Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/323830343a64303a3a2f33322d313238203d3e203238313435.roa
File:                     323830343a64303a3a2f33322d313238203d3e203238313435.roa (raw, json)
Hash identifier:          IU23CglAe2IfWNbX8YE6o8MlIrakcJNFYg6nvcZq+9g=
Subject key identifier:   77:E6:00:0E:3E:B6:D9:7C:A2:0C:76:58:BE:E5:F2:80:2C:F2:C4:4F
Certificate issuer:       /CN=A347F5D0945998093ADA03E9513EA096318126D4
Certificate serial:       755DBE583739E985DB1D61171E56231529DD88B1
Authority key identifier: A3:47:F5:D0:94:59:98:09:3A:DA:03:E9:51:3E:A0:96:31:81:26:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A347F5D0945998093ADA03E9513EA096318126D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/323830343a64303a3a2f33322d313238203d3e203238313435.roa
Signing time:             Wed 06 May 2026 19:50:07 +0000
ROA not before:           Wed 06 May 2026 19:45:07 +0000
ROA not after:            Wed 05 May 2027 19:50:07 +0000
asID:                     28145
IP address blocks:        2804:d0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/A347F5D0945998093ADA03E9513EA096318126D4.crl
                          rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/A347F5D0945998093ADA03E9513EA096318126D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A347F5D0945998093ADA03E9513EA096318126D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 00:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:5d:be:58:37:39:e9:85:db:1d:61:17:1e:56:23:15:29:dd:88:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A347F5D0945998093ADA03E9513EA096318126D4
        Validity
            Not Before: May  6 19:45:07 2026 GMT
            Not After : May  5 19:50:07 2027 GMT
        Subject: CN=77E6000E3EB6D97CA20C7658BEE5F2802CF2C44F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:17:4a:5b:85:16:d6:7a:2b:4c:a0:8e:3e:3e:
                    f0:ee:3d:38:77:f7:b1:46:af:eb:55:87:76:8b:b3:
                    d3:b5:35:c0:a5:71:7e:48:e0:3a:b2:dc:f3:e1:56:
                    84:82:18:c2:98:d2:5c:35:1f:ce:ef:49:2c:d1:a3:
                    c8:e2:30:60:55:3b:74:7a:7b:71:8c:1a:48:75:37:
                    b6:05:8f:30:09:ab:ff:52:f2:5b:aa:69:01:08:b1:
                    b7:c8:ec:ec:e7:a9:25:02:b8:78:22:97:95:f7:e7:
                    a4:7e:c3:2c:ab:10:b2:16:07:74:22:f3:e1:ea:06:
                    8a:9c:c6:9c:8f:24:a5:2c:68:ad:81:7b:6a:a0:9e:
                    5b:a4:5f:64:3a:08:5b:1b:2c:b3:39:62:39:46:5d:
                    a2:0e:5f:fb:0f:d0:53:d4:88:6c:26:13:c7:44:7f:
                    86:09:61:84:3f:21:01:6a:bb:f7:4d:1a:96:c3:31:
                    df:f3:23:f0:73:0a:7f:de:c9:93:61:24:71:8d:59:
                    6b:4c:9c:8d:5f:87:7f:ae:25:a1:3a:08:1c:d3:cf:
                    f2:df:3e:60:b5:d9:44:e3:42:0e:b8:01:33:b0:71:
                    36:47:c9:a4:f7:4b:d0:5a:47:5c:bd:e3:6b:15:a5:
                    6a:33:f0:14:2a:12:dd:e6:61:3d:10:1d:fc:f4:45:
                    43:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E6:00:0E:3E:B6:D9:7C:A2:0C:76:58:BE:E5:F2:80:2C:F2:C4:4F
            X509v3 Authority Key Identifier:
                keyid:A3:47:F5:D0:94:59:98:09:3A:DA:03:E9:51:3E:A0:96:31:81:26:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/A347F5D0945998093ADA03E9513EA096318126D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A347F5D0945998093ADA03E9513EA096318126D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/323830343a64303a3a2f33322d313238203d3e203238313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:b0:ea:63:b6:14:ea:b7:7f:c1:2a:19:ea:bf:c1:3d:ca:37:
         22:9d:68:37:ca:c2:62:57:ec:87:e3:26:5a:58:d6:66:56:15:
         05:86:a7:e5:ae:78:7a:81:71:d9:af:37:86:5d:ff:e8:b8:68:
         69:51:58:da:1e:ed:09:77:b3:c9:44:b6:ba:7b:33:e6:ff:ac:
         8e:1c:fe:fe:eb:a3:3a:57:fc:94:35:81:ee:58:b3:37:7c:59:
         df:11:0c:20:0d:0f:b1:44:e2:8f:31:ec:52:32:dd:e6:55:3a:
         86:21:ca:f5:ab:c4:7f:69:d1:48:00:5a:89:a5:46:52:6a:b8:
         a3:75:e3:e1:b8:80:36:5c:0d:ee:63:ee:c2:7a:a5:80:dc:40:
         16:01:87:5c:f5:31:8d:13:e8:32:e2:ee:c3:91:6b:7f:1d:a5:
         ee:b1:c5:3f:49:95:44:54:fb:b1:5c:ce:a0:c3:7f:de:55:67:
         6b:bc:99:db:9f:2e:d2:20:cb:8e:84:cb:c2:55:89:f8:89:17:
         93:df:b1:74:43:f4:38:ed:07:94:b8:db:b1:16:ac:24:d0:29:
         d4:48:1b:05:fe:4c:79:2f:3a:52:b2:dd:5f:55:74:65:a3:f4:
         94:a3:43:f5:5f:62:95:4a:82:ce:4d:79:81:70:41:97:1e:58:
         bd:ee:e4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:13:30 2026 by rpki-client