Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/323830343a3837303a663630303a3a2f34302d3438203d3e203238333436.roa
File:                     323830343a3837303a663630303a3a2f34302d3438203d3e203238333436.roa (raw, json)
Hash identifier:          oAUbmDyxgJwMFU6eRTRztan10crOkLevps7XmVJ2Mjs=
Subject key identifier:   4F:84:CD:39:BF:CD:78:D4:43:D0:FE:53:53:D0:71:7E:F9:84:0F:68
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       39703794DCF5F174A1281B75A4C10A5D378702CD
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/323830343a3837303a663630303a3a2f34302d3438203d3e203238333436.roa
Signing time:             Thu 07 May 2026 14:08:37 +0000
ROA not before:           Thu 07 May 2026 14:03:37 +0000
ROA not after:            Thu 06 May 2027 14:08:37 +0000
asID:                     28346
IP address blocks:        2804:870:f600::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 00:53:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:70:37:94:dc:f5:f1:74:a1:28:1b:75:a4:c1:0a:5d:37:87:02:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: May  7 14:03:37 2026 GMT
            Not After : May  6 14:08:37 2027 GMT
        Subject: CN=4F84CD39BFCD78D443D0FE5353D0717EF9840F68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cc:37:76:fe:1d:b2:a1:95:d2:a9:4b:be:df:
                    76:2a:2e:0c:1d:85:dd:0d:26:92:1a:b8:66:8f:23:
                    06:18:36:14:a3:73:f0:c6:98:fe:c8:c2:30:aa:29:
                    8d:a9:55:e0:77:3b:7e:84:2d:03:36:f6:e3:13:8e:
                    d0:a5:b3:70:7e:0f:84:b4:97:c4:ec:48:12:37:b6:
                    7f:4d:05:0a:bb:2d:75:d6:1c:3a:79:ff:cd:9d:7f:
                    14:36:46:63:93:6c:72:c2:87:50:b1:5c:bc:74:5d:
                    f6:51:a0:34:8e:fc:af:2e:77:e1:7e:a9:90:91:57:
                    7e:7f:c8:26:24:2c:eb:34:d7:17:dc:a5:9f:34:e3:
                    c6:b7:bd:3a:01:8b:f8:d2:41:61:7b:b0:ef:25:cc:
                    fe:72:60:2b:04:b7:c3:06:09:d1:a9:28:1a:03:0b:
                    9d:01:d9:df:b4:7d:0d:ec:2a:f1:fa:b0:8c:83:b5:
                    ce:1c:59:7f:58:d6:4f:20:45:50:39:18:d8:74:50:
                    b5:f0:77:a7:c0:f7:61:48:3f:c0:86:c8:5e:90:48:
                    68:cf:c5:d0:1d:b6:08:7d:91:ef:fd:a7:ab:e5:a3:
                    d9:06:fa:8a:5e:69:b8:b0:af:91:83:82:21:79:21:
                    33:21:66:e0:77:85:7b:cd:cc:12:1c:8e:59:4e:96:
                    f2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:84:CD:39:BF:CD:78:D4:43:D0:FE:53:53:D0:71:7E:F9:84:0F:68
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/323830343a3837303a663630303a3a2f34302d3438203d3e203238333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:870:f600::/40

    Signature Algorithm: sha256WithRSAEncryption
         83:94:2b:83:f7:4b:ce:ed:ea:97:a4:79:c4:95:cb:38:4c:ea:
         07:95:54:9d:c3:fc:77:bc:33:d8:92:c0:24:55:1a:9a:3d:b9:
         0c:ad:e8:00:d5:52:d5:52:e3:91:8b:07:c7:93:24:38:25:2f:
         16:c5:39:24:dc:b0:e0:de:af:bd:b8:65:9d:53:55:e9:3c:77:
         e2:f4:71:21:6e:64:fe:8e:4a:81:ca:94:1d:31:55:21:ee:8a:
         63:71:5c:b8:8e:1c:a0:17:3d:19:1b:3f:d9:e4:0a:69:15:3d:
         22:ce:46:e9:b6:0f:4f:50:d5:89:36:0d:51:19:53:5b:80:c2:
         fe:31:8b:e6:ea:ce:73:74:01:ad:b4:db:68:f5:87:01:9d:f1:
         32:99:26:8c:47:65:0d:41:f8:0a:e6:a1:ed:50:08:d5:46:da:
         3c:93:9a:cc:9d:50:2a:6c:07:a1:2c:35:e6:ff:f0:0b:7a:5e:
         dd:e5:e0:fb:f3:61:00:66:b9:fe:0d:4b:71:8a:44:5f:8d:28:
         39:0e:f5:76:13:48:5d:71:3e:d2:b8:7b:fd:a5:80:6e:17:cf:
         2a:25:5c:6d:8e:b9:3a:5b:29:86:3b:84:b8:5f:ba:c7:64:ce:
         d8:51:0b:1e:06:0b:41:b4:00:6b:d2:9a:c6:de:5f:e4:d6:70:
         d3:53:3d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:35:44 2026 by rpki-client