Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a343030303a3a2f33352d3335203d3e20323632373239.roa
File:                     323830343a313664383a343030303a3a2f33352d3335203d3e20323632373239.roa (raw, json)
Hash identifier:          Z4CpIGSdnOr6JjNfKpON5fAFu94B8t0wKP6qmJ4OGuQ=
Subject key identifier:   ED:FD:01:29:BB:65:37:D2:2D:88:04:68:EA:8D:F7:44:E9:5C:29:43
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       3568ECE63A4C179D6FEADBFCCF5A51EC2264EF7A
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a343030303a3a2f33352d3335203d3e20323632373239.roa
Signing time:             Mon 18 May 2026 15:07:59 +0000
ROA not before:           Mon 18 May 2026 15:02:59 +0000
ROA not after:            Mon 17 May 2027 15:07:59 +0000
asID:                     262729
IP address blocks:        2804:16d8:4000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 15:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:68:ec:e6:3a:4c:17:9d:6f:ea:db:fc:cf:5a:51:ec:22:64:ef:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: May 18 15:02:59 2026 GMT
            Not After : May 17 15:07:59 2027 GMT
        Subject: CN=EDFD0129BB6537D22D880468EA8DF744E95C2943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a3:3e:32:39:1e:bf:29:38:b2:ce:1e:6c:e0:
                    aa:91:50:3b:73:38:89:97:77:e8:6d:9c:d7:22:18:
                    c4:3a:69:d2:6e:a1:fa:d5:34:9d:0b:d2:7e:ed:f3:
                    15:64:9b:00:7e:2c:bc:78:c9:a0:b7:15:f6:75:e7:
                    9b:f3:01:77:82:13:97:1a:36:bd:97:8f:2f:f5:10:
                    38:3b:6a:78:0f:aa:b5:8d:e6:2d:ee:c4:ea:0d:78:
                    f1:bc:6b:66:43:9d:a9:b5:cd:fd:7e:29:ca:cd:55:
                    71:ae:6e:bc:0a:03:6a:c8:7e:27:ae:1f:75:45:d9:
                    cc:4f:7d:d5:a9:1f:1b:44:41:04:a6:f2:c8:9a:11:
                    2d:c8:9e:b2:69:a2:ce:0c:e6:88:03:78:90:f5:b4:
                    70:73:5d:d0:d5:ee:14:c1:0f:15:c1:d4:1c:5e:2f:
                    e5:d4:2e:31:13:31:fd:aa:7c:30:19:cd:50:62:db:
                    86:8a:61:ac:ea:e5:24:d4:8d:1e:22:0e:79:7c:b9:
                    62:5f:40:e6:1a:0e:3c:14:8a:4b:d4:ed:d1:d1:7f:
                    da:d0:23:11:8a:e2:ba:83:46:5a:d6:0e:e8:39:7f:
                    8d:5c:e0:15:45:11:aa:f1:95:e6:d4:35:bc:3f:3a:
                    b6:3b:de:2d:5c:8d:89:ac:87:d0:13:7e:2d:a9:8f:
                    5e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:FD:01:29:BB:65:37:D2:2D:88:04:68:EA:8D:F7:44:E9:5C:29:43
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a343030303a3a2f33352d3335203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16d8:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         8e:42:4c:73:51:ca:fe:43:81:ff:6e:0b:fe:ea:73:b8:14:13:
         1c:2e:1a:b2:91:1d:fe:a5:d8:c3:cf:1f:f4:e8:54:85:e4:d2:
         c4:e6:52:9e:89:14:b4:c8:e8:ec:21:05:56:54:f3:57:b8:ad:
         4e:d4:6a:ba:e4:e8:e3:ce:be:0b:2b:0e:56:26:aa:01:1b:a3:
         92:1c:e4:89:d2:59:28:34:25:85:2b:10:c1:5f:10:39:8c:42:
         3b:7a:25:72:01:3f:47:62:0a:bc:1e:23:d3:7b:d5:80:47:ba:
         1f:94:aa:11:91:2c:4b:68:dc:c0:7c:4e:19:9a:be:8b:cb:1d:
         ba:6b:9f:42:f1:2a:2c:ab:3e:87:bc:46:5d:e6:5d:58:39:ac:
         fe:79:d9:d6:94:f9:b7:f6:70:f6:64:ec:29:b6:45:e2:04:51:
         b9:45:33:e2:ab:8a:96:e6:84:0b:f2:44:a2:e7:a4:fb:21:32:
         ae:19:01:20:04:51:1d:f1:44:11:5b:84:97:ed:01:ee:a2:a4:
         37:06:df:16:76:23:4e:26:d5:9c:4b:d8:86:4f:6e:c9:18:f6:
         47:a6:f6:49:12:cd:1a:ee:a0:7a:d3:82:f1:d4:fa:98:c6:98:
         4c:b2:d1:5f:79:c8:1b:f3:75:e7:62:fc:e5:00:08:84:5a:c1:
         31:ae:f1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 17:11:07 2026 by rpki-client