Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a383030303a3a2f33332d3333203d3e20323733373238.roa
File:                     323830343a386235633a383030303a3a2f33332d3333203d3e20323733373238.roa (raw, json)
Hash identifier:          2TqhatU2YhbXxdUp52NyFWdf/XVWPzUMyR5uc5WAeEo=
Subject key identifier:   DB:C1:DF:7D:74:23:78:F1:0E:E6:6A:10:4D:D8:74:7A:76:BC:23:79
Certificate issuer:       /CN=9B5BEC02172353B1C6C4EC88F11DC07776DD3C58
Certificate serial:       422069D6F2116E9BC535849A00C3A93F5ECAFB0E
Authority key identifier: 9B:5B:EC:02:17:23:53:B1:C6:C4:EC:88:F1:1D:C0:77:76:DD:3C:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B5BEC02172353B1C6C4EC88F11DC07776DD3C58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a383030303a3a2f33332d3333203d3e20323733373238.roa
Signing time:             Sun 03 May 2026 23:38:41 +0000
ROA not before:           Sun 03 May 2026 23:33:41 +0000
ROA not after:            Sun 02 May 2027 23:38:41 +0000
asID:                     273728
IP address blocks:        2804:8b5c:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/9B5BEC02172353B1C6C4EC88F11DC07776DD3C58.crl
                          rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/9B5BEC02172353B1C6C4EC88F11DC07776DD3C58.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B5BEC02172353B1C6C4EC88F11DC07776DD3C58.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 07:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:20:69:d6:f2:11:6e:9b:c5:35:84:9a:00:c3:a9:3f:5e:ca:fb:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B5BEC02172353B1C6C4EC88F11DC07776DD3C58
        Validity
            Not Before: May  3 23:33:41 2026 GMT
            Not After : May  2 23:38:41 2027 GMT
        Subject: CN=DBC1DF7D742378F10EE66A104DD8747A76BC2379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fb:8c:e2:3e:3b:1e:d2:95:ef:39:d2:c6:c6:
                    37:33:0a:fc:b4:05:27:82:5f:48:2d:70:32:6e:5f:
                    f7:23:5a:72:c8:cf:97:62:04:98:73:d2:09:d2:2d:
                    0c:fc:1e:85:89:58:62:79:52:fa:5a:48:fd:53:fd:
                    fc:e6:a7:6e:ab:f1:6b:9c:c4:f3:ed:c8:c4:bb:35:
                    fd:6b:df:58:16:72:4d:5f:05:94:57:38:96:0a:4f:
                    cd:02:4d:0b:94:69:34:56:00:40:53:75:f3:6f:e7:
                    fe:58:a3:27:e6:62:3b:af:4a:39:dc:5d:c8:d5:9e:
                    35:92:af:ad:c0:35:4a:ef:df:89:0b:a0:65:ad:8b:
                    8a:63:cc:e7:ea:9e:e0:d3:f2:b2:97:8f:ce:49:85:
                    5e:76:56:9c:c5:4c:22:ec:7d:31:03:16:58:f5:68:
                    71:be:f1:63:10:46:93:a3:7e:62:79:2e:9a:5f:d5:
                    e8:9c:8b:e9:fd:7d:ba:02:d7:40:0d:4d:df:9f:fd:
                    1a:e5:0c:3e:fb:d1:c0:c9:17:c8:1f:b5:77:aa:b5:
                    8e:c7:a8:bf:65:0b:b3:ce:09:ab:15:a6:19:c7:39:
                    48:39:16:34:b5:e9:29:f8:dc:0f:e1:8c:c8:54:c4:
                    b6:5c:4d:41:f7:2d:cf:fb:af:a5:56:93:d8:16:ad:
                    d1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C1:DF:7D:74:23:78:F1:0E:E6:6A:10:4D:D8:74:7A:76:BC:23:79
            X509v3 Authority Key Identifier:
                keyid:9B:5B:EC:02:17:23:53:B1:C6:C4:EC:88:F1:1D:C0:77:76:DD:3C:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/9B5BEC02172353B1C6C4EC88F11DC07776DD3C58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B5BEC02172353B1C6C4EC88F11DC07776DD3C58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a383030303a3a2f33332d3333203d3e20323733373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b5c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         c4:34:0f:a1:42:34:be:07:4a:1d:62:8b:3a:c5:a1:55:b0:c8:
         9d:cd:0e:01:0b:77:17:16:dd:3e:f8:e9:c3:5e:fc:cc:c6:72:
         aa:51:7b:29:73:df:a5:86:2a:d9:ca:2f:cc:b4:17:5c:0c:6d:
         04:a0:05:2e:a2:66:be:fb:ce:c7:80:94:31:21:a6:8a:10:71:
         3a:25:4e:48:fe:e2:7a:cc:97:85:da:d1:24:a6:ec:43:53:0f:
         2e:57:9b:e6:c5:74:e9:0b:c9:94:8b:ae:1b:ac:4f:5c:f0:02:
         91:42:0a:5d:d9:71:bd:b9:66:ff:a0:d0:3a:65:ec:41:cb:af:
         28:be:c9:15:f9:f1:63:9f:bd:9f:77:eb:e1:5d:c9:bf:fa:c1:
         08:42:9f:ac:3f:3d:00:e7:41:91:5a:7b:35:cc:d3:83:84:87:
         c5:a8:bc:8a:c7:85:0e:28:7e:a0:7a:dc:ba:f2:e8:1b:e9:0b:
         31:d0:70:e4:ad:ba:39:b7:30:b7:ee:a5:5a:88:80:99:2a:de:
         ba:31:21:74:42:8d:36:85:85:3f:c4:d6:56:70:71:4b:64:02:
         ce:bc:ab:99:dd:ca:06:f2:04:48:e9:b1:85:03:70:af:f2:85:
         dd:48:34:0c:90:ff:48:12:7c:24:5c:0e:08:7a:56:00:d4:06:
         9d:07:17:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:40:32 2026 by rpki-client