Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51rP7fVEa68Yk92mfRznp8gYveqQ7bzTNZWogh8asGwd/0/323830343a393562633a3a2f33322d313238203d3e20323734353432.roa
File:                     323830343a393562633a3a2f33322d313238203d3e20323734353432.roa (raw, json)
Hash identifier:          FQaZooBpoVFpZserhejOUp1JZLGHQv8t4h6uUH6ilCo=
Subject key identifier:   A5:F7:92:0D:D0:E5:BB:00:5F:34:CA:23:03:97:88:A0:FE:B5:AC:0A
Certificate issuer:       /CN=2A17BA4545BE1F2D2EACE11546AB40974E43C371
Certificate serial:       4861E3E8E9119C1F052185E1E2F6BAA38B7D739B
Authority key identifier: 2A:17:BA:45:45:BE:1F:2D:2E:AC:E1:15:46:AB:40:97:4E:43:C3:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A17BA4545BE1F2D2EACE11546AB40974E43C371.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51rP7fVEa68Yk92mfRznp8gYveqQ7bzTNZWogh8asGwd/0/323830343a393562633a3a2f33322d313238203d3e20323734353432.roa
Signing time:             Mon 18 May 2026 14:41:06 +0000
ROA not before:           Mon 18 May 2026 14:36:06 +0000
ROA not after:            Mon 17 May 2027 14:41:06 +0000
asID:                     274542
IP address blocks:        2804:95bc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/51rP7fVEa68Yk92mfRznp8gYveqQ7bzTNZWogh8asGwd/0/2A17BA4545BE1F2D2EACE11546AB40974E43C371.crl
                          rsync://rpki-repo.registro.br/repo/51rP7fVEa68Yk92mfRznp8gYveqQ7bzTNZWogh8asGwd/0/2A17BA4545BE1F2D2EACE11546AB40974E43C371.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A17BA4545BE1F2D2EACE11546AB40974E43C371.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 12:45:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:61:e3:e8:e9:11:9c:1f:05:21:85:e1:e2:f6:ba:a3:8b:7d:73:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A17BA4545BE1F2D2EACE11546AB40974E43C371
        Validity
            Not Before: May 18 14:36:06 2026 GMT
            Not After : May 17 14:41:06 2027 GMT
        Subject: CN=A5F7920DD0E5BB005F34CA23039788A0FEB5AC0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e8:8e:a5:b7:21:53:d3:ea:26:39:12:a3:eb:
                    c7:67:45:17:82:59:5a:a5:49:4c:a3:eb:91:02:c4:
                    15:d3:97:df:be:9e:48:c7:38:2e:d6:e8:25:a8:e8:
                    e4:98:a0:ee:f8:fb:35:62:12:f1:ef:5a:be:b5:91:
                    4b:e5:65:b2:fe:87:c1:7b:3d:5d:7d:81:a1:b0:f1:
                    2c:b7:d3:01:dd:5a:99:22:40:8f:d3:fe:ad:7d:51:
                    03:01:a3:48:f0:8d:6d:2b:e8:bc:d9:a0:39:06:52:
                    88:14:a5:27:c0:cd:88:3d:fc:94:91:5d:4e:8c:6d:
                    0e:68:45:da:34:2c:3d:d2:17:b0:18:d6:45:dc:48:
                    19:3b:50:1f:39:6a:f2:66:47:19:07:ba:7f:6d:3a:
                    48:a0:c1:d7:dc:04:09:e3:1b:a0:af:94:9d:ec:41:
                    d7:8a:2b:e3:92:9e:da:65:54:57:4b:4e:61:9e:e8:
                    4e:09:07:03:b8:b5:d3:2c:f0:83:5f:7d:7c:98:97:
                    08:af:11:7b:0d:b1:7c:e4:09:62:8c:74:89:2a:a2:
                    45:53:7e:f2:65:b2:3f:46:48:5a:79:d1:9d:f8:86:
                    6e:17:b1:a4:6b:6a:69:8a:14:48:14:50:4c:81:1f:
                    8b:7c:9a:df:f0:38:ba:39:1c:ef:a6:47:9f:c6:67:
                    ae:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F7:92:0D:D0:E5:BB:00:5F:34:CA:23:03:97:88:A0:FE:B5:AC:0A
            X509v3 Authority Key Identifier:
                keyid:2A:17:BA:45:45:BE:1F:2D:2E:AC:E1:15:46:AB:40:97:4E:43:C3:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51rP7fVEa68Yk92mfRznp8gYveqQ7bzTNZWogh8asGwd/0/2A17BA4545BE1F2D2EACE11546AB40974E43C371.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A17BA4545BE1F2D2EACE11546AB40974E43C371.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51rP7fVEa68Yk92mfRznp8gYveqQ7bzTNZWogh8asGwd/0/323830343a393562633a3a2f33322d313238203d3e20323734353432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:95bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:a0:1b:9e:30:a2:06:b6:1b:9f:84:2b:79:5f:ee:a8:cd:00:
         4d:36:6d:0b:64:88:5c:39:19:ac:8d:31:86:1d:92:53:15:19:
         b5:e7:29:62:1b:98:8f:e6:02:ac:19:8a:a1:e5:1c:10:b7:97:
         8b:c8:53:19:e1:c2:f6:27:57:d2:3b:5e:e5:41:f6:79:0c:fe:
         23:6f:fb:f4:e7:8a:dc:ce:0f:c4:11:dc:18:18:bc:e3:95:d8:
         9e:05:e1:4a:12:3e:07:41:f6:b3:b5:4f:ff:71:cf:da:64:aa:
         bc:22:ef:f8:d4:67:af:f9:85:2b:b5:b2:5c:5a:b8:7e:0d:6b:
         8f:a1:16:7a:4f:26:d7:76:80:d3:3c:36:16:a6:a6:10:de:83:
         aa:b7:b7:32:c2:52:c5:e4:71:0c:cc:b1:40:47:e4:1b:98:35:
         ae:0c:f9:77:5f:0b:bc:05:dc:cf:e5:ce:c4:23:ec:0b:5d:4b:
         56:74:ff:b9:2e:be:cd:af:45:9f:bd:e6:ef:37:87:b7:bc:5f:
         d9:5d:f2:c1:4b:c9:13:e9:ba:05:bb:b1:8d:87:98:05:3d:65:
         f7:e7:7c:3b:0f:ad:cb:2a:91:ae:1f:95:fc:36:0e:4b:89:45:
         12:12:6d:95:75:eb:51:0b:de:bc:d4:fb:c7:b8:d3:ff:46:46:
         9b:68:1a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 19:22:50 2026 by rpki-client