Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a363030303a3a2f33362d3336203d3e20323632373239.roa
File:                     323830343a313664383a363030303a3a2f33362d3336203d3e20323632373239.roa (raw, json)
Hash identifier:          JP4KHHvANKJ38NdaZaklMmQ9u+3tshuY3IFSYQgaWh8=
Subject key identifier:   77:50:AD:D0:0B:00:AE:86:FB:0E:2B:66:84:49:18:23:F3:E2:96:C1
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       13A4E20F3A081EE4ECCC75CA9F85C126BDB54C3D
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a363030303a3a2f33362d3336203d3e20323632373239.roa
Signing time:             Mon 18 May 2026 15:08:01 +0000
ROA not before:           Mon 18 May 2026 15:03:01 +0000
ROA not after:            Mon 17 May 2027 15:08:01 +0000
asID:                     262729
IP address blocks:        2804:16d8:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 15:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a4:e2:0f:3a:08:1e:e4:ec:cc:75:ca:9f:85:c1:26:bd:b5:4c:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: May 18 15:03:01 2026 GMT
            Not After : May 17 15:08:01 2027 GMT
        Subject: CN=7750ADD00B00AE86FB0E2B6684491823F3E296C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:95:c4:84:f0:d3:33:df:eb:4a:0d:09:94:12:
                    99:a3:49:13:cc:42:b6:7d:dc:25:63:61:7c:bb:6c:
                    c1:50:00:02:b5:c4:dc:45:0c:ef:74:58:07:f0:45:
                    d2:d0:31:9f:26:6e:8d:20:e3:46:25:5d:d6:d8:f2:
                    66:66:bc:5b:7b:07:33:dd:a9:4c:51:c3:48:95:94:
                    c0:c2:18:44:e4:3a:7b:9f:65:88:d9:3e:14:dd:85:
                    43:9f:d7:25:bf:80:6f:dc:f9:71:06:79:52:31:2b:
                    9f:e3:8c:38:a4:a6:47:57:23:24:d5:8f:c0:35:0e:
                    b6:b4:8d:96:8a:a1:12:f4:6c:6a:f6:99:0a:a0:99:
                    90:fc:41:5c:07:d1:cc:03:7e:3e:af:0d:e5:af:b2:
                    6e:93:3d:5e:51:58:3e:9f:fc:89:62:ec:66:d3:0e:
                    a5:8f:dc:20:e0:cc:e0:e2:de:0f:a5:f1:3f:d7:f9:
                    f9:fb:72:86:42:64:3c:f5:00:2d:75:9d:a0:8e:dc:
                    2a:88:ce:83:0e:dd:74:e3:e6:49:11:1f:29:47:ec:
                    2b:0f:ac:ec:1a:d3:ac:97:a5:07:b8:7a:71:d2:89:
                    af:7b:a7:50:30:f6:aa:07:67:c8:2c:f4:3b:6c:56:
                    e0:59:d6:23:ad:f7:32:fb:b1:b8:7a:6c:01:73:39:
                    06:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:50:AD:D0:0B:00:AE:86:FB:0E:2B:66:84:49:18:23:F3:E2:96:C1
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a363030303a3a2f33362d3336203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16d8:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2d:3a:a0:ce:33:ef:ab:61:f9:cb:70:ff:47:be:50:8d:91:73:
         5e:e4:00:81:1b:3d:ff:d5:e4:9f:7a:de:af:d5:94:18:e6:8c:
         92:06:6e:ff:02:6c:14:8b:25:34:44:06:f8:c9:d2:cd:26:6f:
         41:3d:e0:17:b8:43:f2:94:45:b8:4c:15:8c:85:57:fb:ba:30:
         91:08:18:6b:1e:6d:1b:98:cf:13:06:2b:cb:f5:cb:a9:5a:52:
         dd:23:66:48:20:9f:db:f4:26:2f:dc:9c:e9:d3:e0:a6:3c:00:
         78:fe:27:80:bc:8f:1f:50:1c:df:c4:9f:52:cb:31:95:90:37:
         99:7a:f3:f1:d0:ab:a4:a5:8b:b4:68:96:b7:0d:6a:13:b8:ff:
         20:07:67:9a:7d:8a:80:b8:42:30:fc:ea:b2:07:f9:b9:9d:f0:
         8d:be:0a:15:97:01:68:b0:58:05:02:07:3b:cc:32:4b:38:d0:
         55:69:30:49:2b:14:9a:2f:d3:53:98:8d:66:a5:73:db:27:c7:
         f3:19:d9:3b:37:dd:4f:5a:0d:1a:bb:83:b4:37:f6:53:dc:d4:
         89:76:8c:b9:6e:e1:ae:57:55:a4:70:2d:ed:11:5a:06:cf:de:
         8a:03:59:ae:22:26:e7:d4:18:67:e9:a1:9f:4c:7d:cd:74:64:
         ea:09:dc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 16:21:04 2026 by rpki-client