Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wC1ASBfZAWAgDnMZGRv6W1LeRUzUKE5bQv2Gt6UDd3U/0/323830343a316133633a3a2f33322d3332203d3e203631383437.roa
File:                     323830343a316133633a3a2f33322d3332203d3e203631383437.roa (raw, json)
Hash identifier:          3X/qBY/ji+MAhdIo7Lzv+irApKWY9eN/lzReoTbHY2g=
Subject key identifier:   CA:15:1F:D6:5E:80:8B:7F:A1:27:D4:C5:9F:91:EF:6A:6D:EF:50:99
Certificate issuer:       /CN=2B91EEC0C82A2FB8783AC47D324E70ACFEBD31B7
Certificate serial:       250D9FD53560136CC02AC3399702E1D3CD134877
Authority key identifier: 2B:91:EE:C0:C8:2A:2F:B8:78:3A:C4:7D:32:4E:70:AC:FE:BD:31:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B91EEC0C82A2FB8783AC47D324E70ACFEBD31B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wC1ASBfZAWAgDnMZGRv6W1LeRUzUKE5bQv2Gt6UDd3U/0/323830343a316133633a3a2f33322d3332203d3e203631383437.roa
Signing time:             Tue 23 Jun 2026 12:37:24 +0000
ROA not before:           Tue 23 Jun 2026 12:32:24 +0000
ROA not after:            Tue 22 Jun 2027 12:37:24 +0000
asID:                     61847
IP address blocks:        2804:1a3c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wC1ASBfZAWAgDnMZGRv6W1LeRUzUKE5bQv2Gt6UDd3U/0/2B91EEC0C82A2FB8783AC47D324E70ACFEBD31B7.crl
                          rsync://rpki-repo.registro.br/repo/5wC1ASBfZAWAgDnMZGRv6W1LeRUzUKE5bQv2Gt6UDd3U/0/2B91EEC0C82A2FB8783AC47D324E70ACFEBD31B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B91EEC0C82A2FB8783AC47D324E70ACFEBD31B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:54:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:0d:9f:d5:35:60:13:6c:c0:2a:c3:39:97:02:e1:d3:cd:13:48:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B91EEC0C82A2FB8783AC47D324E70ACFEBD31B7
        Validity
            Not Before: Jun 23 12:32:24 2026 GMT
            Not After : Jun 22 12:37:24 2027 GMT
        Subject: CN=CA151FD65E808B7FA127D4C59F91EF6A6DEF5099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f9:d5:05:ea:50:20:4e:d8:50:82:5a:9e:98:
                    d7:e1:02:56:74:a0:f0:a7:a6:c3:75:11:cb:aa:b4:
                    bc:e4:27:ae:37:df:60:c1:2d:12:fe:05:94:3d:a7:
                    7b:b9:89:b2:08:29:ae:1d:c0:bf:83:f6:8c:d5:5d:
                    cb:f0:be:c5:4d:1c:03:a5:b4:be:d1:a0:ad:af:6a:
                    b2:c8:f5:b2:55:40:36:e6:de:da:2a:86:5d:30:f6:
                    80:ba:2b:fb:e1:b1:62:aa:05:7a:52:bf:25:4c:9b:
                    be:70:9c:53:0f:2b:32:de:4a:5d:af:28:c4:96:0f:
                    b0:81:16:4c:d8:38:51:29:4c:b1:8d:af:43:8a:cb:
                    84:24:cc:c2:1a:30:86:65:11:6b:5b:ec:96:c2:40:
                    64:da:0b:7a:ca:89:ed:c3:76:a9:9f:94:9a:39:a2:
                    1d:a4:ea:75:6f:3c:68:68:3f:d8:9c:e3:1f:af:2e:
                    63:07:fb:30:08:bb:40:6f:f7:f6:24:be:eb:37:84:
                    df:43:63:72:6e:4c:b7:00:96:b4:60:17:da:e0:99:
                    2b:c6:19:9d:45:70:3c:69:29:bd:fa:da:ac:dc:99:
                    a2:cb:fd:80:b2:6a:6a:e1:47:87:c7:ec:f8:76:5a:
                    09:d7:cf:cf:b0:47:6d:48:5a:20:7b:d3:03:89:d1:
                    c2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:15:1F:D6:5E:80:8B:7F:A1:27:D4:C5:9F:91:EF:6A:6D:EF:50:99
            X509v3 Authority Key Identifier:
                keyid:2B:91:EE:C0:C8:2A:2F:B8:78:3A:C4:7D:32:4E:70:AC:FE:BD:31:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wC1ASBfZAWAgDnMZGRv6W1LeRUzUKE5bQv2Gt6UDd3U/0/2B91EEC0C82A2FB8783AC47D324E70ACFEBD31B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B91EEC0C82A2FB8783AC47D324E70ACFEBD31B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wC1ASBfZAWAgDnMZGRv6W1LeRUzUKE5bQv2Gt6UDd3U/0/323830343a316133633a3a2f33322d3332203d3e203631383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:42:18:4c:7b:61:a0:92:0a:21:56:9a:08:90:da:ec:63:04:
         fa:bc:d0:4e:6c:66:4f:da:5b:35:a9:81:b6:da:67:ed:95:be:
         ca:9d:7e:90:28:f1:53:98:7e:86:a4:3f:14:b7:84:a7:60:c4:
         f2:30:bb:af:11:d3:e9:4d:8d:57:8e:3b:d2:14:94:6e:0a:dc:
         17:fd:aa:c5:fa:59:f8:80:53:06:94:fc:9c:23:6e:97:d9:dc:
         9c:79:65:84:61:3a:1c:ff:24:73:eb:ad:28:a1:78:8d:b5:f9:
         8c:bd:8c:6e:eb:0b:22:5b:1a:ce:22:ed:bf:fd:14:a1:5d:4f:
         2d:13:11:f0:55:d7:4a:54:69:5d:f6:d5:89:1d:49:fb:a6:28:
         54:1d:24:56:37:e9:03:ac:e6:82:3b:d3:cd:8c:f8:96:9a:d8:
         37:e2:6c:e6:bc:19:da:78:c3:64:0c:33:43:79:b9:18:2e:49:
         7f:95:f1:13:a6:c6:54:a3:26:ad:ec:e9:d1:3d:97:d1:17:25:
         7c:70:ed:f5:30:d9:a1:5c:36:66:c9:0b:6b:56:32:f7:aa:89:
         2d:08:d7:3b:cc:3a:f6:2d:5a:7d:eb:40:8a:27:38:ef:cc:41:
         74:eb:e8:72:8a:ad:52:c9:00:cf:b6:f5:f8:03:a0:58:c1:5e:
         f8:79:8c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:04:15 2026 by rpki-client