Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSBBkuDdvZ8xEUHcaa4bfR6SXqNSjxBRiNcZYsWQFHxy/0/323830343a353562633a3a2f33332d3333203d3e20323637393533.roa
File:                     323830343a353562633a3a2f33332d3333203d3e20323637393533.roa (raw, json)
Hash identifier:          jUV2cFSuj+gB4FWSTYiMuhY+R0O6qzJAsv5urbnG07A=
Subject key identifier:   FF:4C:55:7D:62:74:82:0D:6A:2E:7B:45:3C:D9:7B:ED:F1:9C:83:99
Certificate issuer:       /CN=8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0
Certificate serial:       2C28CAFA6BB8D4278E9723DDA3DB6F808BEA3A5E
Authority key identifier: 8C:3C:F4:8C:6E:F2:80:2E:55:ED:0B:0F:89:D3:CA:57:20:D7:2B:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSBBkuDdvZ8xEUHcaa4bfR6SXqNSjxBRiNcZYsWQFHxy/0/323830343a353562633a3a2f33332d3333203d3e20323637393533.roa
Signing time:             Wed 13 May 2026 14:25:17 +0000
ROA not before:           Wed 13 May 2026 14:20:17 +0000
ROA not after:            Wed 12 May 2027 14:25:17 +0000
asID:                     267953
IP address blocks:        2804:55bc::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSBBkuDdvZ8xEUHcaa4bfR6SXqNSjxBRiNcZYsWQFHxy/0/8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0.crl
                          rsync://rpki-repo.registro.br/repo/BSBBkuDdvZ8xEUHcaa4bfR6SXqNSjxBRiNcZYsWQFHxy/0/8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 09:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:28:ca:fa:6b:b8:d4:27:8e:97:23:dd:a3:db:6f:80:8b:ea:3a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0
        Validity
            Not Before: May 13 14:20:17 2026 GMT
            Not After : May 12 14:25:17 2027 GMT
        Subject: CN=FF4C557D6274820D6A2E7B453CD97BEDF19C8399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6a:61:d1:c6:53:a7:c2:73:ce:f1:72:7c:c5:
                    4d:ec:90:28:3a:b6:16:90:ef:92:73:9f:55:2d:0d:
                    b2:8e:92:a7:6f:ba:5c:cc:b8:18:a6:f8:24:ff:62:
                    a0:fa:af:7c:72:00:11:cb:06:6e:05:27:dd:89:8c:
                    02:8e:fe:66:00:80:12:10:7d:25:59:e3:3a:72:4d:
                    47:1a:0a:78:da:df:5b:6e:9e:57:dd:0c:69:e9:6e:
                    85:8e:9a:47:b3:8d:a4:e4:18:f6:b2:2c:14:b1:ac:
                    79:46:10:26:3b:96:39:02:99:fd:fd:1a:be:36:b2:
                    6c:6e:f1:9d:97:be:51:de:ee:36:3d:2d:5d:87:88:
                    f5:08:1a:ea:a7:d1:13:44:e1:a0:b0:56:bb:31:de:
                    e4:58:f5:aa:3a:3a:72:33:d4:2d:56:4d:f1:bb:e6:
                    96:b6:80:23:5a:29:49:b3:7e:99:bd:9c:23:4c:ad:
                    fd:a2:c6:86:eb:81:a9:d5:3f:95:95:12:74:bb:74:
                    e9:ad:24:de:47:42:dd:73:78:46:5c:25:49:22:0e:
                    87:d4:46:11:c9:01:06:01:87:52:65:0a:cd:38:77:
                    20:9c:cb:36:34:16:ce:9b:1c:a2:5c:3a:97:1f:f8:
                    2e:22:e7:e8:3d:2e:49:5b:98:8b:fa:7f:70:56:dc:
                    9e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:4C:55:7D:62:74:82:0D:6A:2E:7B:45:3C:D9:7B:ED:F1:9C:83:99
            X509v3 Authority Key Identifier:
                keyid:8C:3C:F4:8C:6E:F2:80:2E:55:ED:0B:0F:89:D3:CA:57:20:D7:2B:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSBBkuDdvZ8xEUHcaa4bfR6SXqNSjxBRiNcZYsWQFHxy/0/8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C3CF48C6EF2802E55ED0B0F89D3CA5720D72BE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSBBkuDdvZ8xEUHcaa4bfR6SXqNSjxBRiNcZYsWQFHxy/0/323830343a353562633a3a2f33332d3333203d3e20323637393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55bc::/33

    Signature Algorithm: sha256WithRSAEncryption
         9a:32:41:d0:81:4f:7b:0b:4b:f5:c6:14:ba:a0:e3:6f:66:1d:
         1c:de:83:b3:6b:32:0f:79:5f:0c:30:e8:10:1e:18:5f:11:9d:
         d1:e5:23:7b:37:b9:71:b2:b5:68:63:cf:e8:6a:e1:af:bc:f3:
         01:3b:b4:41:62:a6:1f:7b:5d:02:23:a3:1c:b0:df:c1:0f:0e:
         fc:cf:c1:fd:6d:ff:79:6c:71:fa:a4:c3:47:d4:c7:92:7c:aa:
         bf:9c:15:0d:24:4a:d7:be:b3:8b:e0:de:46:86:49:56:6b:7c:
         ab:9c:35:fe:a6:19:18:ff:7f:7a:a8:99:cd:76:e8:36:85:1e:
         e1:f3:4c:74:8c:49:94:05:45:dc:0e:25:80:a5:76:29:b0:4e:
         31:aa:c0:4d:a9:71:95:52:da:4e:8a:8a:49:46:50:3c:38:a6:
         ec:fb:5f:15:1c:ef:87:08:52:8b:d1:57:35:17:31:3e:69:2c:
         39:8c:65:84:2a:1f:97:de:23:ea:92:82:c0:98:ff:48:b5:1c:
         9a:58:51:ee:0e:16:4e:c9:7e:fc:1e:77:b3:40:0a:51:3b:ec:
         7a:be:02:96:b6:97:14:99:fe:34:e9:20:38:94:24:e8:b8:09:
         fd:bd:8a:13:6f:e7:a3:14:7b:5d:c3:26:3b:90:1f:91:54:77:
         b0:ed:b9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 19:27:41 2026 by rpki-client