Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/323830343a363531303a383030303a3a2f33342d3334203d3e20323639343636.roa
File:                     323830343a363531303a383030303a3a2f33342d3334203d3e20323639343636.roa (raw, json)
Hash identifier:          +mLu4h1qL07FhUOJCmEpZVpKIO0oC5nVz99CZnh9r+0=
Subject key identifier:   29:2B:E9:1B:70:BF:C6:F4:11:46:84:22:7F:0A:84:66:2E:8C:DB:7B
Certificate issuer:       /CN=D75ABD4B44D8B16CC34566E12A7B68762DCDFA50
Certificate serial:       71C42083DEC8D0710024F0FD9553130C0646F831
Authority key identifier: D7:5A:BD:4B:44:D8:B1:6C:C3:45:66:E1:2A:7B:68:76:2D:CD:FA:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D75ABD4B44D8B16CC34566E12A7B68762DCDFA50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/323830343a363531303a383030303a3a2f33342d3334203d3e20323639343636.roa
Signing time:             Wed 13 May 2026 18:30:50 +0000
ROA not before:           Wed 13 May 2026 18:25:50 +0000
ROA not after:            Wed 12 May 2027 18:30:50 +0000
asID:                     269466
IP address blocks:        2804:6510:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/D75ABD4B44D8B16CC34566E12A7B68762DCDFA50.crl
                          rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/D75ABD4B44D8B16CC34566E12A7B68762DCDFA50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D75ABD4B44D8B16CC34566E12A7B68762DCDFA50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 09:34:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c4:20:83:de:c8:d0:71:00:24:f0:fd:95:53:13:0c:06:46:f8:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D75ABD4B44D8B16CC34566E12A7B68762DCDFA50
        Validity
            Not Before: May 13 18:25:50 2026 GMT
            Not After : May 12 18:30:50 2027 GMT
        Subject: CN=292BE91B70BFC6F4114684227F0A84662E8CDB7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ae:af:bd:d5:9c:75:64:dd:9d:20:79:53:0f:
                    70:24:ae:b4:2d:42:ce:d2:dd:cb:c9:87:5d:39:1e:
                    b9:5d:05:5a:11:7f:18:f0:48:83:2b:78:e9:21:53:
                    1d:e1:2c:13:58:b9:37:dd:ff:a6:32:62:cb:7e:93:
                    ba:ef:c1:2b:e7:0c:ef:58:53:3d:0d:49:95:de:c3:
                    e3:2b:bb:83:ce:1b:7d:4d:37:35:31:fe:b3:66:89:
                    3a:70:31:cc:b7:9a:1a:75:74:4f:b8:54:db:33:ae:
                    3f:3b:20:48:ac:60:ad:09:b3:d1:80:42:db:cc:48:
                    13:ee:ff:49:25:c1:67:89:b0:be:6e:f4:b3:b4:79:
                    46:33:d4:91:8e:b3:ba:d0:6b:a0:1f:c8:80:7b:ce:
                    ef:9e:d3:87:d1:9f:9a:8d:80:1c:9d:a6:48:ff:d0:
                    c0:4f:94:37:33:4b:73:00:06:5c:c7:1f:18:fc:9d:
                    86:f7:4f:48:aa:c1:4d:95:0e:d0:49:db:d8:56:b2:
                    3e:a8:ee:97:9a:be:bd:7e:bf:9d:7a:eb:e3:a9:90:
                    31:f8:56:1c:fc:66:49:c8:c6:b4:30:9e:a7:ff:bc:
                    4a:b2:1f:79:3b:58:c7:9b:43:51:dc:19:3f:38:a1:
                    92:dd:e9:5d:b4:a4:9f:07:22:1e:be:fa:30:0b:6f:
                    61:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:2B:E9:1B:70:BF:C6:F4:11:46:84:22:7F:0A:84:66:2E:8C:DB:7B
            X509v3 Authority Key Identifier:
                keyid:D7:5A:BD:4B:44:D8:B1:6C:C3:45:66:E1:2A:7B:68:76:2D:CD:FA:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/D75ABD4B44D8B16CC34566E12A7B68762DCDFA50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D75ABD4B44D8B16CC34566E12A7B68762DCDFA50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/323830343a363531303a383030303a3a2f33342d3334203d3e20323639343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6510:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         50:57:97:d6:e6:84:ee:60:c2:c5:24:dc:7d:1a:8c:60:04:61:
         51:89:83:23:a3:ed:7a:f6:ab:51:e9:0a:63:67:55:5e:a4:f2:
         8c:bb:20:b7:fe:d4:c9:40:fb:f4:1c:2a:ad:aa:b1:79:1e:14:
         9a:70:88:ba:b2:6f:53:f9:9c:52:56:63:a6:0d:73:ef:d7:78:
         87:83:17:c7:be:35:28:83:7c:f4:b5:4a:7e:15:0b:2c:50:35:
         e5:0b:c5:06:ea:b8:af:f3:86:96:b6:95:50:a4:42:cd:e6:51:
         14:e2:f2:b5:d6:b4:52:e1:1d:ee:fb:65:15:01:94:e8:66:30:
         eb:2c:1f:2c:ab:1b:39:bc:5c:c4:7c:84:75:53:9a:08:5e:71:
         8f:dd:a7:5c:8e:2e:14:25:05:54:3c:59:ee:e3:8d:4d:a6:7c:
         7a:b0:b0:19:91:19:0f:0c:73:9e:c4:ca:24:44:19:6e:8c:a9:
         6c:e6:12:2b:c3:ca:cf:0d:63:70:72:46:e1:77:95:b2:0e:4d:
         b5:81:1d:f8:ad:33:13:b9:7e:7a:f5:22:17:b3:61:71:4c:03:
         32:d1:e1:5b:4c:3c:97:c6:7c:cc:55:ce:c9:a0:8b:8e:bd:83:
         d1:fd:be:e4:30:62:f4:7b:aa:73:a5:ea:48:ef:19:32:48:c9:
         84:fb:3d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:06:38 2026 by rpki-client