Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a3130303a3a2f34302d3430203d3e20323731363132.roa
File:                     323830343a376534303a3130303a3a2f34302d3430203d3e20323731363132.roa (raw, json)
Hash identifier:          XXwvoC3sSoVELNPc1TM6z2xsE9G51C6abzYAQd+cyYY=
Subject key identifier:   B9:B6:0C:E2:9F:88:05:5D:80:55:71:39:51:E4:89:A7:C6:EE:BF:ED
Certificate issuer:       /CN=D449E37DE5FDE1C414F169BA00C9AC63D56EEF83
Certificate serial:       4EE44D6BF316EFCE70F5189D58DB12D979F5F8FE
Authority key identifier: D4:49:E3:7D:E5:FD:E1:C4:14:F1:69:BA:00:C9:AC:63:D5:6E:EF:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a3130303a3a2f34302d3430203d3e20323731363132.roa
Signing time:             Wed 27 May 2026 17:07:59 +0000
ROA not before:           Wed 27 May 2026 17:02:59 +0000
ROA not after:            Wed 26 May 2027 17:07:59 +0000
asID:                     271612
IP address blocks:        2804:7e40:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.crl
                          rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Jun 2026 16:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e4:4d:6b:f3:16:ef:ce:70:f5:18:9d:58:db:12:d9:79:f5:f8:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D449E37DE5FDE1C414F169BA00C9AC63D56EEF83
        Validity
            Not Before: May 27 17:02:59 2026 GMT
            Not After : May 26 17:07:59 2027 GMT
        Subject: CN=B9B60CE29F88055D8055713951E489A7C6EEBFED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e4:ea:51:94:00:00:68:3b:bb:c1:2b:7d:4a:
                    50:2f:71:7a:53:0b:49:70:8a:f7:04:a1:50:cb:b5:
                    0e:2d:f2:4b:e3:ef:31:f4:59:b1:34:49:3b:90:37:
                    56:87:bc:52:80:3c:4f:a3:ae:c8:4b:02:18:a0:03:
                    a0:d5:0b:82:7d:26:6a:66:30:d5:67:6a:9e:b8:8e:
                    5c:e5:03:c8:bd:14:dc:51:ad:cd:cb:17:80:33:12:
                    b8:29:59:ae:20:e7:67:33:e0:a0:d9:d6:75:96:35:
                    e8:00:9a:43:5d:a3:65:c7:64:69:a8:62:29:7e:bf:
                    f6:a3:18:e0:26:75:18:75:2f:d9:67:22:b7:6b:08:
                    54:21:95:ee:3b:6e:71:ab:b9:ef:40:74:8a:13:12:
                    bc:48:62:c7:47:13:3d:f0:b7:22:ef:58:e8:4b:18:
                    5f:7d:89:78:6e:67:b2:29:70:ba:2a:8a:fa:cb:e6:
                    00:f2:62:90:ec:fe:2b:e1:95:c3:de:60:06:d7:58:
                    65:75:e5:ac:73:45:8f:32:16:76:d2:b6:60:78:32:
                    99:b3:ba:89:0f:94:96:fc:e7:f1:aa:4f:4c:72:9b:
                    91:80:47:48:27:2e:39:e5:f5:4b:64:04:d4:a5:e5:
                    98:8c:61:c6:ae:b3:ac:64:e1:b6:a3:c1:50:9c:f4:
                    fa:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B6:0C:E2:9F:88:05:5D:80:55:71:39:51:E4:89:A7:C6:EE:BF:ED
            X509v3 Authority Key Identifier:
                keyid:D4:49:E3:7D:E5:FD:E1:C4:14:F1:69:BA:00:C9:AC:63:D5:6E:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a3130303a3a2f34302d3430203d3e20323731363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e40:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         a3:e5:35:c1:da:00:df:39:af:d0:96:b5:8d:ed:1e:69:17:c2:
         9b:00:b1:f3:7a:12:4f:5d:21:06:70:6a:9b:2e:e3:1d:45:ad:
         e9:c5:ac:44:94:de:33:4f:50:4a:66:d9:60:92:87:3f:8b:67:
         1f:1b:89:7f:14:ea:2a:cf:95:78:12:4a:87:5d:36:4e:8d:2d:
         3c:d1:3a:dd:68:c5:f1:e6:cc:9d:3a:47:de:9a:f1:a1:c0:36:
         f6:18:c7:42:a8:bb:32:d6:5f:58:a4:ec:0e:b0:4a:c2:a3:4b:
         d2:34:f6:7b:ad:8a:96:87:b9:9e:76:c6:81:61:b0:68:c2:47:
         41:fe:db:53:b4:cb:b5:78:19:19:28:b8:d9:ab:52:c3:f1:8f:
         61:05:80:93:09:c3:52:7b:1d:aa:bb:e2:42:30:1a:59:3b:ee:
         c1:05:d2:4b:8e:56:80:88:59:c0:d2:d7:3a:f5:9b:cc:b6:5d:
         2f:80:3b:39:0b:2b:b5:b7:5e:1a:47:8d:5e:91:a7:98:ae:a6:
         db:b7:ad:0f:dd:52:ff:25:82:81:e5:46:73:54:60:14:83:76:
         99:ba:fd:58:68:8a:b6:62:53:34:fb:d2:36:c0:f9:a4:f1:21:
         29:4b:52:b2:37:23:ba:93:28:8d:97:d0:9e:7f:cf:1e:63:80:
         1d:f8:41:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:02:03 2026 by rpki-client