Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GLV9P6TvqfLpbyKekSwiRHbtJL7VEc7EZnFrrqa1yV2G/0/323830343a383934343a3a2f33322d3438203d3e20323733353933.roa
File:                     323830343a383934343a3a2f33322d3438203d3e20323733353933.roa (raw, json)
Hash identifier:          HCMclN7TrXpe9jA7MejpUWKFnunyXEftgH52iquSWu8=
Subject key identifier:   25:95:E0:1C:19:72:6A:65:4D:03:4E:B3:70:62:44:06:05:AF:BF:2B
Certificate issuer:       /CN=725C969424ED3EC6218ABA1DB95AE1CDF523AEA3
Certificate serial:       240AFA528B693C689C69953DFDB781C85D578EF8
Authority key identifier: 72:5C:96:94:24:ED:3E:C6:21:8A:BA:1D:B9:5A:E1:CD:F5:23:AE:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725C969424ED3EC6218ABA1DB95AE1CDF523AEA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GLV9P6TvqfLpbyKekSwiRHbtJL7VEc7EZnFrrqa1yV2G/0/323830343a383934343a3a2f33322d3438203d3e20323733353933.roa
Signing time:             Wed 13 May 2026 16:33:26 +0000
ROA not before:           Wed 13 May 2026 16:28:26 +0000
ROA not after:            Wed 12 May 2027 16:33:26 +0000
asID:                     273593
IP address blocks:        2804:8944::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GLV9P6TvqfLpbyKekSwiRHbtJL7VEc7EZnFrrqa1yV2G/0/725C969424ED3EC6218ABA1DB95AE1CDF523AEA3.crl
                          rsync://rpki-repo.registro.br/repo/GLV9P6TvqfLpbyKekSwiRHbtJL7VEc7EZnFrrqa1yV2G/0/725C969424ED3EC6218ABA1DB95AE1CDF523AEA3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725C969424ED3EC6218ABA1DB95AE1CDF523AEA3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 17:17:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:0a:fa:52:8b:69:3c:68:9c:69:95:3d:fd:b7:81:c8:5d:57:8e:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725C969424ED3EC6218ABA1DB95AE1CDF523AEA3
        Validity
            Not Before: May 13 16:28:26 2026 GMT
            Not After : May 12 16:33:26 2027 GMT
        Subject: CN=2595E01C19726A654D034EB37062440605AFBF2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e8:d2:49:e8:20:5f:70:d9:67:78:9b:f7:ea:
                    ae:a7:23:2e:e2:ce:fd:1d:6c:5c:e8:7f:c5:bd:d6:
                    68:d1:6d:6a:93:71:fc:5f:b5:c8:44:b2:b5:b5:b3:
                    38:71:f0:d0:fa:7c:f8:8f:3d:1c:ff:13:d6:4d:fc:
                    92:79:e2:01:f2:2d:d9:c9:91:a0:01:d5:0a:29:d2:
                    e5:ef:82:17:04:46:e0:b3:be:3f:64:ad:1c:8c:8b:
                    19:53:e7:0d:6a:42:75:76:a1:ae:85:6b:9c:30:f6:
                    68:59:ea:b6:74:3b:9c:60:78:af:8d:8d:15:aa:77:
                    f5:38:f1:a1:97:e2:3d:30:46:7a:73:88:ed:4b:c3:
                    a2:f4:f6:8f:9e:e8:98:9c:bb:6d:71:2f:14:1b:2f:
                    2c:e8:a3:3d:5c:de:48:91:a0:7c:d7:ad:1f:57:b6:
                    fc:7f:1d:ef:7e:72:89:b3:a9:ff:77:5d:3a:7f:62:
                    5d:32:3d:9e:60:c8:78:e1:13:5e:3f:79:fa:f4:01:
                    43:92:c6:48:fd:96:26:91:3d:bd:ed:91:bd:bf:cf:
                    44:ff:2c:ab:1a:91:63:17:ea:84:6b:49:0f:90:07:
                    48:06:67:f7:98:e2:ae:9b:2a:72:3e:2d:40:20:21:
                    0d:55:b7:89:76:21:f8:ba:ff:e6:7d:91:68:6c:ed:
                    3b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:95:E0:1C:19:72:6A:65:4D:03:4E:B3:70:62:44:06:05:AF:BF:2B
            X509v3 Authority Key Identifier:
                keyid:72:5C:96:94:24:ED:3E:C6:21:8A:BA:1D:B9:5A:E1:CD:F5:23:AE:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GLV9P6TvqfLpbyKekSwiRHbtJL7VEc7EZnFrrqa1yV2G/0/725C969424ED3EC6218ABA1DB95AE1CDF523AEA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725C969424ED3EC6218ABA1DB95AE1CDF523AEA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GLV9P6TvqfLpbyKekSwiRHbtJL7VEc7EZnFrrqa1yV2G/0/323830343a383934343a3a2f33322d3438203d3e20323733353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8944::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:f6:30:20:17:12:b8:a0:fc:ee:e1:f7:ef:43:60:55:b6:65:
         bb:49:2f:00:2c:3f:28:cf:cd:12:1f:89:0a:90:cd:5b:c1:ef:
         ae:21:b7:d3:a2:8e:ef:bd:55:bd:eb:8c:67:72:73:f2:65:57:
         45:b0:0f:0b:ad:0d:25:e2:e7:34:38:17:d9:aa:b7:ca:60:84:
         61:4f:b7:67:3f:76:00:6a:a5:76:bc:18:27:61:e2:91:44:df:
         6a:97:f0:67:f9:b9:ea:86:f1:7d:50:c9:ca:b3:26:66:e3:eb:
         f2:b5:f0:ed:c9:ee:b4:cc:82:76:47:bf:5b:00:61:1e:87:1f:
         e0:97:bc:f8:33:1f:ff:95:78:45:5d:c8:b1:e6:4d:07:94:22:
         66:47:a3:98:a8:e8:4c:27:a4:2a:f1:d7:f3:aa:bc:9b:98:6d:
         1f:08:f1:57:6e:5c:42:cd:25:b6:02:85:94:5d:08:cc:0c:01:
         1f:41:3b:2b:9d:a2:9b:ba:21:13:28:7e:54:c0:0e:6a:11:54:
         41:24:22:21:a3:7f:0c:39:19:33:77:f7:fa:7e:11:89:dc:43:
         6f:44:ee:f9:d9:79:1e:26:7b:65:f3:b1:65:5d:e0:7e:43:7f:
         3a:0f:4f:e6:64:70:39:a5:c2:cf:d4:b5:c0:e7:72:94:eb:a8:
         db:21:1a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:25:27 2026 by rpki-client