Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a3a2f33322d313238203d3e20323637393432.roa
File:                     323830343a353539303a3a2f33322d313238203d3e20323637393432.roa (raw, json)
Hash identifier:          QCiXR+b2zS3hWh20sNpn6/H0aKDI2yARrCWv/OnBtiw=
Subject key identifier:   F4:DC:FA:0F:2F:28:32:19:10:B7:49:FB:E8:DA:BA:2F:98:67:2D:1F
Certificate issuer:       /CN=161452576542127A122731E3B02950CF87014D33
Certificate serial:       4F03A513A8D4307AFAE5B61B7843DA7F5475D037
Authority key identifier: 16:14:52:57:65:42:12:7A:12:27:31:E3:B0:29:50:CF:87:01:4D:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/161452576542127A122731E3B02950CF87014D33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a3a2f33322d313238203d3e20323637393432.roa
Signing time:             Mon 03 Aug 2026 20:33:46 +0000
ROA not before:           Mon 03 Aug 2026 20:28:46 +0000
ROA not after:            Mon 02 Aug 2027 20:33:46 +0000
asID:                     267942
IP address blocks:        2804:5590::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/161452576542127A122731E3B02950CF87014D33.crl
                          rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/161452576542127A122731E3B02950CF87014D33.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/161452576542127A122731E3B02950CF87014D33.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 21:35:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:03:a5:13:a8:d4:30:7a:fa:e5:b6:1b:78:43:da:7f:54:75:d0:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=161452576542127A122731E3B02950CF87014D33
        Validity
            Not Before: Aug  3 20:28:46 2026 GMT
            Not After : Aug  2 20:33:46 2027 GMT
        Subject: CN=F4DCFA0F2F28321910B749FBE8DABA2F98672D1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:28:b3:8c:de:b6:b8:e9:5c:a6:4d:8a:72:e9:
                    48:e3:d4:20:7c:e0:50:2e:4a:ae:d0:e4:9a:80:d8:
                    89:7a:fa:70:c8:8e:d7:3b:27:92:a3:dc:30:bb:20:
                    de:f4:a2:55:b6:e9:6c:8f:66:cb:38:6c:65:fc:6c:
                    1c:be:4d:c6:a6:6c:e1:81:fe:ef:f1:df:c0:be:1a:
                    63:58:6c:17:ac:64:ee:d6:a8:a7:3e:5e:ff:72:36:
                    96:75:32:2d:bb:45:d4:40:e0:d5:c2:f1:66:59:1b:
                    3c:64:e0:8d:7d:7f:26:32:72:c4:65:ad:7f:68:50:
                    04:6e:7a:2c:a6:32:93:88:87:a9:e0:21:3e:15:8e:
                    f6:c2:ff:f3:70:60:fa:81:82:ca:8a:9e:3e:25:6e:
                    85:b5:7d:e7:4a:b0:f9:0b:3e:b6:91:77:65:b2:d1:
                    4b:ab:f6:c5:0b:14:2e:9d:3b:dc:c2:ed:ec:2d:a8:
                    b5:31:7e:84:f1:9f:36:2d:ff:34:c4:04:ab:7f:60:
                    d1:22:df:ef:f4:0b:b2:c4:71:64:d9:99:7f:3f:13:
                    ae:06:e1:15:93:d0:65:37:87:9c:c9:54:8b:87:2d:
                    82:9c:81:75:4c:5f:87:2d:2d:58:3c:a1:ab:e1:33:
                    8e:b8:04:4c:44:6e:ff:b1:5a:dd:8a:92:2d:1a:e3:
                    bb:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DC:FA:0F:2F:28:32:19:10:B7:49:FB:E8:DA:BA:2F:98:67:2D:1F
            X509v3 Authority Key Identifier:
                keyid:16:14:52:57:65:42:12:7A:12:27:31:E3:B0:29:50:CF:87:01:4D:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/161452576542127A122731E3B02950CF87014D33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/161452576542127A122731E3B02950CF87014D33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a3a2f33322d313238203d3e20323637393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5590::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:38:bc:50:b2:84:b7:c1:19:2c:d5:cc:b6:83:74:8f:5a:12:
         bc:4b:51:5f:9b:27:39:b2:86:0c:54:00:34:f2:df:eb:c3:ab:
         a7:35:5c:84:1a:33:95:11:21:85:cf:0b:4d:15:04:7f:77:21:
         90:67:3c:49:11:18:bc:4b:be:39:ac:35:3d:05:3d:d5:aa:7e:
         32:e7:e0:ef:16:78:eb:c3:0b:9c:43:58:ab:1e:9e:4c:b0:5f:
         c7:ac:02:c1:1c:d1:f5:d8:d4:0c:cb:a5:a8:7c:a2:47:82:a6:
         08:98:a0:cb:fc:b3:7e:10:3c:5d:08:d7:ab:d5:9a:15:d7:a9:
         35:bc:17:9b:af:f1:30:70:7d:71:33:a0:cf:f1:cf:ac:79:31:
         a1:6a:6d:8a:77:00:21:61:90:c9:42:49:0a:4a:99:c9:c1:86:
         7b:d1:e3:86:f3:64:23:06:c1:4e:ce:86:ee:1e:0e:d2:36:35:
         33:ec:c3:51:05:ef:9f:9a:5a:dd:f4:9b:71:6b:9a:e4:b0:c6:
         19:7c:7e:b7:f3:c7:50:71:4e:ca:5c:91:7b:9d:ea:5d:33:9a:
         cb:39:4b:0f:3c:d2:9a:a6:d5:e9:db:5f:03:f2:ee:d6:31:0f:
         de:d3:fc:dc:cb:7f:e4:6e:bc:d5:e6:1b:04:6c:8d:9d:90:27:
         e2:cd:8a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 23:45:06 2026 by rpki-client