Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a3a2f33332d3333203d3e203631373139.roa
File:                     323830343a316235303a3a2f33332d3333203d3e203631373139.roa (raw, json)
Hash identifier:          BFwfypFlcPv56O+mah/A3guMT9EmeBfKDiu83C6e1iY=
Subject key identifier:   3F:A0:3C:13:22:B1:B0:70:26:E1:08:53:4E:D4:2F:7B:CB:5E:B0:32
Certificate issuer:       /CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
Certificate serial:       79DD9FCBD493406421E48D29CDAADED3BA0216A6
Authority key identifier: 57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a3a2f33332d3333203d3e203631373139.roa
Signing time:             Thu 02 Jul 2026 11:27:17 +0000
ROA not before:           Thu 02 Jul 2026 11:22:17 +0000
ROA not after:            Thu 01 Jul 2027 11:27:17 +0000
asID:                     61719
IP address blocks:        2804:1b50::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl
                          rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 23:19:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:dd:9f:cb:d4:93:40:64:21:e4:8d:29:cd:aa:de:d3:ba:02:16:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
        Validity
            Not Before: Jul  2 11:22:17 2026 GMT
            Not After : Jul  1 11:27:17 2027 GMT
        Subject: CN=3FA03C1322B1B07026E108534ED42F7BCB5EB032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d9:da:44:fa:8e:70:ad:66:7c:f9:ee:c8:56:
                    85:48:2c:75:bb:9c:34:54:34:7c:1e:7a:10:b1:6a:
                    6c:6b:c3:b9:fe:fc:9e:ba:f1:12:2e:6b:1e:42:eb:
                    19:17:46:a7:7d:1b:14:66:37:89:5f:cd:dd:7d:51:
                    da:0d:b6:f9:a7:25:c2:65:2c:72:74:5a:fe:67:69:
                    b1:24:dd:e5:63:03:05:6e:dd:d5:0e:ec:40:f3:4c:
                    f3:2c:85:c8:8a:0b:ce:2e:5e:e8:74:a5:f8:e3:4b:
                    b6:3f:57:7c:5a:eb:93:3b:0f:4a:cf:c3:32:65:f4:
                    5f:54:c3:d2:d5:c2:68:02:f8:5c:93:6b:44:2f:a8:
                    91:16:7b:ad:45:e1:e3:0c:48:d8:8c:4d:41:3e:46:
                    c3:c3:a2:1d:f8:03:f1:b5:54:81:db:48:7a:6e:39:
                    0a:c7:7a:74:1b:90:a8:33:69:73:0c:44:5d:ab:43:
                    8c:70:e2:7b:96:e8:80:bc:8f:de:e7:28:20:8d:65:
                    f0:89:23:f5:f2:08:57:c1:9c:d1:2a:ff:76:43:7c:
                    8a:1a:a0:9d:a0:d8:a1:96:72:78:20:f8:e3:92:02:
                    56:35:5d:31:44:73:cf:1e:3d:23:a6:5d:b7:81:18:
                    49:94:1a:6a:f9:4f:89:bc:f2:15:93:8c:70:7c:91:
                    17:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A0:3C:13:22:B1:B0:70:26:E1:08:53:4E:D4:2F:7B:CB:5E:B0:32
            X509v3 Authority Key Identifier:
                keyid:57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a3a2f33332d3333203d3e203631373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b50::/33

    Signature Algorithm: sha256WithRSAEncryption
         c6:cf:8b:e4:ba:39:33:45:7a:20:39:40:b9:d9:d3:07:3d:6e:
         ad:d0:ff:bb:d7:81:3d:42:90:c3:0e:ba:2f:00:1c:6f:73:62:
         a3:9a:e7:44:21:ec:eb:7c:6f:18:84:bd:35:3e:6b:a1:82:73:
         b6:60:8d:b5:c8:fb:7d:bc:7e:1e:0c:9b:f2:19:45:93:f4:5b:
         b9:e4:58:14:5b:ac:08:52:84:b2:fd:ed:34:26:10:2b:ea:17:
         86:91:ad:3b:ed:36:8b:1e:5f:04:49:59:76:2a:ac:a0:2c:92:
         76:41:ec:60:be:ba:80:bd:e4:fc:74:aa:c4:fd:00:04:f6:6b:
         c7:c8:ee:7d:da:41:f9:82:c3:da:39:ff:9c:97:b1:f5:4a:20:
         51:4c:a7:ce:34:a0:25:07:38:18:f9:d5:d2:cd:27:a1:3e:2b:
         bc:73:11:a6:e1:7a:1a:e2:b7:9c:66:d3:d9:d5:23:62:96:9d:
         b7:15:db:43:6b:6d:64:ad:39:b4:bc:4c:99:1a:6e:cb:fd:0d:
         5d:b6:1d:83:40:95:41:e3:99:9d:9a:68:9d:d5:35:44:fa:ab:
         01:c6:27:eb:c9:1c:9f:a2:be:df:89:f0:05:05:e2:db:87:f4:
         ca:cd:43:47:5e:06:db:13:ff:4e:55:c3:30:ec:fb:6e:02:69:
         b8:52:86:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:44:16 2026 by rpki-client