Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/323830343a373963343a383032303a3a2f34352d3435203d3e20323731333236.roa
File:                     323830343a373963343a383032303a3a2f34352d3435203d3e20323731333236.roa (raw, json)
Hash identifier:          tQV8gI8MXJB58r84YmjnuIoHDAabZ56QFi8+oaa591E=
Subject key identifier:   52:9E:AF:F5:6C:6B:3B:CA:A0:1D:C5:D1:A7:3C:74:AE:B4:36:D9:BA
Certificate issuer:       /CN=D3D5937E2258BC74B97D85F1F184E91DEEA83830
Certificate serial:       42767DD9D0E04A8BD767E5D88137072C38D5A326
Authority key identifier: D3:D5:93:7E:22:58:BC:74:B9:7D:85:F1:F1:84:E9:1D:EE:A8:38:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D5937E2258BC74B97D85F1F184E91DEEA83830.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/323830343a373963343a383032303a3a2f34352d3435203d3e20323731333236.roa
Signing time:             Thu 14 May 2026 17:41:45 +0000
ROA not before:           Thu 14 May 2026 17:36:45 +0000
ROA not after:            Thu 13 May 2027 17:41:45 +0000
asID:                     271326
IP address blocks:        2804:79c4:8020::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/D3D5937E2258BC74B97D85F1F184E91DEEA83830.crl
                          rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/D3D5937E2258BC74B97D85F1F184E91DEEA83830.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D5937E2258BC74B97D85F1F184E91DEEA83830.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 May 2026 21:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:76:7d:d9:d0:e0:4a:8b:d7:67:e5:d8:81:37:07:2c:38:d5:a3:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3D5937E2258BC74B97D85F1F184E91DEEA83830
        Validity
            Not Before: May 14 17:36:45 2026 GMT
            Not After : May 13 17:41:45 2027 GMT
        Subject: CN=529EAFF56C6B3BCAA01DC5D1A73C74AEB436D9BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c5:a8:fe:55:fc:d5:24:f7:87:34:15:10:ec:
                    d1:8c:41:8c:76:0f:27:67:45:ed:e4:2c:4a:e1:ab:
                    00:49:c4:b9:b4:58:7d:2b:5f:a7:e6:c8:cf:45:e8:
                    a6:e1:3e:38:f7:92:f7:5b:95:4f:4b:1e:a7:a7:98:
                    d6:dc:a7:05:7d:26:fb:da:78:a7:06:c5:45:ab:47:
                    72:49:ea:f1:08:63:ea:1f:d2:40:df:21:25:c6:4b:
                    dd:2a:58:91:48:8c:aa:6f:17:1c:a4:24:5f:99:b2:
                    e2:23:f0:9d:50:f6:ac:2e:21:3d:52:63:16:46:7e:
                    a5:58:09:13:58:96:b9:dc:ce:8d:ec:b8:b5:b6:6e:
                    74:7e:95:6b:98:d5:c2:c8:79:14:e7:87:7a:5a:9a:
                    6b:41:37:cd:22:96:21:06:3e:72:ed:2d:6d:4e:88:
                    cb:25:45:89:27:62:99:fa:0d:24:53:2e:48:1d:de:
                    35:98:09:41:1d:cf:43:b7:ce:d9:80:0d:ce:1c:b4:
                    9a:ae:7d:cd:80:31:51:34:b2:8b:ab:31:69:36:41:
                    99:44:72:e7:c0:bb:d1:ed:3b:04:7e:f5:1f:d8:b8:
                    a5:07:e7:0f:17:ab:34:35:99:2d:99:75:83:11:88:
                    9d:76:8b:9c:0a:d9:f6:63:a1:3b:ff:76:6e:52:92:
                    26:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9E:AF:F5:6C:6B:3B:CA:A0:1D:C5:D1:A7:3C:74:AE:B4:36:D9:BA
            X509v3 Authority Key Identifier:
                keyid:D3:D5:93:7E:22:58:BC:74:B9:7D:85:F1:F1:84:E9:1D:EE:A8:38:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/D3D5937E2258BC74B97D85F1F184E91DEEA83830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D5937E2258BC74B97D85F1F184E91DEEA83830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/323830343a373963343a383032303a3a2f34352d3435203d3e20323731333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:79c4:8020::/45

    Signature Algorithm: sha256WithRSAEncryption
         cd:2b:43:cf:92:3f:12:ae:69:b6:ed:0c:18:64:7d:57:a7:96:
         ce:ba:e8:a7:99:72:3b:0a:d1:70:fe:36:7d:69:34:bc:a3:e6:
         18:bc:16:b7:aa:09:14:00:9a:1b:44:bc:66:ab:69:38:21:ed:
         d1:a1:cc:62:b1:18:a3:45:77:a1:57:74:64:33:ac:d2:12:72:
         01:4b:ff:73:c9:75:e7:27:48:ba:c6:f5:aa:19:bb:8b:f7:23:
         b4:fb:2d:be:74:85:75:26:24:3b:b7:ec:57:2f:26:e5:6b:25:
         fa:ea:ab:b4:1d:97:9b:2f:a2:8a:25:98:a9:31:0e:36:e6:46:
         1d:3c:58:8d:1f:5c:75:37:44:5a:bc:ca:d2:bb:e8:01:e0:09:
         f1:0a:24:ff:0a:d3:e9:64:a6:a2:72:f9:d6:f5:d8:2c:de:7d:
         1d:e7:38:45:d8:e6:9b:37:9a:40:bf:c7:8d:49:c8:cd:f3:b0:
         db:e6:30:f1:3e:5b:5d:ae:03:e0:2a:7d:99:94:7d:67:8d:06:
         e1:76:08:e2:ff:a8:08:1b:cd:f6:84:48:d5:ce:2c:fa:77:41:
         a0:86:c7:ee:9a:3b:63:b4:e9:d0:90:dd:ad:71:e2:7a:81:af:
         8f:3d:f6:df:6e:e3:f6:8f:7e:68:43:15:12:e6:6e:8c:0a:6a:
         4f:95:bb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:43:12 2026 by rpki-client