Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5mMWRtbcopeV7gQvPL1MrcH4bgFX5aYbH1jYNkgycBB/0/323830343a38303a3a2f33322d313238203d3e203533303736.roa
File:                     323830343a38303a3a2f33322d313238203d3e203533303736.roa (raw, json)
Hash identifier:          Mn4ez28buJ/qs2/JB23CAjRj/LhOELeLcCE0Uq7U00E=
Subject key identifier:   14:BE:4F:09:30:97:ED:1E:20:A9:DF:48:79:49:4B:E7:B4:5C:D0:26
Certificate issuer:       /CN=4D1D2C516B1508D2BE2770DADF11C0A9F859E7BC
Certificate serial:       65930A9DFC546E6E6E910317CB6A1266784E646A
Authority key identifier: 4D:1D:2C:51:6B:15:08:D2:BE:27:70:DA:DF:11:C0:A9:F8:59:E7:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D1D2C516B1508D2BE2770DADF11C0A9F859E7BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5mMWRtbcopeV7gQvPL1MrcH4bgFX5aYbH1jYNkgycBB/0/323830343a38303a3a2f33322d313238203d3e203533303736.roa
Signing time:             Fri 26 Jun 2026 13:47:27 +0000
ROA not before:           Fri 26 Jun 2026 13:42:27 +0000
ROA not after:            Fri 25 Jun 2027 13:47:27 +0000
asID:                     53076
IP address blocks:        2804:80::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5mMWRtbcopeV7gQvPL1MrcH4bgFX5aYbH1jYNkgycBB/0/4D1D2C516B1508D2BE2770DADF11C0A9F859E7BC.crl
                          rsync://rpki-repo.registro.br/repo/D5mMWRtbcopeV7gQvPL1MrcH4bgFX5aYbH1jYNkgycBB/0/4D1D2C516B1508D2BE2770DADF11C0A9F859E7BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D1D2C516B1508D2BE2770DADF11C0A9F859E7BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 15:19:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:93:0a:9d:fc:54:6e:6e:6e:91:03:17:cb:6a:12:66:78:4e:64:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D1D2C516B1508D2BE2770DADF11C0A9F859E7BC
        Validity
            Not Before: Jun 26 13:42:27 2026 GMT
            Not After : Jun 25 13:47:27 2027 GMT
        Subject: CN=14BE4F093097ED1E20A9DF4879494BE7B45CD026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f0:33:bf:c9:e1:d7:6d:f4:ad:87:8c:e3:d3:
                    a1:44:77:ec:d6:7b:f0:fd:65:78:66:7f:92:3f:14:
                    f5:41:e8:f8:6e:50:aa:e8:58:5e:33:ae:43:cc:1e:
                    0a:f8:f8:5a:4e:22:ee:bf:63:39:a7:41:cd:8d:b8:
                    9b:72:da:88:26:f4:f0:d1:b3:6b:0f:bd:a6:28:20:
                    8c:c1:0d:49:9b:1d:2c:59:7a:4e:1b:3a:71:dd:dd:
                    59:c3:04:88:78:a5:91:e8:ba:78:2b:ae:48:1e:b6:
                    ac:3d:e1:58:95:6d:29:ef:15:39:70:dc:1a:06:8a:
                    60:25:ee:33:82:d0:f6:7f:a0:5a:2b:40:32:0e:49:
                    7e:fa:00:62:49:2e:ef:0d:40:18:38:f6:ed:60:e4:
                    01:7c:cf:32:6f:ce:89:96:66:8d:67:0b:2e:ed:54:
                    39:bd:ca:d2:4f:a9:41:2f:93:f3:63:b0:05:a5:3f:
                    08:07:1f:c4:3f:47:00:59:c7:8f:cf:21:bd:b4:ad:
                    57:3d:56:4f:49:b1:3b:87:02:72:9d:4a:a8:21:82:
                    c1:0b:80:6e:3c:52:e9:b3:16:91:e8:d2:26:63:5c:
                    57:26:04:51:07:6b:15:f3:e9:e8:15:e2:c7:90:b2:
                    7d:b7:7f:e3:7a:25:eb:8d:ff:df:25:bc:b6:5f:1c:
                    89:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BE:4F:09:30:97:ED:1E:20:A9:DF:48:79:49:4B:E7:B4:5C:D0:26
            X509v3 Authority Key Identifier:
                keyid:4D:1D:2C:51:6B:15:08:D2:BE:27:70:DA:DF:11:C0:A9:F8:59:E7:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5mMWRtbcopeV7gQvPL1MrcH4bgFX5aYbH1jYNkgycBB/0/4D1D2C516B1508D2BE2770DADF11C0A9F859E7BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D1D2C516B1508D2BE2770DADF11C0A9F859E7BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5mMWRtbcopeV7gQvPL1MrcH4bgFX5aYbH1jYNkgycBB/0/323830343a38303a3a2f33322d313238203d3e203533303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:80::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:22:12:bb:d7:04:48:da:ae:0d:99:5e:6d:6d:26:91:f7:52:
         3a:9a:40:20:1e:1e:58:7a:f4:26:1e:6e:4e:e5:8b:25:57:07:
         91:43:c7:06:b4:9c:e3:30:0c:92:45:25:43:b7:a6:22:2b:2f:
         71:f0:a0:c8:a5:32:af:6a:38:8d:13:85:b0:95:8d:65:a9:84:
         14:cc:62:12:f0:42:81:05:11:4c:05:e0:15:54:99:b9:e4:fa:
         74:f5:02:d8:eb:9d:52:8f:6a:c3:a2:eb:48:a1:aa:1f:2c:d8:
         6c:29:31:76:2d:72:a2:3d:13:a0:aa:0b:08:aa:f4:b4:f9:b2:
         3f:dd:82:39:2d:cc:5b:88:0c:bc:e4:06:a5:ed:d9:38:c1:62:
         a3:bd:e6:15:5b:3a:f1:ad:9b:7d:b1:b6:0c:29:46:97:08:f8:
         0d:4a:31:65:47:53:5e:d0:f6:9b:0c:52:96:c9:df:5c:d2:bc:
         d5:cb:ad:e1:00:f2:ed:ad:df:33:4e:2d:72:ea:72:d8:ef:1a:
         df:6a:eb:dc:d7:90:f5:9f:13:71:af:46:1b:21:43:2f:ff:93:
         87:a9:63:7a:10:68:85:1d:1d:a1:5f:69:e5:fe:05:3e:fe:a9:
         ee:05:9f:44:87:43:62:e4:1e:d6:d7:cc:e2:36:0b:7b:78:d3:
         c6:93:09:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:09:42 2026 by rpki-client