Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9NyWVuepBGjGLGjNyNJxvpdM4PZSYMbhMKaDvp1ao2ys/2/323830343a323932383a3a2f33322d313238203d3e203532393531.roa
File:                     323830343a323932383a3a2f33322d313238203d3e203532393531.roa (raw, json)
Hash identifier:          48NKW0sIEBqyidgFBYm1vdGGPDJEo3n2oS+y0bLmMvo=
Subject key identifier:   5D:BC:E7:6E:D7:C2:95:E4:A0:62:ED:CC:81:A7:DB:37:23:44:5F:38
Certificate issuer:       /CN=7D0EBB635BC2E582302B265311409E72C12299BB
Certificate serial:       5E8297FF496FD91B3EAD57B1CD4127151D7DBBB3
Authority key identifier: 7D:0E:BB:63:5B:C2:E5:82:30:2B:26:53:11:40:9E:72:C1:22:99:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D0EBB635BC2E582302B265311409E72C12299BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NyWVuepBGjGLGjNyNJxvpdM4PZSYMbhMKaDvp1ao2ys/2/323830343a323932383a3a2f33322d313238203d3e203532393531.roa
Signing time:             Thu 25 Jun 2026 20:19:41 +0000
ROA not before:           Thu 25 Jun 2026 20:14:41 +0000
ROA not after:            Thu 24 Jun 2027 20:19:41 +0000
asID:                     52951
IP address blocks:        2804:2928::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9NyWVuepBGjGLGjNyNJxvpdM4PZSYMbhMKaDvp1ao2ys/2/7D0EBB635BC2E582302B265311409E72C12299BB.crl
                          rsync://rpki-repo.registro.br/repo/9NyWVuepBGjGLGjNyNJxvpdM4PZSYMbhMKaDvp1ao2ys/2/7D0EBB635BC2E582302B265311409E72C12299BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D0EBB635BC2E582302B265311409E72C12299BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 18:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:82:97:ff:49:6f:d9:1b:3e:ad:57:b1:cd:41:27:15:1d:7d:bb:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D0EBB635BC2E582302B265311409E72C12299BB
        Validity
            Not Before: Jun 25 20:14:41 2026 GMT
            Not After : Jun 24 20:19:41 2027 GMT
        Subject: CN=5DBCE76ED7C295E4A062EDCC81A7DB3723445F38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ae:82:4a:f3:4d:4a:48:a0:9f:99:52:70:fa:
                    92:31:2d:5c:59:23:4e:9f:41:c8:92:c5:22:48:47:
                    40:1e:93:4c:ee:88:54:ad:a1:60:11:60:4f:60:3f:
                    9a:d0:87:4f:f8:c1:b3:5d:83:0f:91:a4:4d:df:55:
                    f2:12:6f:bd:6a:e3:04:30:43:da:85:6a:4d:49:3f:
                    49:b0:8f:64:0a:2a:c4:f7:60:d0:7d:87:ae:ac:07:
                    a5:5b:7c:a2:6f:9b:f3:69:73:90:c0:b1:42:7b:a3:
                    db:cb:0a:5c:2c:15:b8:58:7a:6e:60:99:2b:f9:f7:
                    32:cb:22:4f:20:b5:f7:29:ef:26:ee:44:69:bd:00:
                    6b:f8:c5:25:0e:b2:37:7d:29:40:f8:6a:fb:83:6b:
                    42:ca:c2:02:d7:3a:53:ae:cf:9b:90:de:ce:bb:7a:
                    33:8d:dc:8c:8f:af:a4:e9:09:72:cf:78:ec:48:ae:
                    0c:8d:c5:f0:04:be:f0:0b:3e:64:90:b4:cd:49:20:
                    4e:51:34:5b:71:85:ac:c5:7d:94:ff:18:59:76:7e:
                    04:f9:0f:55:eb:b4:f4:86:9b:86:70:c7:84:37:b6:
                    9a:7b:15:cd:80:b5:66:7c:33:c3:cd:5f:7f:ec:23:
                    b9:d2:c6:00:eb:41:61:23:66:fa:16:6e:63:7c:e2:
                    bd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:BC:E7:6E:D7:C2:95:E4:A0:62:ED:CC:81:A7:DB:37:23:44:5F:38
            X509v3 Authority Key Identifier:
