Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/323830343a386261633a3a2f33322d3332203d3e20323733373438.roa
File:                     323830343a386261633a3a2f33322d3332203d3e20323733373438.roa (raw, json)
Hash identifier:          4sfkmpoNXIfsRcu9uQaQBI/fnshUdUhXu+IHx+pJNlM=
Subject key identifier:   C8:25:32:CE:4A:BC:80:87:86:45:6A:C6:D4:85:EA:06:20:FA:D0:C9
Certificate issuer:       /CN=B7807858CA644EC2198B79802723612BE2410576
Certificate serial:       0E278DC5E2A3ADDC3E681BC763D9CCD81C47A556
Authority key identifier: B7:80:78:58:CA:64:4E:C2:19:8B:79:80:27:23:61:2B:E2:41:05:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7807858CA644EC2198B79802723612BE2410576.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/323830343a386261633a3a2f33322d3332203d3e20323733373438.roa
Signing time:             Wed 13 May 2026 18:34:02 +0000
ROA not before:           Wed 13 May 2026 18:29:02 +0000
ROA not after:            Wed 12 May 2027 18:34:02 +0000
asID:                     273748
IP address blocks:        2804:8bac::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/B7807858CA644EC2198B79802723612BE2410576.crl
                          rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/B7807858CA644EC2198B79802723612BE2410576.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7807858CA644EC2198B79802723612BE2410576.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 10:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:27:8d:c5:e2:a3:ad:dc:3e:68:1b:c7:63:d9:cc:d8:1c:47:a5:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7807858CA644EC2198B79802723612BE2410576
        Validity
            Not Before: May 13 18:29:02 2026 GMT
            Not After : May 12 18:34:02 2027 GMT
        Subject: CN=C82532CE4ABC808786456AC6D485EA0620FAD0C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2f:f4:c8:b1:41:6d:fa:9a:4f:f6:ca:27:14:
                    b9:a6:fb:1e:8d:f0:98:0e:2b:0c:21:f0:1a:3e:a0:
                    7f:4c:5f:5f:12:82:a1:4c:6f:f2:f6:d7:75:95:44:
                    59:74:00:2f:ae:96:51:f3:10:df:3e:ce:70:d6:83:
                    32:0f:de:8c:be:f5:6b:4d:31:f4:3b:87:15:6a:00:
                    4b:d9:c4:eb:fb:91:c7:cf:50:08:f7:68:90:ac:cf:
                    89:d6:38:5e:06:35:59:57:c4:1e:2b:1f:77:5f:cb:
                    df:69:61:8c:92:22:26:86:6b:4e:11:ad:c5:99:7f:
                    90:8a:36:78:11:b4:b5:23:ac:95:19:7c:56:e2:60:
                    91:9c:18:17:60:bc:40:10:06:58:d5:b3:4d:b7:e1:
                    c1:4a:11:bf:67:58:cc:24:b7:18:64:3c:b6:16:d0:
                    fe:52:fb:d3:eb:17:e6:fd:7b:af:13:a9:51:9e:c0:
                    12:dc:d0:de:fa:0f:a1:42:e9:6f:1f:6f:57:61:f1:
                    b0:3f:23:a3:e6:4e:75:e7:56:21:da:7f:39:ef:77:
                    7c:34:8d:ae:e7:a3:4c:16:5c:82:d1:75:e3:da:b2:
                    a6:93:c6:23:10:5d:67:de:b6:3c:31:b0:41:d8:d2:
                    c8:af:e5:7b:89:a6:a4:1c:24:94:6b:05:33:4d:78:
                    06:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:25:32:CE:4A:BC:80:87:86:45:6A:C6:D4:85:EA:06:20:FA:D0:C9
            X509v3 Authority Key Identifier:
                keyid:B7:80:78:58:CA:64:4E:C2:19:8B:79:80:27:23:61:2B:E2:41:05:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/B7807858CA644EC2198B79802723612BE2410576.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7807858CA644EC2198B79802723612BE2410576.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/323830343a386261633a3a2f33322d3332203d3e20323733373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8bac::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:77:7e:78:b3:74:c0:12:a9:24:48:47:7a:e7:0b:a1:ee:6f:
         29:0b:7e:06:3a:f3:ce:26:eb:cb:0d:75:6d:3e:51:10:c1:71:
         68:37:37:93:a3:91:48:27:54:29:d5:54:7b:d7:25:8e:2b:55:
         58:1f:c0:28:69:a7:9f:21:6d:a6:9b:ba:41:54:c6:53:87:07:
         fc:8f:a7:3f:63:c1:58:0f:33:72:73:b1:fd:be:0e:83:70:a5:
         5d:8b:aa:83:db:5a:31:e8:a1:29:5e:49:78:b4:aa:67:8a:f6:
         ae:f6:f8:15:64:1f:13:12:66:3b:76:36:6b:d1:3f:92:5f:13:
         44:36:cb:79:97:82:48:e4:09:9a:15:65:1c:e5:51:b1:11:fe:
         ce:36:ce:00:3d:ef:5d:5d:02:f8:b6:b3:63:80:92:67:b1:12:
         91:35:a5:13:e0:24:74:99:3a:45:3b:9e:58:c5:4a:aa:4e:19:
         5d:fd:35:14:a1:aa:58:59:37:99:74:01:91:d2:fc:cc:5b:81:
         43:60:6a:6e:31:61:05:1a:c0:b2:65:05:14:e4:de:55:8a:77:
         a9:b7:a8:d4:bd:e2:a0:25:b3:c4:85:bb:71:22:f4:9b:4a:8d:
         13:53:19:67:db:cc:d8:63:c3:08:bb:72:5a:bb:bf:34:e5:7f:
         12:46:32:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:06:50 2026 by rpki-client