Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a633030303a3a2f33342d3334203d3e20323731363132.roa
File:                     323830343a376534303a633030303a3a2f33342d3334203d3e20323731363132.roa (raw, json)
Hash identifier:          WsDii0dmD4UxQdQn4fPUT94SJGdgAGlCMiIkyMcJQVU=
Subject key identifier:   27:D0:B6:95:1F:E1:2E:F9:6F:28:D7:FE:DE:85:F5:6E:31:9B:8C:E7
Certificate issuer:       /CN=D449E37DE5FDE1C414F169BA00C9AC63D56EEF83
Certificate serial:       4C94765A00AA1E950B3CCCFCB86F21484CAB201D
Authority key identifier: D4:49:E3:7D:E5:FD:E1:C4:14:F1:69:BA:00:C9:AC:63:D5:6E:EF:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a633030303a3a2f33342d3334203d3e20323731363132.roa
Signing time:             Wed 27 May 2026 17:08:19 +0000
ROA not before:           Wed 27 May 2026 17:03:19 +0000
ROA not after:            Wed 26 May 2027 17:08:19 +0000
asID:                     271612
IP address blocks:        2804:7e40:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.crl
                          rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Jun 2026 16:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:94:76:5a:00:aa:1e:95:0b:3c:cc:fc:b8:6f:21:48:4c:ab:20:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D449E37DE5FDE1C414F169BA00C9AC63D56EEF83
        Validity
            Not Before: May 27 17:03:19 2026 GMT
            Not After : May 26 17:08:19 2027 GMT
        Subject: CN=27D0B6951FE12EF96F28D7FEDE85F56E319B8CE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:65:85:7e:b1:fa:d9:70:64:64:9d:35:de:12:
                    4c:8e:71:09:30:f7:80:94:0c:5f:c0:a5:51:ad:f9:
                    23:13:4e:a7:d8:4a:2a:e6:18:41:24:a5:d9:4c:1c:
                    23:4a:4f:82:9c:54:42:58:ae:41:4b:c2:3f:9e:6d:
                    ed:44:f8:5d:c8:e0:35:d3:8f:73:da:5a:90:85:10:
                    8b:2b:b2:52:da:5e:d4:0e:6a:c6:f2:e7:33:62:a4:
                    c9:95:78:49:b7:2d:1d:74:d3:08:6d:e7:4d:1c:7a:
                    3a:79:52:1a:df:7b:a5:c2:80:63:40:a2:a5:32:d8:
                    12:8c:e9:f6:de:59:b3:2e:fe:5f:a6:2a:b0:d4:46:
                    d5:81:89:8d:06:61:5f:27:96:5a:e7:df:69:53:c2:
                    bf:c2:6d:b9:65:6b:52:6f:d9:2c:f0:9d:0b:ff:d2:
                    26:6e:5b:64:82:d4:9c:63:81:25:77:c5:fd:77:1a:
                    56:3d:2c:0e:2b:37:50:2a:f3:0b:d4:5e:b2:93:02:
                    e7:98:d0:7e:34:5d:99:30:c4:47:71:09:17:e4:17:
                    67:c1:4f:ac:2e:d5:d5:e1:ad:41:26:67:1e:b7:c3:
                    72:cb:c0:c0:0d:a7:39:58:6c:dc:4b:5b:ae:f5:d0:
                    2b:4b:ac:e7:8c:5e:06:af:f7:2b:30:53:b5:b2:b9:
                    c5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D0:B6:95:1F:E1:2E:F9:6F:28:D7:FE:DE:85:F5:6E:31:9B:8C:E7
            X509v3 Authority Key Identifier:
                keyid:D4:49:E3:7D:E5:FD:E1:C4:14:F1:69:BA:00:C9:AC:63:D5:6E:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a633030303a3a2f33342d3334203d3e20323731363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e40:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a3:20:aa:1b:64:8e:e2:1a:b9:dc:ad:a3:6d:25:b4:bf:90:5d:
         f7:50:fc:1e:e4:18:34:c0:65:31:2c:90:5e:ee:09:9e:d9:00:
         58:46:bd:2b:80:57:b2:b7:d5:fc:21:20:6a:5d:7c:01:5e:10:
         8c:26:2a:e3:b2:8e:ad:0c:23:62:f7:cd:aa:80:74:28:ad:6f:
         3b:cf:dc:f1:0b:d9:93:36:91:4c:39:e7:f4:f4:8a:ed:52:13:
         b8:74:01:d6:0b:02:0f:22:a0:7f:22:2d:02:18:75:0d:c6:35:
         ab:bb:3d:98:af:d7:dc:7d:28:ff:07:b2:3d:6d:29:bb:75:58:
         3e:22:e2:05:1e:22:33:70:85:53:50:63:a7:ef:be:84:91:15:
         f8:e5:7f:42:dc:c3:13:4b:ab:8c:2d:9e:2f:c4:b1:9c:ed:58:
         7e:de:e6:07:c7:9c:3b:8e:62:d5:5a:d7:1d:ca:57:a5:90:e8:
         19:8b:0d:e5:01:a0:03:ef:2c:40:5b:f8:86:7b:6f:9b:74:0e:
         bf:0a:d4:0b:1c:f1:b6:0f:5e:32:9f:45:5e:08:d3:07:98:e6:
         99:5a:05:89:34:18:22:d6:bf:44:7e:ca:0c:5c:84:d6:44:e6:
         78:64:c3:b9:2b:43:65:f0:47:1a:ed:bb:75:71:40:f4:02:43:
         ee:d5:0c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:08:53 2026 by rpki-client