                keyid:7D:0E:BB:63:5B:C2:E5:82:30:2B:26:53:11:40:9E:72:C1:22:99:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NyWVuepBGjGLGjNyNJxvpdM4PZSYMbhMKaDvp1ao2ys/2/7D0EBB635BC2E582302B265311409E72C12299BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D0EBB635BC2E582302B265311409E72C12299BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NyWVuepBGjGLGjNyNJxvpdM4PZSYMbhMKaDvp1ao2ys/2/323830343a323932383a3a2f33322d313238203d3e203532393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2928::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:77:69:6a:a0:2a:59:c4:94:0c:0f:d1:e3:ed:ef:b9:a4:aa:
         c2:37:46:62:d0:fe:6f:17:32:50:46:03:06:e3:3e:dc:46:0b:
         e9:86:24:b9:0d:22:6e:f9:21:0b:02:8b:71:46:5d:19:25:4f:
         77:3f:de:78:21:b3:6d:59:50:87:cd:39:e6:a2:76:2a:a1:c1:
         0c:83:cf:ec:86:41:68:b6:4a:cf:11:76:17:56:0f:f0:20:a8:
         4b:20:36:3c:35:b5:53:f6:25:b5:01:03:91:df:1c:80:ce:5c:
         ad:39:81:bb:6c:22:a3:8b:98:44:e8:f2:f1:e2:1f:5f:fb:ed:
         c0:e5:1d:c2:68:ac:5e:50:fd:0b:3e:8c:5a:d3:80:d5:c7:12:
         70:52:2a:f1:6f:cc:85:9f:22:17:24:db:ca:f9:ba:2d:48:ea:
         42:f1:c1:63:77:51:b1:f4:bb:05:b8:b6:37:63:df:46:25:d8:
         1f:f2:1a:36:62:cc:c6:8d:15:71:d5:4e:42:13:99:08:5c:88:
         14:9d:0f:c0:30:84:07:6e:97:13:ee:c9:c0:97:fc:4a:55:c1:
         ec:f1:24:af:6c:9d:83:81:41:82:5c:84:04:ff:67:65:61:80:
         dd:ec:bb:d5:64:1f:75:5d:b3:59:1c:66:16:f1:f3:55:e8:36:
         4c:06:f1:84
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUXoKX/0lv2Rs+rVexzUEnFR19u7MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0QwRUJCNjM1QkMyRTU4MjMwMkIyNjUzMTE0MDlFNzJD
MTIyOTlCQjAeFw0yNjA2MjUyMDE0NDFaFw0yNzA2MjQyMDE5NDFaMDMxMTAvBgNV
BAMTKDVEQkNFNzZFRDdDMjk1RTRBMDYyRURDQzgxQTdEQjM3MjM0NDVGMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeroJK801KSKCfmVJw+pIxLVxZ
I06fQciSxSJIR0Aek0zuiFStoWARYE9gP5rQh0/4wbNdgw+RpE3fVfISb71q4wQw
Q9qFak1JP0mwj2QKKsT3YNB9h66sB6VbfKJvm/Npc5DAsUJ7o9vLClwsFbhYem5g
mSv59zLLIk8gtfcp7ybuRGm9AGv4xSUOsjd9KUD4avuDa0LKwgLXOlOuz5uQ3s67
ejON3IyPr6TpCXLPeOxIrgyNxfAEvvALPmSQtM1JIE5RNFtxhazFfZT/GFl2fgT5
D1XrtPSGm4Zwx4Q3tpp7Fc2AtWZ8M8PNX3/sI7nSxgDrQWEjZvoWbmN84r0BAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUXbznbtfCleSgYu3MgafbNyNEXzgwHwYDVR0j
BBgwFoAUfQ67Y1vC5YIwKyZTEUCecsEimbswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU55V1Z1ZXBCR2pHTEdqTnlOSnh2cGRNNFBaU1lNYmhNS2FEdnAxYW8y
eXMvMi83RDBFQkI2MzVCQzJFNTgyMzAyQjI2NTMxMTQwOUU3MkMxMjI5OUJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdEMEVCQjYzNUJDMkU1ODIz
MDJCMjY1MzExNDA5RTcyQzEyMjk5QkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlOeVdWdWVwQkdqR0xHak55Tkp4dnBkTTRQWlNZTWJoTUthRHZwMWFvMnlzLzIv
MzIzODMwMzQzYTMyMzkzMjM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzNTMy
MzkzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQpKDANBgkqhkiG9w0BAQsFAAOCAQEARndpaqAq
WcSUDA/R4+3vuaSqwjdGYtD+bxcyUEYDBuM+3EYL6YYkuQ0ibvkhCwKLcUZdGSVP
dz/eeCGzbVlQh8055qJ2KqHBDIPP7IZBaLZKzxF2F1YP8CCoSyA2PDW1U/YltQED
kd8cgM5crTmBu2wio4uYROjy8eIfX/vtwOUdwmisXlD9Cz6MWtOA1ccScFIq8W/M
hZ8iFyTbyvm6LUjqQvHBY3dRsfS7Bbi2N2PfRiXYH/IaNmLMxo0VcdVOQhOZCFyI
FJ0PwDCEB26XE+7JwJf8SlXB7PEkr2ydg4FBglyEBP9nZWGA3ey71WQfdV2zWRxm
FvHzVeg2TAbxhA==
-----END CERTIFICATE-----
Generated at Wed Jul 8 21:01:48 2026 by rpki-client