Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/1/323830343a326537633a633a3a2f34382d3438203d3e20323635333438.roa
File:                     323830343a326537633a633a3a2f34382d3438203d3e20323635333438.roa (raw, json)
Hash identifier:          CSFit4Qss6VaEAvrt1sxjqTE1Gqa4zivQpMgrFJSXuo=
Subject key identifier:   1F:D2:53:FA:A2:C0:E8:C8:31:74:19:C7:17:B0:BB:50:6B:3D:24:47
Certificate issuer:       /CN=472250E53192AC047B60F6623A559D453E09DCB0
Certificate serial:       2E3D2BF670F809EA110C9C0BB6D6D229DFC964F0
Authority key identifier: 47:22:50:E5:31:92:AC:04:7B:60:F6:62:3A:55:9D:45:3E:09:DC:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/472250E53192AC047B60F6623A559D453E09DCB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/1/323830343a326537633a633a3a2f34382d3438203d3e20323635333438.roa
Signing time:             Fri 08 May 2026 20:12:29 +0000
ROA not before:           Fri 08 May 2026 20:07:29 +0000
ROA not after:            Fri 07 May 2027 20:12:29 +0000
asID:                     265348
IP address blocks:        2804:2e7c:c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/1/472250E53192AC047B60F6623A559D453E09DCB0.crl
                          rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/1/472250E53192AC047B60F6623A559D453E09DCB0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/472250E53192AC047B60F6623A559D453E09DCB0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 09:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:3d:2b:f6:70:f8:09:ea:11:0c:9c:0b:b6:d6:d2:29:df:c9:64:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472250E53192AC047B60F6623A559D453E09DCB0
        Validity
            Not Before: May  8 20:07:29 2026 GMT
            Not After : May  7 20:12:29 2027 GMT
        Subject: CN=1FD253FAA2C0E8C8317419C717B0BB506B3D2447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:14:d5:e6:30:8e:c0:98:cf:2d:2f:26:23:9b:
                    62:fe:28:ca:20:d6:55:98:b9:4c:7f:c2:97:de:f4:
                    57:e6:7d:ac:a8:bc:2f:44:7b:82:bd:51:a2:0d:04:
                    64:26:e8:8a:aa:0d:0a:cd:31:76:97:f2:4f:68:37:
                    30:ad:ee:72:15:c9:91:bf:02:d9:29:10:4a:c5:dd:
                    79:cd:31:9b:6d:b9:9d:fa:58:17:3e:bf:bf:ab:b9:
                    51:20:f5:26:7b:30:53:30:9c:27:ee:66:c7:0d:9d:
                    68:10:60:33:89:76:57:5d:db:49:5a:0f:c3:95:67:
                    6d:9b:4d:62:9e:eb:32:87:30:2d:01:8d:e9:15:44:
                    65:86:32:19:1f:fc:d3:6e:eb:e0:b4:19:98:0d:29:
                    6b:dd:ec:8c:db:70:32:72:53:d8:3c:e5:7d:83:a1:
                    cb:14:0a:ca:ba:a5:b5:ed:5b:8b:fb:d7:44:f2:b2:
                    f5:7d:aa:50:d7:1c:80:19:6a:05:b3:8c:65:91:d3:
                    0a:9b:aa:bd:f1:f7:48:4c:fe:42:a6:c9:a8:25:24:
                    5b:0a:4c:f9:ec:4c:de:80:36:ed:4c:1a:bf:67:94:
                    2b:60:20:54:83:60:57:19:b1:b6:71:2e:96:de:fb:
                    a6:38:6f:b9:57:65:34:dd:0b:e1:e6:3f:f2:54:b4:
                    e4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D2:53:FA:A2:C0:E8:C8:31:74:19:C7:17:B0:BB:50:6B:3D:24:47
            X509v3 Authority Key Identifier:
                keyid:47:22:50:E5:31:92:AC:04:7B:60:F6:62:3A:55:9D:45:3E:09:DC:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/1/472250E53192AC047B60F6623A559D453E09DCB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/472250E53192AC047B60F6623A559D453E09DCB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/1/323830343a326537633a633a3a2f34382d3438203d3e20323635333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e7c:c::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:b5:2f:8b:5d:7f:0c:ff:0b:30:19:a5:5e:dc:4d:84:e1:1f:
         b8:ad:13:5d:88:c1:7e:72:d7:42:01:f2:5b:66:26:87:26:da:
         fb:ab:1e:ce:07:0a:26:66:9d:3b:d5:2b:11:f0:f7:ae:79:c7:
         53:c1:14:27:3b:74:98:bd:ae:1b:16:7e:c6:eb:9b:ba:80:16:
         4f:ca:81:0d:a8:65:9d:1c:82:17:73:9d:5d:e5:a0:0a:c5:9f:
         2d:5a:9d:17:05:c2:68:55:ca:4f:3e:1b:9f:25:e9:44:dd:20:
         20:b8:5e:60:a4:67:5b:6b:7d:7c:d5:05:4f:a4:7a:55:fe:cc:
         df:3a:38:10:30:09:0b:9f:9c:d4:6d:09:61:ea:07:d4:d6:10:
         2d:26:fc:8d:7d:5c:4f:2a:b6:d0:21:d2:3e:f8:6b:0d:e6:88:
         12:68:9a:4c:b2:79:c6:bd:b0:6b:3a:66:a7:75:44:a2:17:d8:
         a1:94:36:e7:67:b0:f4:cc:9f:1d:84:09:ab:e4:8b:c4:64:ac:
         d4:d3:e7:b6:18:13:93:96:a9:b1:2b:4a:84:0f:a0:49:ed:de:
         8f:95:69:7d:c9:bc:a3:92:55:a9:c9:11:af:67:25:c6:8d:1c:
         59:d9:a6:c8:1e:f1:da:2d:26:cd:24:3b:3f:6a:f2:4c:bd:6d:
         c3:df:06:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:49:13 2026 by rpki-client