Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/gfDM52CiAxCaJaHAPJEhZGiKQM1Fif9QaDgboCE9kjx/0/323830343a326338383a3a2f33322d313238203d3e20323635323235.roa
File:                     323830343a326338383a3a2f33322d313238203d3e20323635323235.roa (raw, json)
Hash identifier:          mPWay+fCSBGqOO1NUppUYreiH6cVCItaA2xERj2c7hQ=
Subject key identifier:   83:F8:BF:18:CB:76:9D:E5:DE:5D:11:3E:0E:2A:78:3A:0A:95:DB:2B
Certificate issuer:       /CN=5561415ABA0D39BE24A249DCCEC552C0B7230FD8
Certificate serial:       44DED9BAABA23A7E1E00065816E1C2CDD04349DC
Authority key identifier: 55:61:41:5A:BA:0D:39:BE:24:A2:49:DC:CE:C5:52:C0:B7:23:0F:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5561415ABA0D39BE24A249DCCEC552C0B7230FD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gfDM52CiAxCaJaHAPJEhZGiKQM1Fif9QaDgboCE9kjx/0/323830343a326338383a3a2f33322d313238203d3e20323635323235.roa
Signing time:             Wed 15 Jul 2026 17:33:38 +0000
ROA not before:           Wed 15 Jul 2026 17:28:38 +0000
ROA not after:            Wed 14 Jul 2027 17:33:38 +0000
asID:                     265225
IP address blocks:        2804:2c88::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/gfDM52CiAxCaJaHAPJEhZGiKQM1Fif9QaDgboCE9kjx/0/5561415ABA0D39BE24A249DCCEC552C0B7230FD8.crl
                          rsync://rpki-repo.registro.br/repo/gfDM52CiAxCaJaHAPJEhZGiKQM1Fif9QaDgboCE9kjx/0/5561415ABA0D39BE24A249DCCEC552C0B7230FD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5561415ABA0D39BE24A249DCCEC552C0B7230FD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 19:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:de:d9:ba:ab:a2:3a:7e:1e:00:06:58:16:e1:c2:cd:d0:43:49:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5561415ABA0D39BE24A249DCCEC552C0B7230FD8
        Validity
            Not Before: Jul 15 17:28:38 2026 GMT
            Not After : Jul 14 17:33:38 2027 GMT
        Subject: CN=83F8BF18CB769DE5DE5D113E0E2A783A0A95DB2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d8:6e:dc:36:a8:b6:15:89:fc:12:e8:9c:81:
                    3c:4d:7d:0c:72:d3:9f:3c:ed:cc:91:92:42:dc:d8:
                    22:3c:80:94:6d:6f:47:81:4b:c1:db:82:d8:89:d6:
                    b5:a9:57:21:30:a0:d3:08:6c:53:ef:66:36:bc:93:
                    5d:76:6a:fc:db:e6:1e:68:cf:74:06:d1:b3:f3:74:
                    56:77:25:d7:77:3a:53:5a:f4:95:27:3f:a7:77:e6:
                    b2:c1:7d:72:07:26:3c:cc:5b:69:ab:1e:81:e5:3e:
                    44:23:5b:17:3b:f5:25:10:de:c1:eb:86:7a:02:39:
                    9f:1c:af:0c:c7:1b:5e:13:8b:3e:f1:85:be:0f:8a:
                    52:1e:fd:7f:7c:e7:21:47:d3:8b:02:97:09:48:a7:
                    13:15:10:dd:1b:18:27:e2:a3:45:ad:26:52:7c:16:
                    ea:c0:47:1b:b0:e2:c6:e9:0e:20:3f:30:d9:f3:74:
                    69:e7:de:de:7a:39:af:4d:0c:c7:80:68:2e:c6:44:
                    38:51:03:c6:34:f3:71:96:e2:18:af:c6:ca:fc:2e:
                    da:6a:4b:40:b6:65:9e:cd:d3:98:5d:42:80:8d:cd:
                    ac:fd:1d:92:ac:56:8a:06:d6:88:70:ef:7a:50:13:
                    3a:64:47:86:e7:18:61:02:77:72:f9:cb:b2:5c:ce:
                    3e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F8:BF:18:CB:76:9D:E5:DE:5D:11:3E:0E:2A:78:3A:0A:95:DB:2B
            X509v3 Authority Key Identifier:
                keyid:55:61:41:5A:BA:0D:39:BE:24:A2:49:DC:CE:C5:52:C0:B7:23:0F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gfDM52CiAxCaJaHAPJEhZGiKQM1Fif9QaDgboCE9kjx/0/5561415ABA0D39BE24A249DCCEC552C0B7230FD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5561415ABA0D39BE24A249DCCEC552C0B7230FD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gfDM52CiAxCaJaHAPJEhZGiKQM1Fif9QaDgboCE9kjx/0/323830343a326338383a3a2f33322d313238203d3e20323635323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c88::/32

    Signature Algorithm: sha256WithRSAEncryption
         c1:58:9a:83:3b:77:04:9f:17:94:78:d0:38:33:37:06:06:d4:
         d9:e3:59:09:62:13:7d:6e:3f:71:f2:e7:17:c4:bb:f3:48:9c:
         4a:60:d9:f7:78:ef:f7:fc:bf:d3:ea:34:f3:2d:d6:03:d0:5f:
         42:0a:d7:6d:0a:4e:43:76:a6:45:eb:ab:1d:a3:b5:4a:dd:b5:
         6c:99:6f:26:dd:3d:f6:7b:7a:ae:69:74:32:0e:13:2e:39:cb:
         1d:4c:1d:3d:a5:a6:1d:28:c7:78:85:16:72:fb:52:c5:3e:90:
         d7:ae:e9:c9:10:c4:ff:e4:5f:87:7a:a0:80:42:da:86:db:e1:
         fb:e7:fb:a3:18:7e:79:2f:2e:92:d2:f8:81:c0:8e:82:e0:7f:
         ed:af:68:89:66:f0:15:b0:9f:63:e3:a4:a4:44:fa:8a:8b:8d:
         8a:a9:f4:90:6c:da:72:c0:85:b6:05:bf:d6:c5:c9:4c:90:b5:
         61:f5:a6:b7:df:37:91:95:39:b1:ea:89:a9:00:2c:97:e7:9b:
         56:ab:aa:c9:2f:47:45:38:94:95:8a:ce:bb:14:d8:45:15:da:
         d1:db:c0:d6:bd:51:10:8e:15:b4:2f:90:26:28:4a:93:9a:1b:
         da:ee:30:fa:5f:9b:c2:4a:11:a3:f2:46:d7:fb:36:36:97:aa:
         c5:b2:a7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:58:17 2026 by rpki-client