Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a34303a3a2f34382d3438203d3e20323632373239.roa
File:                     323830343a313664383a34303a3a2f34382d3438203d3e20323632373239.roa (raw, json)
Hash identifier:          7DhDqIrmWXMIPLgrOGhZkhB8dwJGYIWE0XeYAPRkFTs=
Subject key identifier:   6D:27:89:23:74:4D:81:E3:B1:51:D3:30:97:40:C3:76:54:D1:32:8A
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       5576B6AEFE36F7173F5EF84CF604026B511ED83B
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a34303a3a2f34382d3438203d3e20323632373239.roa
Signing time:             Mon 18 May 2026 15:07:58 +0000
ROA not before:           Mon 18 May 2026 15:02:58 +0000
ROA not after:            Mon 17 May 2027 15:07:58 +0000
asID:                     262729
IP address blocks:        2804:16d8:40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 15:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:76:b6:ae:fe:36:f7:17:3f:5e:f8:4c:f6:04:02:6b:51:1e:d8:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: May 18 15:02:58 2026 GMT
            Not After : May 17 15:07:58 2027 GMT
        Subject: CN=6D278923744D81E3B151D3309740C37654D1328A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:43:69:86:54:2d:49:29:43:3b:fc:32:f0:a0:
                    05:67:8c:8b:11:e9:1d:45:79:d6:97:41:84:95:80:
                    4a:15:ee:9c:b6:ba:09:8b:a0:b1:fa:d0:7d:ae:44:
                    d4:f7:21:61:c0:00:91:83:a9:ed:d4:ed:67:e7:4d:
                    c8:94:6c:21:72:f7:a9:c7:e8:7a:18:d9:6f:3d:94:
                    2c:9d:12:80:2b:47:11:c0:6e:80:a4:55:4c:4f:69:
                    3d:ab:03:44:3b:66:11:81:4d:bc:c4:0e:d6:94:33:
                    ca:02:86:6a:10:77:99:b2:38:2c:4d:dc:b7:e3:76:
                    b8:c2:64:c9:8f:a3:21:dc:67:f0:26:ea:0f:bc:44:
                    b7:74:7c:90:3c:f4:0c:3a:20:37:37:00:2e:da:87:
                    56:b9:42:1e:c7:f1:a3:c0:41:9f:51:20:6d:cf:00:
                    d8:28:50:77:d0:b7:f4:85:47:82:5c:04:59:dc:4d:
                    c8:bd:59:37:60:fe:a3:22:a1:54:bc:10:0f:e5:10:
                    c2:77:9f:b2:f5:de:88:7d:64:f2:d1:4f:d1:da:7c:
                    00:c9:65:ec:cc:60:66:8e:17:ef:d2:10:7a:e7:c3:
                    56:a1:a6:a2:44:4d:6c:64:49:ac:80:dd:39:ff:45:
                    b1:07:c0:94:64:cf:bc:76:be:47:98:26:21:cd:cb:
                    7f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:27:89:23:74:4D:81:E3:B1:51:D3:30:97:40:C3:76:54:D1:32:8A
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a34303a3a2f34382d3438203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16d8:40::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:77:cb:ba:dc:a2:2c:31:47:d4:33:0b:14:10:12:77:a9:0f:
         32:a3:65:46:43:c9:4c:f4:c6:28:fb:4d:b4:7c:b6:15:12:58:
         ae:9d:6f:15:6b:6a:de:3e:06:28:ed:f0:69:59:8c:90:11:bd:
         82:2e:f8:1e:d0:1d:37:4b:a3:8f:55:b6:ac:16:26:38:16:a2:
         83:65:0d:7e:cc:08:0d:af:5d:78:01:a8:29:0e:79:dd:00:2a:
         fc:ce:99:d1:d1:03:6d:05:9b:fc:1f:a9:23:9c:d8:bc:50:53:
         b0:73:76:8b:1a:8a:f7:46:8f:67:7f:36:bb:ca:bc:f7:ff:9d:
         56:58:18:aa:d4:e6:9b:12:5f:b9:7c:5a:08:a8:89:de:49:c5:
         b6:d6:c2:ee:a5:d5:89:69:73:5f:d1:20:39:d7:7e:7f:73:be:
         84:5d:17:2b:02:3d:69:e8:a1:da:48:ed:65:0e:15:99:e2:2f:
         d2:23:7f:ff:28:c1:c8:fb:d7:df:86:5d:00:3c:6e:57:f7:97:
         74:91:31:3d:98:62:46:c5:05:85:b8:be:04:76:bd:b6:63:4a:
         40:ef:9e:1e:ba:b0:c9:8f:bd:98:20:ba:74:5c:7b:a8:8f:37:
         ff:b9:08:80:e7:c4:4f:fc:9d:77:9c:4a:50:2a:7e:bc:c1:fa:
         ab:0e:75:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 17:11:46 2026 by rpki-client