Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M5ngF25xJKxTSD3euoWogJD2YeBrpfXfyo54gNWFzkK/0/323830343a343966633a3a2f33322d313238203d3e20323637323132.roa
File:                     323830343a343966633a3a2f33322d313238203d3e20323637323132.roa (raw, json)
Hash identifier:          cOYXM9+DTwgNfpg317Q5s9ph2DsrP23n0ZxbdIrFhsA=
Subject key identifier:   11:A1:B8:A4:AB:0D:72:56:5C:43:48:84:7A:6B:D1:9B:15:72:5D:5D
Certificate issuer:       /CN=393022402359E408F7306B4E047CCAB6AFC0B4F3
Certificate serial:       5EE56D962F866C41135E1964330144570DC090BF
Authority key identifier: 39:30:22:40:23:59:E4:08:F7:30:6B:4E:04:7C:CA:B6:AF:C0:B4:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/393022402359E408F7306B4E047CCAB6AFC0B4F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M5ngF25xJKxTSD3euoWogJD2YeBrpfXfyo54gNWFzkK/0/323830343a343966633a3a2f33322d313238203d3e20323637323132.roa
Signing time:             Thu 25 Jun 2026 17:29:27 +0000
ROA not before:           Thu 25 Jun 2026 17:24:27 +0000
ROA not after:            Thu 24 Jun 2027 17:29:27 +0000
asID:                     267212
IP address blocks:        2804:49fc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M5ngF25xJKxTSD3euoWogJD2YeBrpfXfyo54gNWFzkK/0/393022402359E408F7306B4E047CCAB6AFC0B4F3.crl
                          rsync://rpki-repo.registro.br/repo/9M5ngF25xJKxTSD3euoWogJD2YeBrpfXfyo54gNWFzkK/0/393022402359E408F7306B4E047CCAB6AFC0B4F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/393022402359E408F7306B4E047CCAB6AFC0B4F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 11:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:e5:6d:96:2f:86:6c:41:13:5e:19:64:33:01:44:57:0d:c0:90:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=393022402359E408F7306B4E047CCAB6AFC0B4F3
        Validity
            Not Before: Jun 25 17:24:27 2026 GMT
            Not After : Jun 24 17:29:27 2027 GMT
        Subject: CN=11A1B8A4AB0D72565C4348847A6BD19B15725D5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6b:90:55:fb:54:66:26:47:f2:14:13:42:4c:
                    f7:18:13:cf:5d:84:39:50:82:14:63:33:5a:93:94:
                    2a:67:3d:78:0c:0c:32:34:89:0e:60:e6:69:4b:be:
                    01:53:a8:be:7d:b1:c8:75:aa:d9:ac:d4:ac:d1:3d:
                    05:23:ef:85:83:59:6d:9b:32:94:d8:ea:b4:c4:77:
                    58:29:93:95:63:e1:c4:46:4f:54:83:80:cc:c0:a5:
                    e7:cb:8d:1f:da:df:1f:b7:43:0d:34:ee:e0:93:c8:
                    10:78:80:8d:a6:2d:9c:ec:fa:b0:e8:09:59:e5:96:
                    cd:66:92:7a:6e:dd:ad:b9:ea:2b:4c:3b:f4:75:7b:
                    c3:14:de:56:f9:44:70:3c:25:e2:44:12:1a:16:c6:
                    27:92:50:1f:a0:3f:82:9b:f5:92:1c:c4:24:59:86:
                    8f:b7:c6:61:b1:70:b9:b7:20:f7:4b:b9:37:98:65:
                    7a:89:35:e0:78:5b:42:26:40:92:46:da:ec:f8:ba:
                    59:17:2d:f0:b3:d1:62:81:b1:ee:56:42:ba:19:5d:
                    31:11:ca:8a:52:dd:58:ab:6d:5a:9d:0e:5d:65:d3:
                    fd:18:4f:14:54:ac:05:73:59:85:b4:57:73:9d:c5:
                    ef:7f:81:bc:1a:48:4e:0b:46:11:87:22:b4:64:3c:
                    d3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A1:B8:A4:AB:0D:72:56:5C:43:48:84:7A:6B:D1:9B:15:72:5D:5D
            X509v3 Authority Key Identifier:
                keyid:39:30:22:40:23:59:E4:08:F7:30:6B:4E:04:7C:CA:B6:AF:C0:B4:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M5ngF25xJKxTSD3euoWogJD2YeBrpfXfyo54gNWFzkK/0/393022402359E408F7306B4E047CCAB6AFC0B4F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/393022402359E408F7306B4E047CCAB6AFC0B4F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M5ngF25xJKxTSD3euoWogJD2YeBrpfXfyo54gNWFzkK/0/323830343a343966633a3a2f33322d313238203d3e20323637323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:49fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:e1:76:9f:6e:a6:c5:0e:85:56:dc:ec:78:bf:41:c5:85:a2:
         b9:6b:7b:ae:e2:4c:ce:80:b4:ef:a1:de:88:c3:20:7a:85:12:
         8b:8a:2b:19:ef:d0:49:c5:5c:8a:db:7c:43:df:07:45:1f:53:
         19:ae:79:5c:a0:28:81:73:1b:d4:14:05:28:f6:b1:f8:47:62:
         32:c0:0e:8f:5c:8e:2a:86:e5:6a:4c:31:cd:0d:7c:c8:89:96:
         4f:33:a5:44:62:66:43:50:e5:c4:15:71:bd:e5:30:ff:22:d5:
         0e:84:57:2d:6d:e8:e5:34:4a:25:df:64:c8:7b:8e:b4:1e:19:
         9b:e2:10:62:42:dc:8d:90:1f:59:55:bb:11:be:38:79:01:47:
         7c:9f:06:de:8d:fd:a3:78:d0:31:97:12:8b:93:6e:64:38:da:
         ec:fb:74:90:7d:b9:b4:22:9c:25:c2:57:e9:51:70:ca:53:99:
         b8:07:1f:e0:22:cd:16:dc:99:d8:cb:30:01:f9:98:40:a2:49:
         95:10:84:39:50:2d:77:66:68:4c:3c:aa:24:cf:1b:a9:dc:8c:
         59:03:b9:ff:90:c1:ff:4e:ea:9f:1e:2c:93:6b:64:ec:02:ad:
         f0:1a:5b:34:63:ca:cd:88:fd:29:12:4b:06:45:2a:ba:82:ad:
         f5:7c:fb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:01:36 2026 by rpki-client