Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/323830343a356163633a3a2f33322d3438203d3e20323638373937.roa
File:                     323830343a356163633a3a2f33322d3438203d3e20323638373937.roa (raw, json)
Hash identifier:          r6Vikcp/dAGgJAHAUy37/xdOIvsZM5mSIG/DgcLZYVE=
Subject key identifier:   87:5F:89:3D:9C:0C:93:FC:83:0B:B9:A5:F5:99:58:5B:9D:0B:14:EF
Certificate issuer:       /CN=F5D8285BB922845D621469C42C9DC6357443B81F
Certificate serial:       763D7CCEBCFA82699E54ABFBD7B34CDB6E462C05
Authority key identifier: F5:D8:28:5B:B9:22:84:5D:62:14:69:C4:2C:9D:C6:35:74:43:B8:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5D8285BB922845D621469C42C9DC6357443B81F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/323830343a356163633a3a2f33322d3438203d3e20323638373937.roa
Signing time:             Fri 05 Jun 2026 20:19:30 +0000
ROA not before:           Fri 05 Jun 2026 20:14:30 +0000
ROA not after:            Fri 04 Jun 2027 20:19:30 +0000
asID:                     268797
IP address blocks:        2804:5acc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/F5D8285BB922845D621469C42C9DC6357443B81F.crl
                          rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/F5D8285BB922845D621469C42C9DC6357443B81F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5D8285BB922845D621469C42C9DC6357443B81F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 03:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:3d:7c:ce:bc:fa:82:69:9e:54:ab:fb:d7:b3:4c:db:6e:46:2c:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5D8285BB922845D621469C42C9DC6357443B81F
        Validity
            Not Before: Jun  5 20:14:30 2026 GMT
            Not After : Jun  4 20:19:30 2027 GMT
        Subject: CN=875F893D9C0C93FC830BB9A5F599585B9D0B14EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8f:70:0d:c3:8f:57:7f:8c:5b:e7:19:47:be:
                    fc:11:98:25:bf:a5:3b:4d:92:4a:bb:48:97:82:b0:
                    0b:3f:86:5f:da:0f:f8:ec:80:09:75:96:26:ff:21:
                    f6:53:50:30:b9:a4:04:7f:40:20:a6:cd:fc:b4:24:
                    f5:73:f1:94:b5:f5:ac:35:56:15:58:fe:23:9e:a9:
                    db:f7:c2:a2:e1:53:e8:62:3d:d6:23:50:b5:ec:e3:
                    e3:b1:86:98:9a:19:00:1f:e0:e9:81:53:fd:d2:01:
                    cb:66:e1:84:e6:57:31:b2:18:0d:c9:99:02:05:b0:
                    e8:71:24:57:5e:44:48:12:73:3e:31:d9:6d:f6:d0:
                    63:d7:fc:f5:fd:4a:4f:3a:5f:ea:e2:a2:e5:09:97:
                    d7:fe:56:9c:88:8c:ea:54:01:b1:ff:30:69:b0:0c:
                    be:00:b5:65:9d:28:87:6f:dc:d9:82:0d:79:45:f7:
                    ed:fe:4a:b2:18:09:b2:7c:76:67:f7:78:29:e9:99:
                    81:7b:1d:c9:fd:db:ac:91:59:b8:61:4c:79:65:d0:
                    85:38:8e:f2:e9:65:76:65:fc:2b:39:3f:76:e3:2f:
                    66:88:36:85:60:8a:1d:86:97:71:7f:b4:74:4d:71:
                    d4:9b:5e:c2:f0:c1:eb:86:54:42:a3:c9:b9:f3:e3:
                    3f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:5F:89:3D:9C:0C:93:FC:83:0B:B9:A5:F5:99:58:5B:9D:0B:14:EF
            X509v3 Authority Key Identifier:
                keyid:F5:D8:28:5B:B9:22:84:5D:62:14:69:C4:2C:9D:C6:35:74:43:B8:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/F5D8285BB922845D621469C42C9DC6357443B81F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5D8285BB922845D621469C42C9DC6357443B81F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/323830343a356163633a3a2f33322d3438203d3e20323638373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5acc::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:2e:f0:0d:db:79:fe:7e:40:2a:88:c1:1f:25:bb:1d:62:3a:
         58:0f:1b:2d:77:36:3e:4c:2c:65:e4:53:5e:90:70:31:c4:d4:
         35:ab:d4:27:2f:4c:3b:4a:ec:91:ad:3b:ae:05:05:06:df:08:
         dd:61:9c:40:79:7a:41:67:5d:d9:ff:d4:bf:cb:12:71:db:2f:
         44:11:22:5e:62:9c:9e:af:d5:6e:23:be:b1:5e:4b:08:fa:22:
         30:f0:4b:7e:89:50:f4:aa:9c:13:ee:3f:93:4c:1a:55:6d:4b:
         f5:af:8f:dd:7a:a6:8a:1f:bb:19:70:9b:cf:4e:73:06:e6:48:
         99:ba:d7:bd:7f:67:b9:21:f5:2e:62:3e:45:9a:97:e2:9a:b6:
         45:8c:ca:d3:c9:92:76:f2:32:00:71:96:fd:42:e2:c9:a5:71:
         9e:79:90:02:eb:dd:33:5e:14:f6:1a:d5:0b:14:d6:73:41:20:
         af:8d:ae:65:76:c3:3d:a5:dd:3b:67:3a:d9:16:72:f7:01:9a:
         b1:8e:eb:0f:57:21:84:0d:5a:db:27:33:f1:6a:51:0a:20:09:
         68:96:8e:6e:ae:19:63:8c:73:f8:42:9b:31:4d:8c:0c:4f:55:
         d7:dd:7c:83:a3:97:79:9b:0d:72:49:ba:82:75:0a:7a:c2:76:
         ea:2f:c6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:49:16 2026 by rpki-client