Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a383030303a3a2f33332d3333203d3e203631373139.roa
File:                     323830343a316235303a383030303a3a2f33332d3333203d3e203631373139.roa (raw, json)
Hash identifier:          xDPvLJieQW1UCixKaHZLeMnW2CCVfTnGvS6G0xsviX0=
Subject key identifier:   89:E2:65:4B:13:E7:9E:DD:FE:95:A2:59:A9:AF:81:48:90:63:3A:4A
Certificate issuer:       /CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
Certificate serial:       19B0E16EACDE3BB5861448A19E8BBB07CA411594
Authority key identifier: 57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a383030303a3a2f33332d3333203d3e203631373139.roa
Signing time:             Thu 02 Jul 2026 11:27:16 +0000
ROA not before:           Thu 02 Jul 2026 11:22:16 +0000
ROA not after:            Thu 01 Jul 2027 11:27:16 +0000
asID:                     61719
IP address blocks:        2804:1b50:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl
                          rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 04:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:b0:e1:6e:ac:de:3b:b5:86:14:48:a1:9e:8b:bb:07:ca:41:15:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
        Validity
            Not Before: Jul  2 11:22:16 2026 GMT
            Not After : Jul  1 11:27:16 2027 GMT
        Subject: CN=89E2654B13E79EDDFE95A259A9AF814890633A4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8c:a6:56:20:82:6f:62:81:45:13:b4:de:98:
                    ea:8e:cd:41:62:b8:99:0d:66:48:0b:6c:c5:9d:07:
                    ae:31:64:13:6d:6a:92:16:72:57:fa:10:ce:e6:41:
                    6e:f2:f9:94:87:cd:36:2e:cf:a9:7a:de:ac:01:d5:
                    e1:fb:a1:09:4d:d9:73:b4:47:28:46:6b:d0:cf:9b:
                    0f:f2:7e:80:69:dc:a9:b1:89:fc:c2:05:0c:de:b5:
                    ac:b2:c2:68:4c:a9:0c:ba:a6:2e:e8:11:db:f1:55:
                    14:01:4e:7a:22:6b:e0:97:5e:10:07:d1:9f:19:20:
                    62:4c:fd:10:5d:a1:d8:f4:2b:88:ef:9f:79:b6:fd:
                    cf:74:dd:0d:a2:e9:d1:d9:96:a8:b2:20:65:7a:f3:
                    63:4c:34:da:17:09:7e:a2:90:ff:53:80:0e:a4:71:
                    f2:5a:3e:fe:0b:e1:8b:ea:f1:51:4f:5d:bb:61:42:
                    52:9e:4b:9e:50:0a:1d:11:f6:f4:8c:56:d6:78:48:
                    d5:82:e0:bc:23:73:72:0f:d0:41:2d:9e:de:fc:c2:
                    67:fb:80:1d:ff:46:3e:41:e8:87:df:31:9e:cc:97:
                    71:6d:1b:13:90:8b:65:d5:da:e6:3b:3e:32:e2:38:
                    d2:c8:1e:1d:b7:3a:ac:e2:0d:83:45:86:96:e6:91:
                    a6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E2:65:4B:13:E7:9E:DD:FE:95:A2:59:A9:AF:81:48:90:63:3A:4A
            X509v3 Authority Key Identifier:
                keyid:57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a383030303a3a2f33332d3333203d3e203631373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b50:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         43:e2:5b:9e:ea:b5:2f:6d:f9:40:4b:4c:57:5f:92:f8:fe:ed:
         00:98:db:0c:f0:a6:5c:13:ca:b5:b1:e1:ed:0a:03:89:98:35:
         55:f7:73:a5:eb:07:45:cb:7b:59:c1:28:11:cd:35:0e:27:a8:
         ff:b8:fd:72:1c:a2:5b:f0:b7:9e:2b:bf:f5:56:85:48:ef:64:
         b0:dc:5d:75:c0:02:db:8f:a5:e3:a2:5e:17:d5:24:c1:cb:5a:
         0d:4a:48:b5:9f:cc:18:78:84:61:63:24:b9:37:4a:ce:00:10:
         d2:80:14:1a:28:49:58:23:c2:69:14:c3:fd:ca:4a:1d:8d:92:
         fc:71:d6:93:0d:66:60:d4:4c:0e:56:87:b6:35:57:84:a0:4a:
         f2:ed:e1:4a:92:da:ca:3c:44:77:05:f2:4a:4d:62:6c:1e:b6:
         99:4c:be:40:99:ad:01:29:b1:24:ed:b9:35:7f:e3:e8:2e:c9:
         e1:f9:c5:28:07:b1:25:d3:08:f7:70:6a:38:b9:37:35:7b:0d:
         e8:bd:f2:67:89:b7:f0:ab:0d:9d:85:b6:a0:55:3f:a2:1d:02:
         6f:61:d9:ff:e2:f7:41:a3:cb:17:23:7b:d2:0f:49:11:c1:e7:
         9f:93:e2:1d:d8:e2:cd:e4:bd:33:8f:40:f7:89:f4:40:1f:cb:
         54:61:74:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:06:10 2026 by rpki-client