Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/323830343a353037303a3a2f33322d313238203d3e20323638333839.roa
File:                     323830343a353037303a3a2f33322d313238203d3e20323638333839.roa (raw, json)
Hash identifier:          +rdKyT94o05+M+83Mn6b9zCYwTAvUwgxHctKNP4hFlk=
Subject key identifier:   C6:00:46:74:A6:1F:5D:FD:87:23:DE:CC:A1:A1:2C:69:7D:79:D3:78
Certificate issuer:       /CN=BE282ECF05D5A7E5392533991B3C855CD1410075
Certificate serial:       25450B337330FCEAD9454546E28FB46AF6D41A91
Authority key identifier: BE:28:2E:CF:05:D5:A7:E5:39:25:33:99:1B:3C:85:5C:D1:41:00:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE282ECF05D5A7E5392533991B3C855CD1410075.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/323830343a353037303a3a2f33322d313238203d3e20323638333839.roa
Signing time:             Mon 18 May 2026 17:13:28 +0000
ROA not before:           Mon 18 May 2026 17:08:28 +0000
ROA not after:            Mon 17 May 2027 17:13:28 +0000
asID:                     268389
IP address blocks:        2804:5070::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/BE282ECF05D5A7E5392533991B3C855CD1410075.crl
                          rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/BE282ECF05D5A7E5392533991B3C855CD1410075.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE282ECF05D5A7E5392533991B3C855CD1410075.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 16:35:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:45:0b:33:73:30:fc:ea:d9:45:45:46:e2:8f:b4:6a:f6:d4:1a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE282ECF05D5A7E5392533991B3C855CD1410075
        Validity
            Not Before: May 18 17:08:28 2026 GMT
            Not After : May 17 17:13:28 2027 GMT
        Subject: CN=C6004674A61F5DFD8723DECCA1A12C697D79D378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:38:b9:ec:ce:e8:09:c3:e8:5a:05:d1:90:98:
                    95:14:dc:6f:3d:0d:01:4e:55:38:24:e0:34:cf:8a:
                    b8:3a:0b:bf:3b:1f:38:f6:51:ab:a8:71:c4:e8:73:
                    89:22:6c:cf:c7:18:dc:f8:30:80:dc:65:9f:cb:23:
                    9e:7b:8e:db:bd:9e:6d:7a:8e:d5:56:7b:50:6f:47:
                    2f:69:ba:c6:51:e1:fd:a7:79:fa:5c:b1:ad:cb:b6:
                    ed:9b:25:1a:89:19:6d:3b:ab:5c:d5:19:c3:ab:be:
                    7a:ce:4e:88:15:b6:c2:3d:5f:51:97:5c:bb:bf:cd:
                    6f:a0:60:e9:9c:59:6a:2e:4d:24:51:04:63:c6:40:
                    b1:14:3d:af:be:cb:a0:bb:87:c3:47:2a:81:36:8f:
                    a6:38:9c:2c:62:07:ba:2b:db:9d:ee:ea:0b:be:ee:
                    56:2a:ae:8a:50:13:a5:0a:4c:56:15:7b:39:9e:e7:
                    98:a1:0e:0f:39:88:e3:e6:d2:f3:47:bf:ed:2c:01:
                    77:f0:46:d3:45:ff:81:64:7c:8b:14:14:32:26:cf:
                    14:e0:1d:38:d9:5e:9f:b2:4f:31:df:91:0e:fb:54:
                    6b:7e:3a:fd:0d:61:79:9a:2e:14:c5:d5:ba:43:44:
                    fc:5e:bf:19:11:99:c7:c0:aa:97:33:63:f8:cc:7e:
                    ae:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:00:46:74:A6:1F:5D:FD:87:23:DE:CC:A1:A1:2C:69:7D:79:D3:78
            X509v3 Authority Key Identifier:
                keyid:BE:28:2E:CF:05:D5:A7:E5:39:25:33:99:1B:3C:85:5C:D1:41:00:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/BE282ECF05D5A7E5392533991B3C855CD1410075.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE282ECF05D5A7E5392533991B3C855CD1410075.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4b2BBLf9txfe1dhbUABYpWe5rPbkUMBFHQSrcwC59zgY/0/323830343a353037303a3a2f33322d313238203d3e20323638333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5070::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:6d:aa:47:d7:cf:ed:ce:1d:24:fc:82:1a:70:cf:7a:55:f0:
         1f:4d:8b:28:ce:78:b6:59:4b:4f:ad:12:a8:45:fc:e5:41:f3:
         e4:d7:65:cb:08:83:6e:46:a9:bd:55:fd:21:39:5b:67:22:a5:
         54:3e:70:98:61:9c:0a:65:38:10:07:57:9e:ee:63:d6:7a:62:
         00:b8:56:f9:b1:22:ac:19:4c:c0:22:84:ce:1c:49:26:7d:74:
         62:59:90:45:78:b2:fd:0f:68:5d:2a:b6:10:d4:96:2e:ce:07:
         3d:95:1e:d5:8b:8d:5a:5e:b0:ce:36:ea:d7:07:64:c1:19:33:
         31:ef:ca:c7:f1:e1:04:6e:23:18:ec:e9:a3:9c:93:51:bb:23:
         e9:4b:d7:96:2f:b8:36:bc:4e:c4:a5:8e:25:fb:f7:9c:5a:69:
         ac:a5:8b:65:78:ee:1d:69:88:e4:b6:d9:30:40:93:26:29:23:
         6d:af:b7:fb:1a:1f:75:32:0c:36:bb:e0:ba:75:80:f9:29:f3:
         ff:79:c0:b3:3b:70:3d:54:a0:5c:2d:1f:8a:e9:67:e0:e4:fb:
         1c:6e:ba:aa:65:93:8b:30:08:b7:86:ac:f0:b3:22:a3:e1:d2:
         8d:fe:03:bb:54:57:0e:b3:94:c8:05:92:17:16:54:75:07:ad:
         dc:48:a7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 17:10:49 2026 by rpki-client