Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/323830343a326537383a3a2f33322d3438203d3e203238323133.roa
File:                     323830343a326537383a3a2f33322d3438203d3e203238323133.roa (raw, json)
Hash identifier:          v+fIOuOrE8lzLNmWc6FnFuUH8UWH1GMDVAFnaOyd3/I=
Subject key identifier:   1F:3F:3D:E4:95:06:AC:8C:5E:C3:FC:5D:6D:A2:AC:07:2F:03:C5:B4
Certificate issuer:       /CN=5EF817C4D35ABBC698DD971253BD6455131E483B
Certificate serial:       05D74ED2395A4CC8C9DF870ACB8D7B3855D6F9A2
Authority key identifier: 5E:F8:17:C4:D3:5A:BB:C6:98:DD:97:12:53:BD:64:55:13:1E:48:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/323830343a326537383a3a2f33322d3438203d3e203238323133.roa
Signing time:             Thu 21 May 2026 13:57:02 +0000
ROA not before:           Thu 21 May 2026 13:52:02 +0000
ROA not after:            Thu 20 May 2027 13:57:02 +0000
asID:                     28213
IP address blocks:        2804:2e78::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.crl
                          rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 10:10:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:d7:4e:d2:39:5a:4c:c8:c9:df:87:0a:cb:8d:7b:38:55:d6:f9:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EF817C4D35ABBC698DD971253BD6455131E483B
        Validity
            Not Before: May 21 13:52:02 2026 GMT
            Not After : May 20 13:57:02 2027 GMT
        Subject: CN=1F3F3DE49506AC8C5EC3FC5D6DA2AC072F03C5B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:37:a1:8c:5a:b6:d9:d1:d0:a7:93:7b:a9:a9:
                    ca:e7:86:66:c3:fa:39:63:e0:c5:83:74:19:fc:0d:
                    84:47:e1:a5:b6:82:ce:45:60:45:9a:f3:43:e6:df:
                    60:11:e5:b7:d2:ed:7c:82:eb:00:c3:0f:ed:48:0c:
                    c7:70:f4:e9:52:7a:48:3e:0a:6f:35:cc:a8:37:48:
                    7f:43:bb:c6:c3:32:83:60:6b:45:36:d3:72:89:2e:
                    d7:15:1f:b7:bd:5f:8a:b1:8c:97:9a:ec:31:c2:49:
                    9e:70:a5:9a:f8:62:ef:ff:27:33:e2:c2:fc:40:28:
                    d5:f5:d1:66:1e:fd:87:46:40:81:7e:c8:e3:43:9a:
                    1b:ee:25:05:2a:3f:3e:04:5a:1f:d8:03:38:2d:9c:
                    53:58:51:2d:8f:8d:44:9f:f2:39:97:db:56:f9:3e:
                    91:da:7e:cc:ca:a8:8f:f6:19:f6:65:47:c8:56:c9:
                    c4:6c:7d:cb:94:bf:e7:1e:e3:cf:ac:1b:c7:3f:6d:
                    27:be:e1:64:e5:f3:2c:9c:a7:c7:a0:4a:ff:84:c5:
                    4c:18:e5:22:b0:88:fb:7c:95:c7:2f:4b:37:25:6a:
                    3b:de:98:74:f4:4b:a2:c5:16:06:b0:5b:a4:b5:b5:
                    5e:e1:d8:f8:be:79:60:80:86:46:9a:12:2a:aa:9c:
                    a4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3F:3D:E4:95:06:AC:8C:5E:C3:FC:5D:6D:A2:AC:07:2F:03:C5:B4
            X509v3 Authority Key Identifier:
                keyid:5E:F8:17:C4:D3:5A:BB:C6:98:DD:97:12:53:BD:64:55:13:1E:48:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/323830343a326537383a3a2f33322d3438203d3e203238323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e78::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:3a:f8:84:62:43:56:70:d4:32:f8:90:f6:3c:ed:8a:6f:1d:
         8e:53:86:bf:97:e1:0e:91:f0:6a:89:6c:24:57:4c:ae:48:b9:
         74:f9:31:71:fa:d7:f2:e6:6d:18:4f:f1:90:93:33:6b:d8:99:
         e4:08:37:04:cb:99:72:e7:cb:3f:2a:0b:63:ea:d3:ae:14:08:
         0a:2d:bd:d4:11:0d:d5:9e:d3:ad:f9:a5:7b:01:73:40:17:e8:
         30:17:7a:0d:eb:b5:cd:0b:22:8c:c3:ab:8e:66:68:e3:dc:4d:
         39:b3:0c:81:84:aa:ce:de:20:1d:37:c9:e9:da:1e:f1:e7:b0:
         77:a1:e5:a3:22:2a:d5:55:78:88:14:85:cf:37:8c:19:29:6c:
         00:dd:ca:bc:ff:6b:8a:ec:67:92:a0:1e:f6:aa:09:a8:a9:ba:
         57:2e:83:e4:10:8b:98:27:7c:95:20:d4:c6:64:f5:02:10:1f:
         3d:e5:18:11:1e:55:01:0a:24:01:70:6f:b9:62:25:54:15:c5:
         61:0b:57:26:3f:8c:b6:a7:1c:a9:3c:d0:10:67:f8:2d:b5:56:
         1d:61:d8:3a:5c:cb:97:cb:8c:bb:84:94:43:6b:1a:c7:d0:f1:
         78:ce:51:fc:f7:bb:74:c9:13:c4:f9:3e:a5:8b:da:32:e7:5d:
         64:64:3d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 13:43:03 2026 by rpki-client