Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a653030303a3a2f33352d3335203d3e203631373139.roa
File:                     323830343a316235303a653030303a3a2f33352d3335203d3e203631373139.roa (raw, json)
Hash identifier:          Q78wDUM8CtB4rZF4mLd5+Kk46mqvP/yjH7FbRV768oE=
Subject key identifier:   8C:4D:00:BA:DE:6E:39:A8:B3:32:17:7D:06:76:9F:6A:F2:29:B4:00
Certificate issuer:       /CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
Certificate serial:       51D3ADDA2FA50FE0020965AB5307803307B45923
Authority key identifier: 57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a653030303a3a2f33352d3335203d3e203631373139.roa
Signing time:             Thu 02 Jul 2026 11:27:17 +0000
ROA not before:           Thu 02 Jul 2026 11:22:17 +0000
ROA not after:            Thu 01 Jul 2027 11:27:17 +0000
asID:                     61719
IP address blocks:        2804:1b50:e000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl
                          rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 26 Jul 2026 00:44:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:d3:ad:da:2f:a5:0f:e0:02:09:65:ab:53:07:80:33:07:b4:59:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
        Validity
            Not Before: Jul  2 11:22:17 2026 GMT
            Not After : Jul  1 11:27:17 2027 GMT
        Subject: CN=8C4D00BADE6E39A8B332177D06769F6AF229B400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f8:58:b5:6a:8b:84:9c:37:5c:04:8f:28:13:
                    dc:8f:ad:4c:4c:48:e7:14:58:9c:18:ab:2f:7d:d4:
                    4f:8d:95:33:0e:e8:7f:22:ef:06:af:f9:7d:e9:9e:
                    72:25:e1:34:44:9f:4e:00:bf:cc:c6:3a:78:ac:18:
                    ba:7a:a2:25:d6:30:c6:83:9e:13:80:85:5f:6e:30:
                    5e:4f:b1:2c:de:22:2f:72:ef:68:fd:ea:b0:20:a7:
                    1c:0b:1a:0f:29:f5:18:ae:23:a8:f9:82:2d:30:c2:
                    0b:e0:46:0c:23:eb:08:d6:1f:1e:8d:35:b7:df:86:
                    cb:1c:ec:0c:99:32:58:27:0b:3f:06:6e:97:77:0a:
                    d3:11:09:4d:31:df:cd:65:45:2e:e9:0a:40:6a:fb:
                    bc:6e:db:c9:2f:64:6a:79:de:01:c7:16:d9:55:26:
                    f0:5d:0f:7a:47:a6:39:1f:d7:3e:d8:1b:59:19:87:
                    bc:3e:31:2d:b5:54:dc:b2:48:2a:4c:08:81:b6:a7:
                    5e:4e:4e:67:e1:03:68:3f:83:06:64:c2:1c:6f:53:
                    99:d2:ff:0b:c5:82:4c:ea:f0:cd:f3:40:b9:2b:0b:
                    96:e8:ab:e3:af:bb:59:25:33:cb:0a:a9:49:fc:bd:
                    25:df:ad:d8:db:60:0b:7a:ed:fd:d9:7f:4b:40:25:
                    bd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4D:00:BA:DE:6E:39:A8:B3:32:17:7D:06:76:9F:6A:F2:29:B4:00
            X509v3 Authority Key Identifier:
                keyid:57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a653030303a3a2f33352d3335203d3e203631373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b50:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         2a:59:0a:ff:5a:2e:88:b6:89:f3:77:da:e2:f4:69:56:a5:78:
         d2:4a:19:0e:3f:cd:9b:b3:e3:36:d8:a2:90:2e:84:9d:1e:80:
         c2:b7:ae:5d:2d:21:67:6a:96:e4:fd:34:2f:81:1d:56:0a:83:
         36:c8:be:ce:dd:ba:71:90:8c:f4:fb:84:70:d6:fa:5a:10:00:
         fe:eb:06:7a:16:d0:32:a3:81:f7:5b:ea:a2:6d:4f:ac:62:b8:
         d6:5d:42:2e:d8:a9:75:af:06:68:7a:cb:a8:d8:75:a4:a3:fb:
         3c:01:27:c9:ea:d9:35:33:9f:36:98:f0:7a:b4:2a:f5:ae:78:
         83:c7:09:1d:56:d4:35:e6:af:35:ca:b6:d7:5d:5b:cc:ba:b7:
         22:d5:64:15:8b:0b:b2:1d:2e:f4:79:57:d4:ce:af:cd:dd:d7:
         af:ea:da:5e:e2:b0:a7:8a:ac:d1:d8:5a:a1:c8:18:81:1a:59:
         ef:ba:02:c0:89:b9:85:57:1e:44:a2:ee:6f:16:fc:fa:6b:7f:
         84:9e:11:8f:cc:e9:de:0b:d4:1c:a5:fc:e6:f7:3e:a4:a1:7b:
         8f:c0:19:ae:67:b4:44:4e:88:e5:99:5c:ed:7b:c5:3f:a3:7d:
         77:47:21:9a:36:da:2a:70:db:af:be:e4:96:e6:5f:3f:8d:06:
         84:64:84:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:01:16 2026 by rpki-client