Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/0/323830343a6437633a3a2f33322d3438203d3e203532363334.roa
File:                     323830343a6437633a3a2f33322d3438203d3e203532363334.roa (raw, json)
Hash identifier:          eD/T/auEzKmyxRNxsqz0kUSJRHopCeIEcKXV+JESVLI=
Subject key identifier:   9F:9B:FF:04:05:4A:99:73:4B:8F:62:5F:0A:00:F7:6E:77:22:07:85
Certificate issuer:       /CN=5E91E11189E6F4066547028D616D9746AB5AB4FB
Certificate serial:       79B514E6C27E683D5FD9B9D025BD1EFEC98F58E1
Authority key identifier: 5E:91:E1:11:89:E6:F4:06:65:47:02:8D:61:6D:97:46:AB:5A:B4:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E91E11189E6F4066547028D616D9746AB5AB4FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/0/323830343a6437633a3a2f33322d3438203d3e203532363334.roa
Signing time:             Tue 11 Aug 2026 19:51:40 +0000
ROA not before:           Tue 11 Aug 2026 19:46:40 +0000
ROA not after:            Tue 10 Aug 2027 19:51:40 +0000
asID:                     52634
IP address blocks:        2804:d7c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/0/5E91E11189E6F4066547028D616D9746AB5AB4FB.crl
                          rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/0/5E91E11189E6F4066547028D616D9746AB5AB4FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E91E11189E6F4066547028D616D9746AB5AB4FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 03:47:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b5:14:e6:c2:7e:68:3d:5f:d9:b9:d0:25:bd:1e:fe:c9:8f:58:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E91E11189E6F4066547028D616D9746AB5AB4FB
        Validity
            Not Before: Aug 11 19:46:40 2026 GMT
            Not After : Aug 10 19:51:40 2027 GMT
        Subject: CN=9F9BFF04054A99734B8F625F0A00F76E77220785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:28:fa:45:a1:cd:90:fc:47:5b:a7:32:6d:dd:
                    05:27:18:2c:0d:fc:bb:1d:7b:3b:5c:95:16:f8:a5:
                    14:ef:88:cf:a9:43:42:0f:5d:fe:09:88:bc:2a:b4:
                    7b:bc:47:5d:2d:b6:d4:cc:0e:0c:c6:a9:6e:52:72:
                    fb:dc:0d:d2:7c:29:a4:a8:3b:3c:23:6b:b7:8b:fa:
                    69:f8:37:0d:d8:57:2d:e9:6b:9a:ed:95:02:38:61:
                    1e:01:b4:d2:3a:45:d8:e5:20:5b:14:1a:8a:be:fb:
                    2c:ef:c5:8d:87:f9:5f:83:5e:0b:58:f9:22:6a:e6:
                    f4:1a:53:d6:69:3d:78:b5:bf:b9:17:11:31:7a:3a:
                    72:86:a2:06:9d:34:a4:1b:38:08:af:3a:44:08:c8:
                    77:04:57:f7:fb:c0:6c:6b:0a:8d:97:0d:38:f7:6e:
                    84:ca:99:8e:63:d4:30:21:07:12:45:a6:3e:7a:52:
                    84:b6:ac:a4:b3:2e:80:4f:4b:3b:78:47:60:d8:48:
                    9c:4a:62:28:48:ff:d8:bb:0d:ab:0d:3e:4b:18:cc:
                    1b:f1:4e:78:9b:a8:9b:cc:96:9d:2a:27:42:9d:03:
                    97:94:2b:eb:ec:b3:d8:7f:5c:e1:58:2e:4f:94:a7:
                    94:7e:11:7d:e6:e8:b4:6f:87:60:66:8b:a0:9a:d4:
                    b2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:9B:FF:04:05:4A:99:73:4B:8F:62:5F:0A:00:F7:6E:77:22:07:85
            X509v3 Authority Key Identifier:
                keyid:5E:91:E1:11:89:E6:F4:06:65:47:02:8D:61:6D:97:46:AB:5A:B4:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/0/5E91E11189E6F4066547028D616D9746AB5AB4FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E91E11189E6F4066547028D616D9746AB5AB4FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/0/323830343a6437633a3a2f33322d3438203d3e203532363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:60:42:7f:fe:8a:bd:c6:e9:25:25:0a:9c:df:cb:9d:3c:54:
         e1:5e:eb:11:da:bd:85:39:2d:02:3e:9e:cc:58:1e:84:5e:1b:
         59:dc:3f:74:9c:9f:99:02:af:96:f4:d7:f1:80:d4:10:07:e2:
         64:4f:44:a8:a1:c3:46:26:11:1b:aa:4a:da:0e:1a:94:f9:3a:
         de:b1:20:fa:64:68:15:55:42:45:85:fe:f2:af:6f:8e:c9:de:
         93:38:12:33:c4:8b:87:3b:d4:ea:07:60:64:c6:80:56:b4:fd:
         2c:1a:0f:a2:07:3c:ef:dd:cb:5a:37:3c:7e:db:25:a6:80:69:
         7a:4b:a7:4b:35:b0:2b:8d:e8:27:ec:ed:f4:c0:3f:1d:3c:e0:
         e6:32:c4:31:5d:17:dc:92:57:29:54:b9:e3:94:fc:36:37:12:
         7f:87:9f:68:04:9f:0b:08:18:b8:c3:8a:d8:e1:2b:53:02:ff:
         81:81:2b:1e:ed:71:0f:4e:01:05:32:a4:3d:20:7f:d2:9f:de:
         ff:bc:60:91:68:1f:fc:37:34:45:11:10:a4:50:de:bb:ac:86:
         9e:29:56:61:09:35:30:83:12:6b:32:6a:85:78:f1:ca:6b:57:
         49:ca:89:8f:e9:d3:5c:2e:cb:b6:0c:90:5c:e9:77:ce:d2:6d:
         4c:9f:a8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 11:23:26 2026 by rpki-client