Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/323030313a313264303a383037303a3a2f34382d3438203d3e203238353731.roa
File:                     323030313a313264303a383037303a3a2f34382d3438203d3e203238353731.roa (raw, json)
Hash identifier:          q1Yn/fe9Jn+00jdpywEHfk83F80GjTTA4Jf0ilKnE4A=
Subject key identifier:   1B:60:A1:59:50:D9:03:9F:29:7D:4B:BC:8F:86:8E:F8:A1:E2:2F:3F
Certificate issuer:       /CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
Certificate serial:       46A3B5867B98B33D8D442D707683B5407B6CD5C0
Authority key identifier: 2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/323030313a313264303a383037303a3a2f34382d3438203d3e203238353731.roa
Signing time:             Fri 15 May 2026 20:47:45 +0000
ROA not before:           Fri 15 May 2026 20:42:45 +0000
ROA not after:            Fri 14 May 2027 20:47:45 +0000
asID:                     28571
IP address blocks:        2001:12d0:8070::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl
                          rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 12:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a3:b5:86:7b:98:b3:3d:8d:44:2d:70:76:83:b5:40:7b:6c:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
        Validity
            Not Before: May 15 20:42:45 2026 GMT
            Not After : May 14 20:47:45 2027 GMT
        Subject: CN=1B60A15950D9039F297D4BBC8F868EF8A1E22F3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9d:dd:81:63:6a:ed:3c:30:84:09:d1:06:20:
                    61:34:b8:ae:3b:a1:b4:40:c8:f9:36:49:5b:8d:c9:
                    7b:d9:6d:3b:b1:52:83:15:a5:00:6c:d5:6d:ce:67:
                    4d:40:69:42:e9:b5:ac:97:ae:e5:a4:56:03:03:3b:
                    ef:62:67:b2:3b:aa:d2:94:68:ac:5c:d9:f8:6d:8a:
                    cf:95:6d:23:1b:eb:97:14:90:e8:25:d6:b8:67:82:
                    a7:80:2f:b3:3b:07:de:da:f9:4d:89:21:68:00:44:
                    c9:27:dc:a5:16:55:0b:b3:00:d6:4a:9f:0a:bd:3f:
                    a5:f1:cf:33:cb:41:43:fd:ad:8c:6d:9e:e3:35:b3:
                    6a:21:0e:b5:7f:7b:cd:a4:ba:be:cd:d9:00:8b:87:
                    b4:20:b6:82:ef:4f:6e:c7:b6:25:d2:eb:7c:2f:2d:
                    18:53:70:1d:8e:b2:49:85:8c:6c:9f:c5:35:05:78:
                    23:f5:66:ad:56:bc:76:28:96:76:ba:c6:83:0c:2b:
                    25:a1:20:46:b5:67:a2:38:35:eb:12:4f:ff:3e:e6:
                    46:a9:75:8a:cb:d9:06:f3:ca:2b:29:dc:65:81:5f:
                    d9:d2:62:7c:b1:08:f0:17:e3:b7:38:8f:88:4b:fe:
                    99:b6:2f:40:fc:6f:4e:71:46:77:e9:e9:d8:a3:05:
                    6e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:60:A1:59:50:D9:03:9F:29:7D:4B:BC:8F:86:8E:F8:A1:E2:2F:3F
            X509v3 Authority Key Identifier:
                keyid:2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/323030313a313264303a383037303a3a2f34382d3438203d3e203238353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12d0:8070::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:80:3a:04:fa:2e:cc:99:f8:bf:ed:c1:0a:e8:63:7a:67:a4:
         bb:f5:1e:8d:48:81:fd:3e:e6:e8:1f:56:30:79:ef:03:4f:f3:
         e4:97:3b:76:04:0a:f1:af:f7:0e:8b:eb:2b:5b:c4:b3:03:27:
         af:b2:2d:12:4e:d9:c0:5a:70:2f:f2:e3:93:d4:4f:b8:82:88:
         cd:f7:8b:74:22:c2:4c:db:b0:af:c2:34:88:4e:82:6e:65:b0:
         2e:e1:a3:ee:ab:1f:fd:a8:35:d9:9c:a2:4d:82:39:17:98:bd:
         86:58:94:89:c9:a2:e1:eb:32:75:41:a2:47:2d:1e:1c:65:63:
         13:92:1a:fa:11:92:61:a2:67:66:92:49:40:19:14:0c:47:a2:
         ca:7f:fd:8a:40:46:e9:81:15:93:a2:95:af:f7:89:97:ed:73:
         4d:68:e6:15:25:b9:89:d6:73:ea:c3:3a:bb:34:a6:67:75:12:
         58:fd:05:d0:a0:4f:7e:9d:ed:a9:45:e8:b6:62:c3:6d:54:35:
         a0:6a:98:7b:14:b7:15:05:d1:b5:de:24:99:98:a1:7f:ac:ac:
         b2:84:ce:eb:f5:1d:cd:04:a1:4a:ce:af:5c:e1:e2:90:cc:d3:
         2d:71:7c:f0:6a:ec:32:fe:74:91:6f:10:87:8e:cc:01:48:78:
         49:f1:f1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:43:41 2026 by rpki-client