Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/323830343a353365633a3a2f33342d3334203d3e20323638363136.roa
File:                     323830343a353365633a3a2f33342d3334203d3e20323638363136.roa (raw, json)
Hash identifier:          Dgz/7qHgdIYDDNTh1CIeotzEqKIC7QNRreCX4719ybE=
Subject key identifier:   5C:E2:59:9D:8C:61:79:62:B3:76:DF:A4:D1:35:22:27:4D:47:0C:6C
Certificate issuer:       /CN=7FB36BC72BD2ACF8CC6BD5B54BDF564E36834B9B
Certificate serial:       15818363E93809CE039B9600FD146C3C607537F8
Authority key identifier: 7F:B3:6B:C7:2B:D2:AC:F8:CC:6B:D5:B5:4B:DF:56:4E:36:83:4B:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FB36BC72BD2ACF8CC6BD5B54BDF564E36834B9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/323830343a353365633a3a2f33342d3334203d3e20323638363136.roa
Signing time:             Tue 07 Apr 2026 13:45:11 +0000
ROA not before:           Tue 07 Apr 2026 13:40:11 +0000
ROA not after:            Tue 06 Apr 2027 13:45:11 +0000
asID:                     268616
IP address blocks:        2804:53ec::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/7FB36BC72BD2ACF8CC6BD5B54BDF564E36834B9B.crl
                          rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/7FB36BC72BD2ACF8CC6BD5B54BDF564E36834B9B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FB36BC72BD2ACF8CC6BD5B54BDF564E36834B9B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 04:12:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:81:83:63:e9:38:09:ce:03:9b:96:00:fd:14:6c:3c:60:75:37:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FB36BC72BD2ACF8CC6BD5B54BDF564E36834B9B
        Validity
            Not Before: Apr  7 13:40:11 2026 GMT
            Not After : Apr  6 13:45:11 2027 GMT
        Subject: CN=5CE2599D8C617962B376DFA4D13522274D470C6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:91:19:f8:b4:52:8e:2f:cc:c4:9e:46:bd:2c:
                    f2:77:fa:0e:e8:92:64:28:1f:60:05:6b:58:80:9b:
                    e2:4c:fc:c1:d5:eb:64:21:b6:6c:5c:b7:94:51:3e:
                    48:d1:95:8e:5b:d5:f3:2f:54:c9:59:63:df:87:89:
                    27:2f:08:a1:4d:3d:23:d6:ee:2a:e3:52:7f:b3:9f:
                    7e:a8:81:35:d5:79:51:43:9b:11:97:59:69:e1:9e:
                    49:25:5e:88:e0:bb:d9:fe:07:95:fb:e0:5a:ed:2b:
                    61:ba:62:ad:49:58:9f:a6:73:2f:74:c2:88:1d:b5:
                    8c:c4:56:9f:4b:34:a4:a0:f5:c8:d3:16:46:36:55:
                    d8:c9:d5:59:5a:18:58:b9:99:95:b1:10:be:cd:c5:
                    2e:72:4f:90:4e:d1:ad:b0:d4:2b:1e:69:b8:e0:fc:
                    03:18:cf:80:d8:59:dc:08:35:e2:47:4e:72:29:7b:
                    34:af:2c:22:5b:c0:02:27:6b:05:1a:3f:e2:ed:c0:
                    09:9e:07:51:3f:d8:e3:db:fc:b6:24:ba:9f:71:cb:
                    7a:ad:71:cb:e9:5f:c6:b5:32:e7:3b:ea:47:24:da:
                    d1:cc:68:df:10:89:bb:45:b6:31:3b:36:ee:9a:a6:
                    93:bf:66:0a:c1:35:54:81:0c:21:5a:91:28:7a:83:
                    fa:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E2:59:9D:8C:61:79:62:B3:76:DF:A4:D1:35:22:27:4D:47:0C:6C
            X509v3 Authority Key Identifier:
                keyid:7F:B3:6B:C7:2B:D2:AC:F8:CC:6B:D5:B5:4B:DF:56:4E:36:83:4B:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/7FB36BC72BD2ACF8CC6BD5B54BDF564E36834B9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FB36BC72BD2ACF8CC6BD5B54BDF564E36834B9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/323830343a353365633a3a2f33342d3334203d3e20323638363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:53ec::/34

    Signature Algorithm: sha256WithRSAEncryption
         69:1e:f9:29:3c:31:39:08:7e:5e:77:ea:3b:fd:aa:f7:9c:d5:
         52:9c:d1:b0:39:d2:4b:71:e8:41:71:ef:2c:0c:00:aa:ab:2b:
         be:8e:73:28:7a:9b:d1:b5:c5:aa:9f:8c:45:3b:72:33:78:47:
         3a:2e:fa:fd:2f:b3:92:c3:07:29:30:d9:d8:62:b0:c5:62:2c:
         8e:0f:17:79:68:56:27:ca:fd:26:a2:8c:65:a2:f9:99:81:bf:
         fa:9c:36:9d:f8:b6:5d:42:f0:4e:c4:1b:11:7c:b0:60:a1:8f:
         0e:3a:41:27:37:fc:ab:bd:78:03:46:44:c8:8b:54:0c:0d:43:
         41:47:ce:bb:e4:25:30:67:a9:d5:3f:46:00:5f:ae:01:d4:0f:
         b2:7c:9c:27:63:2a:c9:2b:5d:f3:31:31:5b:ab:e2:f3:b1:11:
         15:57:68:90:d7:e4:fe:f4:d5:a9:ae:97:83:b9:f6:2e:3b:94:
         60:56:5e:1d:e8:40:a8:fc:3a:7a:af:f3:df:68:e2:28:82:8b:
         35:e6:13:39:32:ba:ae:ea:25:10:84:5d:ac:f6:45:1f:c9:48:
         b8:f5:3a:8e:0e:d4:35:22:8e:a2:ad:f9:79:47:b7:f0:32:57:
         ec:be:7a:f3:23:e2:4a:dd:d5:86:d1:d7:b0:ee:1d:d7:d0:5c:
         fe:cd:93:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 19:11:54 2026 by rpki-client