Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/323030313a313239343a3a2f33322d3332203d3e203238313832.roa
File:                     323030313a313239343a3a2f33322d3332203d3e203238313832.roa (raw, json)
Hash identifier:          I6me8LbxHbaQf1JEu0gZRjmr/qrpidN4qI5uR+TZ8x4=
Subject key identifier:   C5:FA:8B:1F:47:91:8A:04:37:18:74:B2:10:82:4A:A1:BB:86:70:06
Certificate issuer:       /CN=1B427596807B9C7F33F0033F7B7CC699B7278320
Certificate serial:       23AB0D7B2F68A0DBA6E5CBB59BFC439AE51DAF86
Authority key identifier: 1B:42:75:96:80:7B:9C:7F:33:F0:03:3F:7B:7C:C6:99:B7:27:83:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/323030313a313239343a3a2f33322d3332203d3e203238313832.roa
Signing time:             Mon 15 Jun 2026 11:56:07 +0000
ROA not before:           Mon 15 Jun 2026 11:51:07 +0000
ROA not after:            Mon 14 Jun 2027 11:56:07 +0000
asID:                     28182
IP address blocks:        2001:1294::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.crl
                          rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 10:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ab:0d:7b:2f:68:a0:db:a6:e5:cb:b5:9b:fc:43:9a:e5:1d:af:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B427596807B9C7F33F0033F7B7CC699B7278320
        Validity
            Not Before: Jun 15 11:51:07 2026 GMT
            Not After : Jun 14 11:56:07 2027 GMT
        Subject: CN=C5FA8B1F47918A04371874B210824AA1BB867006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1f:69:47:9e:89:3f:95:2e:01:99:28:03:f2:
                    96:ef:c8:f9:57:25:58:d1:fd:da:5a:a4:d0:73:23:
                    96:b2:45:7f:e8:c7:44:8c:eb:52:81:0b:20:1e:1f:
                    b4:e3:22:fa:96:d1:a1:66:f9:4d:87:1b:e2:2f:2e:
                    03:c7:30:6a:28:35:8e:f8:f3:1d:a0:ab:25:b8:ec:
                    c8:21:e9:c3:89:b5:3b:60:e6:b4:44:34:7c:44:ae:
                    0d:e7:2a:d0:f6:07:5c:45:f7:9b:b8:1b:ba:b5:c7:
                    64:7c:3c:d9:5d:3f:02:6f:09:3b:5b:6b:dd:6c:31:
                    c7:dd:a6:57:fa:95:99:47:d4:ac:f5:4e:8c:04:d9:
                    4f:0b:c4:13:07:fa:17:c0:d5:8b:c7:1d:06:2c:b2:
                    d8:eb:5c:6c:a3:60:55:23:e2:11:b8:48:7b:71:a0:
                    57:1f:ae:ec:ed:94:2f:b5:da:cb:62:50:1b:ea:8f:
                    2c:87:5d:66:6d:e1:f5:4c:ed:e1:59:5f:f8:d7:3c:
                    de:2c:40:9a:fd:a2:75:d1:9a:6b:6e:07:39:bf:10:
                    f3:9b:9a:6e:d6:08:9b:da:b6:48:a0:b0:17:01:88:
                    01:0c:a0:29:71:e8:89:e1:dd:60:8f:51:5c:80:d8:
                    52:11:f7:a5:f1:b4:6e:a0:18:e0:32:d1:d9:fc:90:
                    24:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:FA:8B:1F:47:91:8A:04:37:18:74:B2:10:82:4A:A1:BB:86:70:06
            X509v3 Authority Key Identifier:
                keyid:1B:42:75:96:80:7B:9C:7F:33:F0:03:3F:7B:7C:C6:99:B7:27:83:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/323030313a313239343a3a2f33322d3332203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1294::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:00:5b:b8:bc:4a:74:90:8d:0e:b2:5e:0c:e2:f2:89:17:4d:
         53:7d:2b:ae:ee:7d:9b:bd:d0:e1:65:e5:4d:01:dd:9b:6e:8a:
         69:48:d3:e4:5a:9d:65:c3:7a:65:71:1c:fb:fc:c1:55:33:a1:
         ee:72:4a:ba:b7:b3:c8:0e:3a:d8:fe:32:a5:1a:cf:6a:1b:f4:
         81:67:4b:1c:e3:34:56:ae:5b:63:a4:7a:90:e9:13:d4:db:5d:
         1d:a1:07:3c:18:9b:d2:2a:76:28:ad:0d:b3:66:b4:61:e9:fe:
         5a:7c:de:d3:f8:dd:4e:92:27:3a:d0:f7:ce:af:5a:2a:b9:39:
         42:31:3e:c8:08:31:03:c1:e8:bb:14:92:e0:c9:2d:cc:c8:cb:
         d2:87:0d:07:f3:49:4b:ea:b2:e0:58:0c:79:86:75:8e:8a:da:
         0a:9d:df:a5:1e:6c:04:19:cd:be:85:a1:96:cc:fa:3e:73:48:
         0e:b3:b1:53:18:6d:fc:6d:28:7b:90:f9:10:20:e7:9a:80:6c:
         ea:70:16:dc:a8:39:4e:60:8f:ac:b2:52:d6:05:83:6b:a8:20:
         40:d9:54:e0:ed:56:ac:df:16:77:b3:67:72:e2:08:a1:d2:06:
         a8:3d:1d:be:ff:bb:03:b1:b1:90:66:d3:5f:72:ab:ee:a8:cc:
         56:81:45:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:58:41 2026 by rpki-client