Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a3230303a3a2f33392d3339203d3e20323632373239.roa
File:                     323830343a313664383a3230303a3a2f33392d3339203d3e20323632373239.roa (raw, json)
Hash identifier:          tBkhMfbDwJXXXszdFK87v/VwU+NLSb5RuV7YGqatPx0=
Subject key identifier:   01:AC:C4:FF:55:2F:70:12:59:4C:A4:82:EB:45:DC:99:A1:7F:4C:4E
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       0A1DF24169CCF6454F8DECFB4E04CD2E6D72DCBA
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a3230303a3a2f33392d3339203d3e20323632373239.roa
Signing time:             Mon 18 May 2026 15:07:58 +0000
ROA not before:           Mon 18 May 2026 15:02:58 +0000
ROA not after:            Mon 17 May 2027 15:07:58 +0000
asID:                     262729
IP address blocks:        2804:16d8:200::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 15:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:1d:f2:41:69:cc:f6:45:4f:8d:ec:fb:4e:04:cd:2e:6d:72:dc:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: May 18 15:02:58 2026 GMT
            Not After : May 17 15:07:58 2027 GMT
        Subject: CN=01ACC4FF552F7012594CA482EB45DC99A17F4C4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f9:d4:ed:2e:f0:92:0d:30:21:be:a7:b1:0d:
                    e0:43:a0:11:e3:9e:12:f1:cf:59:ed:23:28:7b:45:
                    f4:d7:d7:47:17:75:47:10:34:68:06:d4:b6:7c:9d:
                    c7:e4:cb:1f:52:99:dd:c0:37:a5:97:2e:28:ec:e0:
                    97:58:60:e7:1d:4e:eb:86:36:66:87:cd:f2:e9:f3:
                    46:93:59:f8:39:d9:cf:a4:84:91:f0:ae:41:8a:f3:
                    95:cf:e4:df:44:02:43:e2:2d:77:f0:13:49:e5:48:
                    88:69:89:b7:fc:25:47:8a:ce:10:b9:29:69:c9:d2:
                    e3:0a:59:07:87:91:fa:61:87:32:43:f2:f7:c8:bc:
                    be:17:dd:2c:a4:53:be:6c:89:5e:20:21:3d:c6:f6:
                    b5:9c:81:d5:8b:90:36:82:5e:e2:d1:83:e9:8e:a2:
                    cb:43:4d:d3:36:60:3f:00:7b:4a:d0:a7:75:6e:e4:
                    d4:5f:28:f6:af:69:54:51:42:ef:d4:0a:ad:17:f6:
                    30:4c:5c:1c:71:cb:4b:27:10:b4:9f:06:da:9d:47:
                    8f:10:e8:9b:46:2f:53:cf:63:0d:df:e4:4b:0f:2b:
                    e3:dd:a5:6f:ed:fd:ce:b1:63:4a:bd:82:8a:a5:b9:
                    10:08:24:a3:ef:5a:fd:d6:18:f7:1b:83:53:e5:dd:
                    ba:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AC:C4:FF:55:2F:70:12:59:4C:A4:82:EB:45:DC:99:A1:7F:4C:4E
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a3230303a3a2f33392d3339203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16d8:200::/39

    Signature Algorithm: sha256WithRSAEncryption
         04:54:28:b5:cd:ac:8c:57:0e:70:29:69:13:41:79:f9:6c:8c:
         1a:4a:0c:28:d4:46:90:d7:da:e7:d5:2a:9e:11:77:3b:0c:17:
         8f:6b:a9:f3:1a:79:4f:f3:bb:bd:b1:04:55:ee:d6:35:04:e2:
         2e:78:37:4f:42:0b:56:c6:c4:a4:19:33:17:28:d1:a2:63:38:
         25:90:cb:b3:54:28:53:dd:2e:d9:38:21:81:0b:e9:41:d4:0c:
         4a:73:39:f7:06:d4:c7:57:eb:75:e4:1c:f8:f0:56:1c:31:be:
         21:c4:b6:23:24:b5:f9:91:3a:f3:69:49:5a:83:a9:0d:a1:c7:
         6c:07:35:6b:d8:42:e1:21:3d:d0:6f:2c:e8:a9:55:af:10:95:
         09:b6:b7:55:88:27:d1:2d:2a:0a:51:0d:1b:91:8a:3d:30:c9:
         6d:f3:8b:05:64:8c:80:03:00:ee:e6:5c:1b:e7:3c:ed:07:2c:
         b7:d2:35:76:d6:3c:d3:36:e3:4f:99:f8:95:cb:e0:1e:b4:32:
         9d:09:dd:91:1b:86:c8:92:6b:d6:e0:ed:2d:ab:0a:c3:44:31:
         37:69:69:90:cb:61:4b:9b:00:ff:af:b3:16:36:2b:0b:23:6d:
         36:5c:f0:fb:37:d9:18:0b:92:d9:3e:e0:cd:da:92:93:77:2f:
         1a:6d:eb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 16:21:02 2026 by rpki-client