Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/323830343a386664303a3a2f33332d3333203d3e20323733353134.roa
File:                     323830343a386664303a3a2f33332d3333203d3e20323733353134.roa (raw, json)
Hash identifier:          VngToW6XWVDfj1dd6QrmS9I2fFZ7L6JVO0uB2TCX+7I=
Subject key identifier:   05:6E:9C:9B:B5:38:78:CF:36:5C:7E:AC:D3:6D:8E:5E:C3:0F:3C:20
Certificate issuer:       /CN=E43FC22F53F1011D8D213F6EB00C5A472E9235D9
Certificate serial:       044CC7DA381E744C7F865F32090CC1CA15F850E6
Authority key identifier: E4:3F:C2:2F:53:F1:01:1D:8D:21:3F:6E:B0:0C:5A:47:2E:92:35:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/323830343a386664303a3a2f33332d3333203d3e20323733353134.roa
Signing time:             Sat 08 Aug 2026 17:10:25 +0000
ROA not before:           Sat 08 Aug 2026 17:05:25 +0000
ROA not after:            Sat 07 Aug 2027 17:10:25 +0000
asID:                     273514
IP address blocks:        2804:8fd0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.crl
                          rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 13 Aug 2026 18:30:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:4c:c7:da:38:1e:74:4c:7f:86:5f:32:09:0c:c1:ca:15:f8:50:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E43FC22F53F1011D8D213F6EB00C5A472E9235D9
        Validity
            Not Before: Aug  8 17:05:25 2026 GMT
            Not After : Aug  7 17:10:25 2027 GMT
        Subject: CN=056E9C9BB53878CF365C7EACD36D8E5EC30F3C20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:68:c1:d1:cd:1a:dd:ba:a9:0d:14:24:33:41:
                    9b:c7:fc:00:57:ab:d8:f8:3a:4d:d3:b6:4f:54:02:
                    19:01:ff:12:c7:61:c0:40:f0:fb:67:f2:28:0a:73:
                    da:fb:19:3e:7e:94:b5:17:88:09:75:5f:7b:67:ba:
                    75:53:19:07:50:a2:b2:5d:2c:27:ee:30:f6:54:99:
                    8f:7e:23:9e:d9:de:62:23:c4:39:d9:04:bd:79:b9:
                    5a:81:f0:d1:00:18:ae:84:20:74:c9:51:c0:ad:de:
                    2b:67:bf:b7:89:0b:e2:85:24:24:af:db:3f:d3:e9:
                    6f:9a:7d:fe:ea:b1:15:de:86:3b:ce:6e:3c:f9:40:
                    56:a3:fc:1f:f7:78:86:7b:92:b5:9d:89:72:ba:92:
                    1e:d4:0d:ea:ad:34:5e:5d:89:57:a5:05:66:4a:29:
                    04:62:c8:b4:90:25:f1:a1:b0:01:c2:12:87:a0:93:
                    07:e1:ea:d1:8e:68:dc:4f:f0:e0:14:46:2d:f2:e2:
                    75:0c:60:6f:79:e7:4f:37:91:26:a1:93:bb:6e:f4:
                    2e:dc:3b:1e:7a:62:21:3e:58:31:09:93:dc:e6:6b:
                    7b:7c:24:c8:ee:5e:07:67:5f:2e:2d:e5:7e:a4:1b:
                    8f:18:7a:77:81:c4:a1:f2:44:d3:cd:7d:6d:a8:d9:
                    a0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6E:9C:9B:B5:38:78:CF:36:5C:7E:AC:D3:6D:8E:5E:C3:0F:3C:20
            X509v3 Authority Key Identifier:
                keyid:E4:3F:C2:2F:53:F1:01:1D:8D:21:3F:6E:B0:0C:5A:47:2E:92:35:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/323830343a386664303a3a2f33332d3333203d3e20323733353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8fd0::/33

    Signature Algorithm: sha256WithRSAEncryption
         51:5e:fd:2e:c5:a9:aa:e5:a5:fd:f7:6c:62:ff:95:24:e7:f8:
         1f:2b:73:60:d5:33:ac:6c:c2:4b:62:1a:81:fe:01:1a:c5:a3:
         21:92:5f:48:ae:81:08:f3:47:79:ab:cd:4d:9c:b0:4c:c9:8e:
         13:95:33:53:5c:25:a3:b0:c4:49:79:e8:11:78:e9:24:c6:65:
         f1:17:f0:43:59:f0:29:48:56:37:49:4d:30:12:a8:55:a0:06:
         c7:f6:50:3e:34:5e:62:66:99:cd:15:1d:35:76:cc:1e:f3:f4:
         90:42:85:99:35:a6:95:4a:13:f4:4d:f4:6e:35:92:ff:4a:97:
         69:f6:31:4a:e8:3f:30:39:ed:2d:6e:05:69:d0:c2:3b:94:98:
         f0:23:1b:75:9f:7a:0d:cb:dd:83:63:eb:b4:b9:48:d6:eb:51:
         01:95:99:f0:1e:f8:da:f7:10:35:40:0e:c0:7d:96:5e:30:86:
         de:e6:ee:75:09:d2:6f:19:64:c0:4e:2d:13:7f:82:82:75:96:
         df:f5:c1:b1:6a:3f:07:12:fc:b9:2d:56:6a:6e:27:f9:4a:80:
         56:2f:1d:a6:f2:a2:49:c8:9f:12:18:67:75:bc:32:57:ee:bd:
         25:5c:0f:b7:05:c0:f2:e8:00:e1:f5:75:66:56:3d:e7:41:cd:
         c7:3c:2c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:55:25 2026 by rpki-client