Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bs3LgnRQqJK173SGNdiUaEDTGidTNnKZF7mmepRU1Y19/0/323830343a393837633a3a2f33322d3332203d3e20323735373136.roa
File:                     323830343a393837633a3a2f33322d3332203d3e20323735373136.roa (raw, json)
Hash identifier:          7EWeV7VX938gP6m0TxW1cXuo6id2Z5ShpfwSzh34m5U=
Subject key identifier:   44:30:10:A4:BC:FA:F9:77:E7:C0:87:92:BA:AC:8C:BA:AC:78:F5:CD
Certificate issuer:       /CN=A8C0032A48456EA32BC84892434BC8976341AAFB
Certificate serial:       5D7469C07F0A550B59E978525283CD19D9903B3D
Authority key identifier: A8:C0:03:2A:48:45:6E:A3:2B:C8:48:92:43:4B:C8:97:63:41:AA:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C0032A48456EA32BC84892434BC8976341AAFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bs3LgnRQqJK173SGNdiUaEDTGidTNnKZF7mmepRU1Y19/0/323830343a393837633a3a2f33322d3332203d3e20323735373136.roa
Signing time:             Wed 20 May 2026 00:54:42 +0000
ROA not before:           Wed 20 May 2026 00:49:42 +0000
ROA not after:            Wed 19 May 2027 00:54:42 +0000
asID:                     275716
IP address blocks:        2804:987c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bs3LgnRQqJK173SGNdiUaEDTGidTNnKZF7mmepRU1Y19/0/A8C0032A48456EA32BC84892434BC8976341AAFB.crl
                          rsync://rpki-repo.registro.br/repo/Bs3LgnRQqJK173SGNdiUaEDTGidTNnKZF7mmepRU1Y19/0/A8C0032A48456EA32BC84892434BC8976341AAFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C0032A48456EA32BC84892434BC8976341AAFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 02:38:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:74:69:c0:7f:0a:55:0b:59:e9:78:52:52:83:cd:19:d9:90:3b:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8C0032A48456EA32BC84892434BC8976341AAFB
        Validity
            Not Before: May 20 00:49:42 2026 GMT
            Not After : May 19 00:54:42 2027 GMT
        Subject: CN=443010A4BCFAF977E7C08792BAAC8CBAAC78F5CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:91:d5:46:4a:3a:47:93:1a:52:fe:7e:33:46:
                    75:58:a5:18:87:57:c5:9f:52:b5:67:b4:6b:e1:aa:
                    66:cb:c6:b5:cd:b3:1a:3e:90:5d:5f:14:19:e6:10:
                    db:16:15:cd:72:67:d6:18:ec:27:7e:7d:f6:2e:12:
                    a9:99:53:71:54:86:9e:08:36:3d:76:96:c8:8a:a5:
                    96:5c:2d:a5:f8:fe:f9:78:97:04:a7:41:19:ab:59:
                    ff:6a:2a:42:7b:b1:d8:34:13:2a:59:b1:d9:39:85:
                    8b:eb:8f:0d:95:ae:1b:bb:79:6e:d0:fb:62:40:ba:
                    ef:ab:fc:36:7b:0d:27:4d:bd:9b:9e:85:12:5c:82:
                    cd:8a:87:28:52:da:57:65:20:73:67:a0:b8:70:ab:
                    52:2f:4c:b5:68:e4:d6:17:ca:74:f1:14:fc:31:97:
                    25:f7:b7:79:da:77:72:38:82:b0:4e:77:5b:6a:84:
                    74:64:21:68:bf:8d:4f:e1:02:f4:20:e6:2d:1c:28:
                    f4:e6:7a:17:f7:9d:80:83:c5:37:a2:fc:24:e6:3d:
                    13:f5:92:f8:4c:a0:e1:fc:46:03:ba:cd:34:d0:60:
                    b3:9c:d2:61:2c:aa:0e:8a:94:64:f6:0b:91:28:48:
                    51:9b:82:b8:e9:44:7c:25:84:30:51:57:62:06:a1:
                    97:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:30:10:A4:BC:FA:F9:77:E7:C0:87:92:BA:AC:8C:BA:AC:78:F5:CD
            X509v3 Authority Key Identifier:
                keyid:A8:C0:03:2A:48:45:6E:A3:2B:C8:48:92:43:4B:C8:97:63:41:AA:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bs3LgnRQqJK173SGNdiUaEDTGidTNnKZF7mmepRU1Y19/0/A8C0032A48456EA32BC84892434BC8976341AAFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C0032A48456EA32BC84892434BC8976341AAFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bs3LgnRQqJK173SGNdiUaEDTGidTNnKZF7mmepRU1Y19/0/323830343a393837633a3a2f33322d3332203d3e20323735373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:987c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:55:78:19:f4:aa:f3:d5:5b:da:9c:06:99:e6:e1:c1:67:5e:
         17:17:f9:99:e7:2e:73:4a:41:bd:a1:6a:e2:dd:40:50:5d:51:
         ed:45:fb:df:20:bf:02:64:bc:1e:02:3f:13:5c:2b:2b:7a:c8:
         68:8b:e1:37:e3:95:fd:53:20:0b:53:5e:00:f8:cc:4b:36:ee:
         a2:8e:b3:19:95:b4:24:72:3e:d9:9f:73:5d:d4:a0:88:2a:45:
         83:06:d3:93:8f:fa:e3:5e:65:68:57:63:ec:d9:e0:2a:a3:74:
         fa:ff:89:7d:df:0c:a7:5f:57:74:bd:ca:05:7c:9e:cb:b8:57:
         0b:43:9d:b4:5e:59:74:47:24:c8:90:1a:44:a3:44:bc:2b:ae:
         06:f3:bb:89:b6:90:46:3d:27:ec:d2:d9:d2:e1:0c:98:97:92:
         33:b3:10:82:93:86:f3:75:29:90:82:b9:ac:18:ee:db:6c:f1:
         c1:f8:a8:e5:38:fb:22:f3:cd:bc:e6:bb:cb:c9:6f:3d:e0:5c:
         6a:73:02:db:b0:b9:7a:57:cd:54:16:f4:c2:47:ff:e1:b3:85:
         5a:00:e2:e1:e8:08:a6:a0:be:00:a3:16:7e:6a:02:23:f1:34:
         61:b2:45:8f:f4:59:fc:a4:14:43:59:b3:77:e0:b7:1b:5a:ea:
         65:2b:e6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 17:08:16 2026 by rpki-client