Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a643030303a3a2f34332d3433203d3e20323633363431.roa
File:                     323830343a313039343a643030303a3a2f34332d3433203d3e20323633363431.roa (raw, json)
Hash identifier:          dOj9VH1UBvWzKMyX8kt3YbEl2mLlfWwaOZy1WuGneRc=
Subject key identifier:   1A:FD:44:7D:DA:3C:E4:92:7C:98:45:D9:DD:58:05:ED:21:BA:D9:35
Certificate issuer:       /CN=328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6
Certificate serial:       5D426F5FB81EDD5ECCB92F4500D894CA2A8F3186
Authority key identifier: 32:8E:78:0D:CF:E7:B9:F0:AB:5A:87:72:9D:44:CC:AD:3D:73:B3:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a643030303a3a2f34332d3433203d3e20323633363431.roa
Signing time:             Tue 19 May 2026 12:38:13 +0000
ROA not before:           Tue 19 May 2026 12:33:13 +0000
ROA not after:            Tue 18 May 2027 12:38:13 +0000
asID:                     263641
IP address blocks:        2804:1094:d000::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.crl
                          rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 May 2026 23:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:42:6f:5f:b8:1e:dd:5e:cc:b9:2f:45:00:d8:94:ca:2a:8f:31:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6
        Validity
            Not Before: May 19 12:33:13 2026 GMT
            Not After : May 18 12:38:13 2027 GMT
        Subject: CN=1AFD447DDA3CE4927C9845D9DD5805ED21BAD935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9e:e2:75:15:9f:4f:28:25:3d:2d:a8:2d:d6:
                    e1:e8:2c:f4:97:b8:e6:50:65:c1:ff:9c:5c:f7:56:
                    be:d1:d4:47:72:5a:29:43:ad:48:05:1f:8a:40:e1:
                    65:96:91:4e:1e:23:7e:e7:ae:f0:25:98:fe:cc:60:
                    d8:0e:de:19:01:d7:1d:22:bd:4f:86:49:32:88:6b:
                    af:9c:e1:cc:10:78:7a:07:bd:7f:8e:65:02:2b:87:
                    cd:c3:06:cf:a0:2b:7e:78:af:4b:aa:72:d8:cc:a7:
                    83:f0:2d:7c:ea:a1:50:d3:e2:18:e0:e2:74:7f:b4:
                    7b:67:35:63:11:49:83:78:73:60:1e:cd:20:df:ef:
                    bb:2c:ca:b6:84:1f:b3:71:c9:cb:10:f8:8e:18:a8:
                    f1:0a:2a:31:fb:37:82:ca:ef:02:8b:44:b4:2a:76:
                    a3:c4:4d:4a:ad:c9:d9:04:fb:cc:5c:dd:0e:76:2e:
                    98:8a:6b:9c:04:c5:72:b1:52:b8:d5:ad:f2:8a:e5:
                    99:47:73:fa:99:38:3a:20:c0:46:57:00:1d:52:91:
                    28:39:0f:c4:2b:1f:76:02:f8:ce:6b:ba:de:f6:a4:
                    6b:06:7c:5b:ea:ac:bf:77:64:7b:00:af:dd:54:c9:
                    ca:2f:60:01:92:50:1e:41:3c:bf:63:c3:35:52:ad:
                    26:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:FD:44:7D:DA:3C:E4:92:7C:98:45:D9:DD:58:05:ED:21:BA:D9:35
            X509v3 Authority Key Identifier:
                keyid:32:8E:78:0D:CF:E7:B9:F0:AB:5A:87:72:9D:44:CC:AD:3D:73:B3:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a643030303a3a2f34332d3433203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1094:d000::/43

    Signature Algorithm: sha256WithRSAEncryption
         28:5b:5b:4c:ee:a7:fc:cd:24:a8:f8:0b:0d:1c:97:0c:b1:c3:
         e1:97:ce:37:e9:75:75:cc:1c:32:46:11:3f:65:93:d4:11:b4:
         74:b6:c8:f5:7d:ce:f8:2c:3e:c2:76:08:a8:bd:04:43:52:b6:
         77:ae:82:7f:f1:ca:82:00:0f:64:8a:0c:cd:6e:8a:58:bf:ae:
         6d:9f:b4:3d:15:16:18:9f:b1:ea:36:63:4a:eb:af:f8:ce:62:
         bd:e2:ed:ef:68:73:36:39:8e:d5:b7:0a:68:28:71:ea:eb:71:
         02:dc:d1:c0:0e:e4:50:c8:d9:a2:4f:75:52:9a:f4:ce:36:03:
         b1:a4:e5:f3:54:95:59:8c:c8:1c:8c:e0:99:eb:8c:ba:ef:67:
         04:0b:58:a8:7f:bc:a4:1c:ab:63:7e:78:51:3c:b8:9b:58:29:
         01:63:28:ee:46:9a:33:70:f5:ed:45:59:20:74:de:c3:60:ba:
         c6:6a:b4:a7:09:9e:9e:5b:08:1c:5a:c8:da:ad:37:0e:14:a9:
         47:80:f9:69:10:1a:f7:22:0f:35:8b:54:b6:a6:5d:b3:4d:6c:
         30:ee:9a:6a:d0:88:bb:b1:35:ab:ad:e4:9a:39:8a:2e:ba:45:
         ad:06:d2:8e:8b:49:85:32:9c:d4:9f:fe:71:ef:13:1f:e9:4c:
         55:76:f0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:45:18 2026 by rpki-client