Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/323830343a356463633a3a2f33322d313238203d3e20323638393933.roa
File:                     323830343a356463633a3a2f33322d313238203d3e20323638393933.roa (raw, json)
Hash identifier:          haQltMO4H9kbEi8RmbzsLYjnilOhbaPtDjuwD6aa8ck=
Subject key identifier:   BB:C8:7A:3A:F8:AC:6B:46:01:B1:12:11:48:C4:3A:94:44:43:6D:8B
Certificate issuer:       /CN=B897955799C3900876018C7D382E9146BF5C8C61
Certificate serial:       5FAF9A065E92C4A5CE9B98829749F08427CFEDD2
Authority key identifier: B8:97:95:57:99:C3:90:08:76:01:8C:7D:38:2E:91:46:BF:5C:8C:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B897955799C3900876018C7D382E9146BF5C8C61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/323830343a356463633a3a2f33322d313238203d3e20323638393933.roa
Signing time:             Thu 02 Apr 2026 16:09:03 +0000
ROA not before:           Thu 02 Apr 2026 16:04:03 +0000
ROA not after:            Thu 01 Apr 2027 16:09:03 +0000
asID:                     268993
IP address blocks:        2804:5dcc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/B897955799C3900876018C7D382E9146BF5C8C61.crl
                          rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/B897955799C3900876018C7D382E9146BF5C8C61.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B897955799C3900876018C7D382E9146BF5C8C61.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 10:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:af:9a:06:5e:92:c4:a5:ce:9b:98:82:97:49:f0:84:27:cf:ed:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B897955799C3900876018C7D382E9146BF5C8C61
        Validity
            Not Before: Apr  2 16:04:03 2026 GMT
            Not After : Apr  1 16:09:03 2027 GMT
        Subject: CN=BBC87A3AF8AC6B4601B1121148C43A9444436D8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f9:36:bb:ed:e5:2a:ad:e6:58:f5:ee:00:b2:
                    af:b6:53:0e:bb:a5:84:0d:f5:84:ea:33:36:08:b7:
                    e9:db:e9:39:9a:2d:d7:2f:52:b0:4d:74:04:a8:84:
                    14:a4:d3:74:46:07:17:b9:96:a6:8b:19:74:7e:53:
                    29:36:06:13:d3:cd:b6:2e:37:58:64:f2:13:a2:82:
                    5e:5b:c1:ed:3b:c1:cd:6c:fa:31:65:c0:9f:51:9a:
                    5a:04:4e:1c:6e:02:b8:38:f7:87:03:30:5b:e4:b2:
                    28:0f:34:27:27:54:2d:36:20:79:91:1f:97:46:80:
                    de:85:88:19:0e:ce:f1:19:8f:9c:a6:1b:7e:47:36:
                    43:88:c3:45:40:04:7f:6c:7d:d0:6a:6f:8f:ff:03:
                    15:65:da:19:8c:31:39:2e:f4:52:6f:a5:26:c1:43:
                    7c:c1:5a:22:11:1b:ed:ab:07:e8:4b:df:5e:48:7c:
                    35:2d:c1:7e:ad:2a:07:2f:3a:17:ab:b4:eb:7c:f5:
                    a2:3c:23:61:14:95:c3:89:3d:83:a0:6e:7b:2b:ab:
                    6a:29:e6:02:54:99:82:25:2c:57:2c:71:67:4a:4b:
                    d4:27:8d:c5:22:58:fe:b4:a7:f2:bc:36:f5:0b:94:
                    da:dd:c0:8a:fa:c1:78:19:97:f9:97:5a:8b:8a:f0:
                    39:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C8:7A:3A:F8:AC:6B:46:01:B1:12:11:48:C4:3A:94:44:43:6D:8B
            X509v3 Authority Key Identifier:
                keyid:B8:97:95:57:99:C3:90:08:76:01:8C:7D:38:2E:91:46:BF:5C:8C:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/B897955799C3900876018C7D382E9146BF5C8C61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B897955799C3900876018C7D382E9146BF5C8C61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/323830343a356463633a3a2f33322d313238203d3e20323638393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5dcc::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:ae:ae:fd:17:32:26:be:43:b1:65:27:35:23:a5:a8:0a:12:
         f6:d4:72:25:03:79:a4:9d:97:b8:66:2d:85:ca:d5:1a:0e:e8:
         13:ba:50:43:7b:cd:d8:da:d2:df:d0:56:e0:f5:0f:7f:c0:29:
         7a:be:b0:14:f6:a5:c9:44:f5:76:d0:3b:2d:12:2e:97:22:4f:
         55:1e:73:67:46:dc:d4:1e:68:44:2c:4e:c2:66:93:cf:a9:a3:
         88:44:2f:39:ed:7c:13:70:87:01:c8:20:1c:91:5b:76:e4:5a:
         ab:c9:1e:e3:37:22:3c:4e:f1:99:1d:ca:d1:ff:fe:f4:14:c7:
         82:13:c4:e3:e8:b6:ee:35:d1:14:90:53:ee:ff:90:72:e4:6f:
         7f:5b:04:2e:51:4a:7c:02:bf:2e:35:2f:e8:6f:8e:7f:44:56:
         dd:9b:35:68:f4:18:35:d1:b9:27:7a:37:cd:37:3d:c7:26:1a:
         38:21:79:26:82:0d:01:11:c2:49:11:f6:33:a1:41:87:77:17:
         97:3e:ac:f0:45:33:5e:fc:61:34:9b:b1:7b:5b:06:6c:e6:09:
         ab:22:60:61:68:74:1b:0b:e5:3d:65:bb:d3:f6:0d:1c:c8:76:
         f3:c9:0c:6b:b3:43:55:fe:00:64:26:02:e1:93:b7:34:83:97:
         46:ff:4a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 18:56:38 2026 by rpki-client