Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B2fqpM6nQ9bxr2KpkBb98Uxespv39ibXRws2KeT5iRHL/0/323830343a346663633a3a2f33322d313238203d3e20323638333530.roa
File:                     323830343a346663633a3a2f33322d313238203d3e20323638333530.roa (raw, json)
Hash identifier:          kxN3emtsfMpCDVu6Wh0q4mcOhoL4sAdgXrXa8NU8aQk=
Subject key identifier:   05:28:2C:A0:7C:4A:95:B4:3E:40:23:D4:BE:41:24:A9:D6:CA:35:7B
Certificate issuer:       /CN=19F5B0DBF925832EB1858B3219678550A06E48ED
Certificate serial:       321D62765AA5F4AD6091FCC6CDFADCF8AE49CB51
Authority key identifier: 19:F5:B0:DB:F9:25:83:2E:B1:85:8B:32:19:67:85:50:A0:6E:48:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19F5B0DBF925832EB1858B3219678550A06E48ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B2fqpM6nQ9bxr2KpkBb98Uxespv39ibXRws2KeT5iRHL/0/323830343a346663633a3a2f33322d313238203d3e20323638333530.roa
Signing time:             Wed 13 May 2026 19:24:49 +0000
ROA not before:           Wed 13 May 2026 19:19:49 +0000
ROA not after:            Wed 12 May 2027 19:24:49 +0000
asID:                     268350
IP address blocks:        2804:4fcc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B2fqpM6nQ9bxr2KpkBb98Uxespv39ibXRws2KeT5iRHL/0/19F5B0DBF925832EB1858B3219678550A06E48ED.crl
                          rsync://rpki-repo.registro.br/repo/B2fqpM6nQ9bxr2KpkBb98Uxespv39ibXRws2KeT5iRHL/0/19F5B0DBF925832EB1858B3219678550A06E48ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19F5B0DBF925832EB1858B3219678550A06E48ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 10:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:1d:62:76:5a:a5:f4:ad:60:91:fc:c6:cd:fa:dc:f8:ae:49:cb:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19F5B0DBF925832EB1858B3219678550A06E48ED
        Validity
            Not Before: May 13 19:19:49 2026 GMT
            Not After : May 12 19:24:49 2027 GMT
        Subject: CN=05282CA07C4A95B43E4023D4BE4124A9D6CA357B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:15:40:fe:4b:c1:66:19:6e:da:81:eb:d0:f0:
                    77:5f:e7:8b:35:f3:c4:c2:e8:70:01:96:8d:41:04:
                    24:72:fb:11:19:0a:87:da:bb:6c:a8:2c:3b:49:be:
                    b0:30:7d:76:8b:cc:60:c6:5d:6e:6c:22:75:23:14:
                    97:d7:36:7e:3a:bc:6b:c6:4b:da:2d:3f:3d:54:91:
                    a0:5b:df:a6:a1:d2:13:c0:d3:fd:58:97:8b:b3:af:
                    50:9d:1e:14:dc:c0:7c:34:23:dd:e5:ce:23:41:df:
                    17:4d:a2:c8:94:53:5c:c7:64:86:11:9a:3f:3c:c7:
                    a2:b9:06:12:02:80:00:c5:2c:7c:52:e5:49:3b:1b:
                    07:dd:a8:60:06:9e:cf:20:ca:8d:b5:2e:48:33:5f:
                    b5:aa:1e:81:b9:75:bc:a9:fb:e6:54:e5:e6:8d:78:
                    1d:ce:3c:c5:06:e5:82:a8:f9:5f:1c:b4:0e:4e:d0:
                    bf:19:27:c9:56:00:b4:bf:e2:27:23:b1:ca:db:0f:
                    df:59:26:1b:2d:93:d2:67:27:73:80:22:42:88:0e:
                    e4:ae:65:69:f1:44:b1:8a:6b:6e:1e:b2:41:7a:bc:
                    96:ec:aa:1b:96:9c:6a:5e:8e:1e:aa:e7:5d:96:9a:
                    e1:7c:11:79:74:67:65:da:fd:98:94:53:d0:f5:13:
                    c6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:28:2C:A0:7C:4A:95:B4:3E:40:23:D4:BE:41:24:A9:D6:CA:35:7B
            X509v3 Authority Key Identifier:
                keyid:19:F5:B0:DB:F9:25:83:2E:B1:85:8B:32:19:67:85:50:A0:6E:48:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B2fqpM6nQ9bxr2KpkBb98Uxespv39ibXRws2KeT5iRHL/0/19F5B0DBF925832EB1858B3219678550A06E48ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19F5B0DBF925832EB1858B3219678550A06E48ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B2fqpM6nQ9bxr2KpkBb98Uxespv39ibXRws2KeT5iRHL/0/323830343a346663633a3a2f33322d313238203d3e20323638333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fcc::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:ea:5b:06:5b:e1:6f:85:8f:b0:65:d2:e6:92:ea:39:a9:7e:
         40:bc:37:79:48:a3:69:9b:27:2e:72:26:4e:97:9f:f4:24:6a:
         bf:d9:4b:78:d3:a6:ab:03:e3:18:69:78:9f:06:61:18:2c:31:
         81:80:bc:d5:f6:55:97:f3:40:37:14:b0:69:fa:41:e3:07:93:
         5b:7b:b0:6b:7d:ba:84:b8:14:72:d2:56:34:06:5d:af:6f:a1:
         49:97:71:18:03:1e:4c:d2:b1:95:a3:43:97:52:a0:67:e8:90:
         50:74:9c:f8:8f:1d:0b:5a:8b:9c:a7:3f:cb:36:4f:1b:ee:44:
         cc:d3:63:74:86:f5:4d:26:65:c9:e4:c3:e8:cf:da:6b:58:d7:
         07:4d:b9:39:6b:b0:32:1b:b8:ff:31:07:68:0b:54:f1:17:e7:
         7a:ad:c0:dc:e8:5d:43:59:65:70:71:09:27:24:27:17:9f:89:
         40:1c:7d:d2:af:30:4e:e0:6f:40:f5:46:75:26:62:7d:36:5e:
         9a:09:c1:a7:55:7e:49:06:b5:30:b0:f7:45:35:ea:b1:02:7f:
         93:3f:52:fb:27:76:20:c2:46:c8:96:84:73:37:b6:98:e3:56:
         84:0e:a7:23:c5:c3:ed:bf:c3:a4:ed:fa:08:6e:17:a0:a9:86:
         0d:6a:2d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 17:10:56 2026 by rpki-client