D:45:3E:09:DC:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/1/472250E53192AC047B60F6623A559D453E09DCB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/472250E53192AC047B60F6623A559D453E09DCB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/1/323830343a326537633a3a2f33342d3334203d3e20323635333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e7c::/34

    Signature Algorithm: sha256WithRSAEncryption
         68:76:e8:da:88:f9:31:92:ea:55:70:a1:a9:3c:72:07:ec:c4:
         8f:e4:b4:26:78:b9:e5:79:77:72:7d:ff:f4:30:3e:7a:f9:c7:
         f0:64:db:0d:ca:e9:17:2b:b8:e6:2f:76:16:e8:af:21:f0:ea:
         ca:7a:50:af:65:b7:56:c1:42:79:a9:da:43:d3:8d:e7:2a:2b:
         a1:e4:19:2e:9c:fb:18:6d:20:b6:16:35:27:4b:f2:4c:19:cf:
         ff:a1:af:db:d5:c7:6b:db:a1:ac:f0:8e:83:58:26:cc:6a:7c:
         b8:4e:4e:ce:52:51:de:99:5d:dd:2a:82:05:0e:f8:a9:5d:15:
         8e:c2:1d:cd:87:c0:8b:b3:c3:38:3e:e4:92:6b:46:5e:a6:0f:
         45:e1:8a:8b:69:08:73:71:be:31:4a:bb:66:f6:e2:55:f2:74:
         6a:e5:b3:80:5e:7e:d8:fa:98:cc:fd:35:91:67:f1:da:97:73:
         6f:b9:11:37:9b:61:01:71:85:bc:48:29:6b:50:48:17:bf:85:
         c9:83:ba:41:fe:44:fe:2e:fd:3a:b6:ad:86:12:0e:59:36:33:
         2f:0a:58:6d:80:ef:88:78:b5:ad:6a:4e:92:a3:f0:ed:ca:23:
         89:29:d4:12:e8:c9:7b:a1:cc:5d:50:40:2c:d3:4f:52:f8:2f:
         e8:15:14:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:36:07 2026 by rpki-client