Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a383030303a3a2f33352d3335203d3e203631373139.roa
File:                     323830343a316235303a383030303a3a2f33352d3335203d3e203631373139.roa (raw, json)
Hash identifier:          ZMvIsJnrK+D7aTAGs3VArCuxvB36iwIdcqKsfLHnKO4=
Subject key identifier:   9E:23:E3:37:5E:4D:D0:73:E5:18:83:C2:59:A1:03:05:AA:38:5C:96
Certificate issuer:       /CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
Certificate serial:       7B5281AAEE203FF628ED37B4546ADC5D7F1A9472
Authority key identifier: 57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a383030303a3a2f33352d3335203d3e203631373139.roa
Signing time:             Thu 02 Jul 2026 11:27:16 +0000
ROA not before:           Thu 02 Jul 2026 11:22:16 +0000
ROA not after:            Thu 01 Jul 2027 11:27:16 +0000
asID:                     61719
IP address blocks:        2804:1b50:8000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl
                          rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 04:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:52:81:aa:ee:20:3f:f6:28:ed:37:b4:54:6a:dc:5d:7f:1a:94:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
        Validity
            Not Before: Jul  2 11:22:16 2026 GMT
            Not After : Jul  1 11:27:16 2027 GMT
        Subject: CN=9E23E3375E4DD073E51883C259A10305AA385C96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ee:7a:fe:c1:87:87:3d:52:da:f3:4f:83:a4:
                    da:f7:8b:a6:48:3d:65:cb:41:74:ce:94:a5:9c:08:
                    ed:bc:75:53:78:02:98:bd:bb:63:ac:01:02:d5:30:
                    28:ae:d6:27:2b:d0:c2:b8:33:df:e6:3c:29:81:f4:
                    b4:51:91:b1:02:1b:e8:b7:4c:d7:ac:da:45:23:c3:
                    ea:7b:91:b1:98:8e:d7:a0:a1:0a:6b:21:fb:28:17:
                    ef:63:f6:8f:d4:02:f2:56:da:16:e1:8c:9b:e1:2d:
                    72:42:5d:c1:c2:46:06:b9:d9:0c:8e:6a:9f:7a:52:
                    f4:ad:9d:96:da:be:68:12:db:11:31:6c:c6:4f:86:
                    4e:2c:ff:d6:a9:12:5b:5a:0b:af:06:e0:02:c8:f8:
                    29:59:64:ef:1b:60:08:7e:6f:66:35:39:05:57:3e:
                    85:b2:95:c0:57:82:1f:7a:52:82:c8:c5:49:27:51:
                    43:54:de:ce:46:53:bd:13:ea:97:83:02:29:d4:66:
                    0a:9d:a9:f3:8d:93:3e:ef:f7:4a:e2:4e:1b:12:eb:
                    64:e2:ce:dc:1a:3d:c0:61:9f:23:47:a3:9f:8a:c3:
                    c4:fc:0e:15:3e:57:6c:2b:2f:b3:1b:b8:85:e0:66:
                    89:8c:f2:a6:f6:d5:ea:64:51:8d:49:f8:7e:c3:b9:
                    5c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:23:E3:37:5E:4D:D0:73:E5:18:83:C2:59:A1:03:05:AA:38:5C:96
            X509v3 Authority Key Identifier:
                keyid:57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a383030303a3a2f33352d3335203d3e203631373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b50:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         50:fd:2d:63:07:e5:0d:83:64:e7:7c:a6:f8:3c:f2:f8:a8:ba:
         7e:92:e3:19:7a:ad:19:e3:24:7f:f0:19:ec:00:d4:2c:78:e0:
         80:4e:1f:8f:78:2f:b8:94:b1:36:a4:b2:78:bd:96:7d:65:69:
         5b:9d:63:6e:57:c3:36:5d:ba:19:b1:9c:75:d0:76:47:62:b8:
         ee:a6:89:38:76:23:a9:25:47:8d:f3:00:91:79:92:52:95:b7:
         cd:57:2a:c3:45:bd:79:ac:86:08:89:63:fc:d0:9b:3b:5f:f4:
         44:14:de:ae:24:c1:35:a2:62:d4:8d:f4:0d:f7:b8:26:8e:60:
         4e:c1:6e:02:f7:0a:a8:5c:21:78:49:64:53:a1:a1:c3:3c:ec:
         4f:8f:b3:c8:95:83:9e:f3:99:0a:87:83:6f:81:44:8c:13:2f:
         2e:ac:fe:26:4e:63:3d:52:12:5d:49:0d:3d:31:34:ae:71:41:
         2f:49:4b:2d:2b:7d:5a:11:01:76:f7:f0:96:aa:f6:0b:f4:b1:
         d4:33:62:71:38:9a:03:c9:b3:89:f5:37:c7:6f:a7:62:a4:79:
         b3:37:39:06:bf:60:60:db:01:d4:ad:f8:79:71:8a:b7:f4:a2:
         e2:6b:dc:c9:8e:3e:c7:61:85:7c:ba:1b:d0:d3:28:24:93:9c:
         d7:30:e3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:06:04 2026 by rpki-client