Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a3a2f33322d3332203d3e20323634353935.roa
File:                     323830343a323232383a3a2f33322d3332203d3e20323634353935.roa (raw, json)
Hash identifier:          LJ8XO6g0Gk5LpiaBAbBEaoyhfx2+TOlaGSxT5Tz8n38=
Subject key identifier:   D3:88:79:CD:FC:2D:38:53:A9:18:2E:54:95:F0:EE:E6:D9:3A:76:61
Certificate issuer:       /CN=70D8687B5AE705FBBBF1A216424FA994C09423E7
Certificate serial:       03BEE303910E6A3F52CFD3F342A20B37A9AB5882
Authority key identifier: 70:D8:68:7B:5A:E7:05:FB:BB:F1:A2:16:42:4F:A9:94:C0:94:23:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70D8687B5AE705FBBBF1A216424FA994C09423E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a3a2f33322d3332203d3e20323634353935.roa
Signing time:             Thu 14 May 2026 22:50:12 +0000
ROA not before:           Thu 14 May 2026 22:45:12 +0000
ROA not after:            Thu 13 May 2027 22:50:12 +0000
asID:                     264595
IP address blocks:        2804:2228::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/70D8687B5AE705FBBBF1A216424FA994C09423E7.crl
                          rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/70D8687B5AE705FBBBF1A216424FA994C09423E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70D8687B5AE705FBBBF1A216424FA994C09423E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 07:33:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:be:e3:03:91:0e:6a:3f:52:cf:d3:f3:42:a2:0b:37:a9:ab:58:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70D8687B5AE705FBBBF1A216424FA994C09423E7
        Validity
            Not Before: May 14 22:45:12 2026 GMT
            Not After : May 13 22:50:12 2027 GMT
        Subject: CN=D38879CDFC2D3853A9182E5495F0EEE6D93A7661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f6:a1:ae:ba:0f:64:ba:d1:b8:4c:98:16:ee:
                    0a:0c:2d:9f:35:29:2f:87:cb:81:f6:4d:97:c8:5a:
                    c7:02:6d:84:2b:b0:63:a0:df:bc:c9:71:c5:b6:d2:
                    c7:8a:65:f8:bd:1c:ff:7a:89:2a:8a:5c:03:e2:16:
                    11:e0:62:a3:7a:03:db:f0:82:a5:1f:bf:0a:9e:22:
                    d0:8f:68:4f:96:41:8f:1d:0e:ea:e9:5c:db:cd:5f:
                    29:84:a8:17:fd:51:6c:5f:d5:a7:a5:46:6b:38:c7:
                    c8:7e:a8:15:72:d6:ea:fc:09:b9:f9:4b:ff:60:77:
                    53:d2:de:86:62:98:4e:0a:94:40:15:a8:48:96:c4:
                    35:79:b4:f5:be:23:f0:ae:00:cb:cb:0d:73:20:12:
                    77:dd:42:c5:f4:44:6b:74:e9:64:11:ff:ae:ef:9b:
                    76:62:c5:e0:b7:23:86:de:cc:22:82:2b:61:6f:74:
                    cf:65:86:b7:35:7e:e3:30:4f:7e:9f:bd:7c:b4:e8:
                    01:cd:56:ab:cb:8a:76:ea:39:97:73:7b:61:6e:60:
                    70:b9:1a:8b:08:84:ab:eb:cd:c4:40:11:10:0e:c5:
                    f3:40:f6:81:a8:88:81:a1:dd:2b:b1:cb:16:7c:73:
                    b7:18:e1:34:a4:07:49:c2:74:31:1a:2e:bd:80:db:
                    db:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:88:79:CD:FC:2D:38:53:A9:18:2E:54:95:F0:EE:E6:D9:3A:76:61
            X509v3 Authority Key Identifier:
                keyid:70:D8:68:7B:5A:E7:05:FB:BB:F1:A2:16:42:4F:A9:94:C0:94:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/70D8687B5AE705FBBBF1A216424FA994C09423E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70D8687B5AE705FBBBF1A216424FA994C09423E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a3a2f33322d3332203d3e20323634353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2228::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:d2:60:44:a0:d2:28:5c:80:df:da:d2:0d:45:f1:ea:14:82:
         78:b8:8c:6d:0e:c7:22:5d:e5:66:d4:c0:ac:4b:6d:60:be:70:
         ab:a2:38:7a:ea:35:c9:2b:1d:19:78:68:e4:37:84:bb:d7:a2:
         b2:31:37:85:fd:18:79:05:3b:b9:c9:3e:d5:d3:80:4d:f3:49:
         7b:7a:93:c0:e2:fa:ef:1b:b7:7c:43:f5:12:f2:20:dc:b0:d6:
         55:0d:7f:48:ae:4a:fe:ac:c9:3c:6b:84:da:79:25:e1:d0:30:
         0b:13:fa:33:e3:3c:6e:b3:8d:c8:a9:56:1d:84:b1:d2:6f:9c:
         b0:e7:1f:3e:bb:42:a5:b6:b9:ce:d4:20:9c:a4:50:0f:b4:a5:
         5a:36:d2:9d:c1:1a:7c:92:9a:35:2b:39:8f:bc:6f:96:8a:d6:
         31:cf:dc:1b:f5:c0:d4:46:79:9b:5e:6f:7c:b4:b9:8f:8e:0e:
         65:a0:2d:28:c0:2a:16:e5:9d:91:a8:23:98:a9:ed:57:8a:cb:
         97:be:9f:ba:fb:4d:7a:49:5a:75:18:d8:a6:94:d3:3d:1c:13:
         c2:20:2b:b5:77:7e:9d:69:af:4a:9d:f9:eb:7a:7f:0a:de:d9:
         22:77:15:05:4f:4b:ae:ac:e1:fb:25:8c:7b:be:64:13:ab:2f:
         a9:e8:1b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:45:20 2026 by rpki-client