Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/323830343a363531303a3a2f33322d3332203d3e20323639343636.roa
File:                     323830343a363531303a3a2f33322d3332203d3e20323639343636.roa (raw, json)
Hash identifier:          78fVzRrRZZhZ8olPmcNVPOupqUitgm48KFiDHTtr+14=
Subject key identifier:   8B:59:72:AA:30:C5:49:12:95:53:DB:88:0D:7B:CA:1E:6A:BC:B0:59
Certificate issuer:       /CN=D75ABD4B44D8B16CC34566E12A7B68762DCDFA50
Certificate serial:       709C3D8721D4FF94FFBBE995B2B492E7FFFB0634
Authority key identifier: D7:5A:BD:4B:44:D8:B1:6C:C3:45:66:E1:2A:7B:68:76:2D:CD:FA:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D75ABD4B44D8B16CC34566E12A7B68762DCDFA50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/323830343a363531303a3a2f33322d3332203d3e20323639343636.roa
Signing time:             Wed 13 May 2026 18:30:37 +0000
ROA not before:           Wed 13 May 2026 18:25:37 +0000
ROA not after:            Wed 12 May 2027 18:30:37 +0000
asID:                     269466
IP address blocks:        2804:6510::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/D75ABD4B44D8B16CC34566E12A7B68762DCDFA50.crl
                          rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/D75ABD4B44D8B16CC34566E12A7B68762DCDFA50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D75ABD4B44D8B16CC34566E12A7B68762DCDFA50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 09:34:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:9c:3d:87:21:d4:ff:94:ff:bb:e9:95:b2:b4:92:e7:ff:fb:06:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D75ABD4B44D8B16CC34566E12A7B68762DCDFA50
        Validity
            Not Before: May 13 18:25:37 2026 GMT
            Not After : May 12 18:30:37 2027 GMT
        Subject: CN=8B5972AA30C549129553DB880D7BCA1E6ABCB059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ea:85:c2:9c:6c:1f:a0:d3:48:25:e9:73:04:
                    3d:06:8f:51:97:da:ef:6e:3d:7b:14:25:b3:27:7e:
                    ea:a6:1f:d9:26:bc:51:c5:5f:ee:b1:31:44:e1:e8:
                    4f:32:0a:09:60:ad:bb:ba:47:c2:08:75:58:d7:30:
                    47:79:4e:db:19:51:e3:76:af:43:5d:b3:c4:3f:0a:
                    15:63:2c:47:7f:cf:2c:66:c0:85:a8:b9:0e:3e:31:
                    a4:01:e9:f6:5a:3e:f2:4a:4c:ac:27:00:4f:79:06:
                    1e:36:b8:b2:8e:9a:ec:28:f3:34:00:dc:2a:41:0a:
                    a3:13:03:55:35:68:9e:79:d7:30:d8:0c:60:f6:a0:
                    e2:45:d2:ab:a2:ea:4b:ca:43:7a:d7:82:bf:34:7f:
                    fc:6d:4b:4c:88:98:38:72:7b:49:03:c5:32:8f:62:
                    44:92:0b:d9:be:74:6f:64:4d:8e:e9:e4:2d:b7:93:
                    69:86:81:85:84:82:b7:45:2d:66:0e:7f:5a:8d:c2:
                    fd:9d:46:98:c0:51:ff:8a:c1:51:a1:2b:82:55:8f:
                    b5:77:d6:a5:24:81:c8:de:f9:85:5d:9b:54:97:49:
                    27:c9:4b:e9:98:a4:d4:f4:6c:3b:bb:bb:a3:cd:e9:
                    42:0f:ac:12:c4:9e:38:84:27:95:9c:b8:3e:90:4a:
                    a3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:59:72:AA:30:C5:49:12:95:53:DB:88:0D:7B:CA:1E:6A:BC:B0:59
            X509v3 Authority Key Identifier:
                keyid:D7:5A:BD:4B:44:D8:B1:6C:C3:45:66:E1:2A:7B:68:76:2D:CD:FA:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/D75ABD4B44D8B16CC34566E12A7B68762DCDFA50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D75ABD4B44D8B16CC34566E12A7B68762DCDFA50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/323830343a363531303a3a2f33322d3332203d3e20323639343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6510::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:aa:d9:43:29:e3:14:d0:bb:76:a5:4f:7b:7a:e7:81:ad:a6:
         6c:39:5c:53:49:a4:48:e6:6a:7b:27:0b:bf:1c:f7:a2:4d:e8:
         de:60:bf:7a:e4:06:5b:f5:3e:b9:16:dd:5f:5c:70:2f:54:0a:
         cb:a2:45:f9:c7:f6:ed:d9:4e:ee:17:b5:34:ca:8f:7e:f5:db:
         28:1a:b5:47:18:18:5f:84:12:69:fc:b0:94:89:b2:80:72:42:
         26:19:59:8f:cd:bc:d6:43:dd:6e:65:a7:01:f7:08:26:a8:93:
         1a:e9:fe:46:f6:e4:cc:0b:02:a8:2d:b6:0e:b0:f2:0e:7b:51:
         6e:4a:ad:b8:9b:ad:e6:a9:c5:dd:6b:7d:11:90:a5:de:4c:38:
         9a:b0:3e:7f:ee:a0:5f:72:b4:e1:a0:18:f4:51:d4:9b:18:fd:
         4e:49:9a:ff:14:26:7b:68:64:c6:ed:38:c6:ee:b1:a6:b4:62:
         38:66:d0:fe:36:6a:9d:ab:8e:f0:e0:6f:25:5d:d3:99:d5:cc:
         04:01:40:eb:d2:91:89:3b:d4:f2:54:76:45:39:17:44:07:42:
         29:9d:b1:80:38:57:d5:ba:4a:93:7f:58:59:ee:b5:98:e2:04:
         42:ab:33:70:44:74:a7:d4:16:e1:19:85:7b:f7:40:58:08:06:
         3a:83:3b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:06:36 2026 by rpki-client