Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/323830343a376132633a383030303a3a2f33332d3333203d3e20323731333532.roa
File:                     323830343a376132633a383030303a3a2f33332d3333203d3e20323731333532.roa (raw, json)
Hash identifier:          VZEHC1FzMqGb5XwqfQOiFh9EJYwU0GLVAiFMoiCBzN0=
Subject key identifier:   D3:30:E6:72:FF:A2:6D:1B:D3:FF:8F:6C:17:E2:2A:14:B2:81:59:CF
Certificate issuer:       /CN=66CDB035108BA5CAF5AF8D476FF862F54C5DE911
Certificate serial:       7ECD90CFFB8C6268B024A3C30B4C263850B50969
Authority key identifier: 66:CD:B0:35:10:8B:A5:CA:F5:AF:8D:47:6F:F8:62:F5:4C:5D:E9:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66CDB035108BA5CAF5AF8D476FF862F54C5DE911.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/323830343a376132633a383030303a3a2f33332d3333203d3e20323731333532.roa
Signing time:             Tue 19 May 2026 14:01:26 +0000
ROA not before:           Tue 19 May 2026 13:56:26 +0000
ROA not after:            Tue 18 May 2027 14:01:26 +0000
asID:                     271352
IP address blocks:        2804:7a2c:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/66CDB035108BA5CAF5AF8D476FF862F54C5DE911.crl
                          rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/66CDB035108BA5CAF5AF8D476FF862F54C5DE911.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66CDB035108BA5CAF5AF8D476FF862F54C5DE911.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 06:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:cd:90:cf:fb:8c:62:68:b0:24:a3:c3:0b:4c:26:38:50:b5:09:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66CDB035108BA5CAF5AF8D476FF862F54C5DE911
        Validity
            Not Before: May 19 13:56:26 2026 GMT
            Not After : May 18 14:01:26 2027 GMT
        Subject: CN=D330E672FFA26D1BD3FF8F6C17E22A14B28159CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c4:fe:93:16:23:66:06:7d:22:e3:16:1f:a4:
                    18:d4:2f:d5:29:39:f8:ee:c2:59:3b:d2:ab:79:1f:
                    96:5e:09:83:4d:ee:ce:33:db:bf:31:b2:bb:44:d6:
                    77:20:8a:3b:8d:24:e5:f5:bf:da:19:c5:ed:b3:53:
                    ee:4f:0e:6d:40:96:b6:19:75:da:40:b5:9f:6e:9d:
                    0b:54:e2:28:56:f7:4e:01:e1:37:39:40:76:f8:af:
                    d9:4f:2c:f9:a6:46:08:43:09:31:14:5f:7e:22:fe:
                    a0:6f:db:41:03:e0:1d:f1:73:b7:80:a7:f2:31:54:
                    cb:31:7d:2b:4b:8e:f2:f0:d2:8e:72:c0:a6:ef:76:
                    28:90:3d:a4:ea:c2:e2:fe:a1:7f:67:e5:0a:0c:cf:
                    91:f9:73:c4:fd:a3:6f:09:b9:ef:14:9a:ff:14:3d:
                    c7:88:2f:23:98:3a:50:58:b3:b2:98:53:57:ed:2d:
                    fa:c5:d1:02:9c:bd:e4:a7:fa:82:65:9e:f8:f7:2c:
                    04:17:e7:69:62:16:e3:67:f9:7d:cd:32:f4:1e:92:
                    fc:3f:44:5e:ab:bf:5b:60:b3:4d:fb:17:d2:d6:04:
                    08:fe:9d:61:70:1a:f6:c9:26:d0:44:d6:6a:ad:2c:
                    d9:73:d3:ea:f4:58:2d:89:99:8e:68:fd:b1:86:2d:
                    27:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:30:E6:72:FF:A2:6D:1B:D3:FF:8F:6C:17:E2:2A:14:B2:81:59:CF
            X509v3 Authority Key Identifier:
                keyid:66:CD:B0:35:10:8B:A5:CA:F5:AF:8D:47:6F:F8:62:F5:4C:5D:E9:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/66CDB035108BA5CAF5AF8D476FF862F54C5DE911.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66CDB035108BA5CAF5AF8D476FF862F54C5DE911.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/323830343a376132633a383030303a3a2f33332d3333203d3e20323731333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a2c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         a3:0a:db:22:7a:0b:88:ef:97:5b:0b:2f:14:17:3d:7d:06:34:
         83:d3:06:56:a3:0b:62:28:ca:53:93:e6:d8:76:ea:ce:12:84:
         18:26:9a:04:40:e5:b7:d6:aa:ad:46:15:9e:12:fa:f8:5c:7a:
         ce:be:19:0c:38:19:e8:e6:03:e5:25:e3:24:c6:4f:13:59:95:
         c9:e6:47:49:5d:6e:e1:df:6c:4d:d5:0c:9e:0d:a0:4c:d9:f2:
         d8:91:21:f5:8e:fb:71:db:0d:41:da:b4:4d:56:76:59:2e:6d:
         38:79:c4:dc:c8:53:2d:ab:4e:de:7d:6a:fe:09:a2:f2:e2:03:
         9f:30:35:51:61:5d:83:ec:7e:62:aa:86:84:46:90:08:2e:57:
         ac:87:9f:99:56:fa:f0:31:3b:4a:75:31:47:70:88:48:4c:0f:
         19:f9:60:d5:c1:06:8a:9b:43:f8:e7:20:a8:1e:c6:af:c7:c2:
         0f:3b:62:3b:1d:6e:67:ec:4f:0b:33:6b:1a:9f:f9:b1:cb:9a:
         4e:c5:5c:4f:24:bb:92:ac:2a:87:78:07:92:eb:24:a4:0e:ba:
         a9:9b:10:91:a4:6e:5e:c8:7d:ed:0e:01:a8:ed:cf:93:9d:89:
         8b:39:a4:b4:5c:82:85:e0:b3:f9:18:7c:da:cc:e9:4d:27:36:
         77:34:de:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 15:27:16 2026 by rpki-client