Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a376234303a3a2f33322d3332203d3e20323633363431.roa
File:                     323830343a376234303a3a2f33322d3332203d3e20323633363431.roa (raw, json)
Hash identifier:          QTzPkVWbg0I/u0avgkr3HYXRIhUomQJlEwAj44YTXZw=
Subject key identifier:   FB:E9:63:5D:6C:6A:CB:87:56:2B:2B:E1:2E:DC:F8:49:33:39:6B:3C
Certificate issuer:       /CN=328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6
Certificate serial:       74C47B1C43DDC5D0A28505325756A32477532330
Authority key identifier: 32:8E:78:0D:CF:E7:B9:F0:AB:5A:87:72:9D:44:CC:AD:3D:73:B3:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a376234303a3a2f33322d3332203d3e20323633363431.roa
Signing time:             Tue 19 May 2026 12:38:11 +0000
ROA not before:           Tue 19 May 2026 12:33:11 +0000
ROA not after:            Tue 18 May 2027 12:38:11 +0000
asID:                     263641
IP address blocks:        2804:7b40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.crl
                          rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 May 2026 23:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c4:7b:1c:43:dd:c5:d0:a2:85:05:32:57:56:a3:24:77:53:23:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6
        Validity
            Not Before: May 19 12:33:11 2026 GMT
            Not After : May 18 12:38:11 2027 GMT
        Subject: CN=FBE9635D6C6ACB87562B2BE12EDCF84933396B3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ba:c1:1e:e5:75:ad:50:cc:7b:57:58:08:b2:
                    7d:9f:bb:43:7a:fb:54:4c:eb:b3:e3:9a:c9:f0:a3:
                    c0:b5:74:7e:e2:55:e6:86:85:d3:ed:44:e8:2d:c4:
                    cd:ac:8f:60:f2:87:61:bf:3b:67:46:b3:fd:3f:90:
                    f7:85:db:76:50:44:96:42:44:ef:cf:0b:a3:cc:7c:
                    ec:f1:ff:76:24:6f:c6:f1:f8:4c:fe:0f:fd:f2:3e:
                    e8:b6:13:c0:a6:46:34:4f:bc:87:d5:db:c2:b8:f6:
                    b1:13:40:16:7f:3c:a4:87:76:4a:78:d6:76:1e:ec:
                    9c:43:0f:49:a9:89:ce:56:ae:ad:97:3d:2e:a1:ff:
                    f9:55:87:8e:92:bc:12:9b:65:55:62:76:cd:2b:c9:
                    c0:8b:da:79:75:3e:dc:23:ef:81:eb:52:08:86:3e:
                    fe:3e:ea:ba:b3:9a:e5:4b:08:98:26:fd:79:ff:e1:
                    d4:b2:4e:de:61:f6:c5:db:e2:92:1f:21:59:10:f9:
                    c6:0c:ea:2d:10:b8:2f:74:94:70:7d:45:a8:11:b9:
                    8f:9d:0f:62:c4:0c:2a:65:41:b8:de:e7:72:36:4b:
                    0f:7b:88:28:6e:4c:ac:19:48:e9:38:f2:6c:41:27:
                    f5:8a:e3:a4:4d:43:22:3b:9d:a6:40:13:fb:e3:b7:
                    6f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E9:63:5D:6C:6A:CB:87:56:2B:2B:E1:2E:DC:F8:49:33:39:6B:3C
            X509v3 Authority Key Identifier:
                keyid:32:8E:78:0D:CF:E7:B9:F0:AB:5A:87:72:9D:44:CC:AD:3D:73:B3:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a376234303a3a2f33322d3332203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:bc:f0:9b:e9:2e:b8:ac:f9:97:cc:4e:56:11:65:05:60:8f:
         7a:17:4a:b9:30:08:ea:0f:70:1b:17:43:3f:f9:92:af:70:52:
         6d:4b:f1:6d:80:88:28:bf:11:2a:44:e1:c5:35:48:1b:13:81:
         b9:fd:b5:fb:4e:c8:a4:21:94:51:e6:28:62:19:87:26:b2:9d:
         be:51:93:e3:8c:a0:54:d4:8e:55:70:ee:cc:0c:0f:83:20:bb:
         07:a2:13:3e:30:4a:d0:3a:26:13:76:ee:77:ce:be:c2:8e:16:
         49:6b:03:f9:a4:44:6d:db:2c:2e:4f:03:7b:3f:42:4b:5e:90:
         3b:99:7d:5d:e8:7c:97:0d:23:c0:ab:b3:47:68:06:ba:36:3b:
         00:b1:b8:10:dc:72:9c:90:59:a9:a4:b1:dc:38:22:bd:a6:9c:
         c7:0b:45:d3:75:f2:b4:af:b5:1e:bb:f7:76:31:23:98:f6:28:
         57:d5:ae:25:b8:9d:eb:22:ee:f3:e1:95:9c:f8:0c:a1:02:3d:
         d5:9f:ab:64:6e:a9:9d:2f:ce:73:5d:05:29:c9:57:08:da:08:
         90:69:22:d8:c4:23:05:b4:b8:62:0a:59:ad:da:c5:24:54:fc:
         22:35:b3:4d:3e:ab:8c:15:11:ae:51:7c:4b:d3:04:03:5f:e0:
         98:1c:a2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:43:17 2026 by rpki-client