Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EoRLb4NuWzbtFuWQ2KDD1i2PmpcV9J8NpqzcME2Evr1h/0/323830343a343565633a3a2f33322d3438203d3e20323636393535.roa
File:                     323830343a343565633a3a2f33322d3438203d3e20323636393535.roa (raw, json)
Hash identifier:          /ZJrBMDaPF+BEiYx3znEgITTJkn1+HJjnCA3QV3ZBF8=
Subject key identifier:   F5:22:00:F2:67:34:92:AB:AC:89:6E:07:B2:A6:86:99:65:25:94:8B
Certificate issuer:       /CN=CB3F2FB4F9EA894393CC233412212632FC1E627D
Certificate serial:       5725185009CED000E97E39CEC255A1559C846A92
Authority key identifier: CB:3F:2F:B4:F9:EA:89:43:93:CC:23:34:12:21:26:32:FC:1E:62:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB3F2FB4F9EA894393CC233412212632FC1E627D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EoRLb4NuWzbtFuWQ2KDD1i2PmpcV9J8NpqzcME2Evr1h/0/323830343a343565633a3a2f33322d3438203d3e20323636393535.roa
Signing time:             Fri 15 May 2026 15:08:27 +0000
ROA not before:           Fri 15 May 2026 15:03:27 +0000
ROA not after:            Fri 14 May 2027 15:08:27 +0000
asID:                     266955
IP address blocks:        2804:45ec::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EoRLb4NuWzbtFuWQ2KDD1i2PmpcV9J8NpqzcME2Evr1h/0/CB3F2FB4F9EA894393CC233412212632FC1E627D.crl
                          rsync://rpki-repo.registro.br/repo/EoRLb4NuWzbtFuWQ2KDD1i2PmpcV9J8NpqzcME2Evr1h/0/CB3F2FB4F9EA894393CC233412212632FC1E627D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB3F2FB4F9EA894393CC233412212632FC1E627D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 May 2026 22:11:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:25:18:50:09:ce:d0:00:e9:7e:39:ce:c2:55:a1:55:9c:84:6a:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB3F2FB4F9EA894393CC233412212632FC1E627D
        Validity
            Not Before: May 15 15:03:27 2026 GMT
            Not After : May 14 15:08:27 2027 GMT
        Subject: CN=F52200F2673492ABAC896E07B2A686996525948B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f0:a9:3a:23:53:64:3e:99:4f:61:b6:32:6a:
                    5c:00:d8:d9:c8:a2:d6:52:7f:a3:45:d1:d1:12:0d:
                    87:d3:70:bc:da:2e:ed:2c:63:42:7d:80:42:83:2a:
                    cf:51:c9:60:1d:c7:db:b6:71:dd:e1:49:b3:6d:e3:
                    e5:18:c5:3a:d6:c3:bf:ff:25:f6:ae:36:2a:21:43:
                    b4:ca:ff:4c:04:8b:48:cf:6f:07:2a:6b:87:08:72:
                    9b:1c:2e:c1:64:4c:4b:e8:03:8e:ac:b2:b5:aa:03:
                    89:02:d6:1f:ac:3c:4d:72:21:a1:c2:6f:9e:84:91:
                    3b:f5:a7:bc:18:a0:98:d4:a8:b8:20:a9:9d:18:ab:
                    4a:29:b7:86:76:60:77:5b:25:2f:f1:9e:eb:45:af:
                    d7:18:53:e4:3e:79:f3:43:38:ab:16:34:03:1c:f1:
                    e4:6d:8f:bf:42:65:4b:92:aa:a7:a7:05:ee:da:8c:
                    a5:9d:bf:ba:94:de:8a:25:06:29:7c:e6:ac:8f:ef:
                    d3:1a:a6:03:f0:68:ba:cc:0f:3e:22:95:23:7b:c8:
                    af:5b:eb:21:3f:56:29:a2:ee:56:2b:59:0d:d5:92:
                    dc:93:ee:6d:3a:b8:32:19:94:f1:46:b7:85:ba:d9:
                    d4:ec:1f:32:40:da:29:47:f6:8a:13:18:64:f6:0b:
                    5f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:22:00:F2:67:34:92:AB:AC:89:6E:07:B2:A6:86:99:65:25:94:8B
            X509v3 Authority Key Identifier:
                keyid:CB:3F:2F:B4:F9:EA:89:43:93:CC:23:34:12:21:26:32:FC:1E:62:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EoRLb4NuWzbtFuWQ2KDD1i2PmpcV9J8NpqzcME2Evr1h/0/CB3F2FB4F9EA894393CC233412212632FC1E627D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB3F2FB4F9EA894393CC233412212632FC1E627D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EoRLb4NuWzbtFuWQ2KDD1i2PmpcV9J8NpqzcME2Evr1h/0/323830343a343565633a3a2f33322d3438203d3e20323636393535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:45ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:25:75:e6:f3:bc:3b:4c:69:4e:bb:62:a2:a4:fc:72:33:ce:
         90:af:7d:a1:05:1d:c8:d6:30:10:d0:5f:1c:c3:e3:00:9a:b8:
         83:d4:da:0f:4a:91:72:0f:b0:72:3e:aa:04:a9:04:6d:e3:d9:
         74:73:27:f5:c2:d0:98:9c:78:14:e7:82:61:77:bf:b6:9f:6d:
         49:58:75:c7:ca:cf:c6:15:4b:84:42:58:69:47:48:57:97:2c:
         7d:e2:c6:2e:1d:d4:1e:75:bb:76:1c:e7:6d:21:df:47:79:89:
         31:53:f8:99:f8:66:62:95:05:cc:16:f8:61:7b:55:a1:fb:db:
         1e:a6:c2:dc:b8:6e:89:37:e0:18:11:56:21:c7:c3:d4:08:64:
         9c:e2:e2:f7:93:64:9e:1f:0f:84:d1:17:3b:d4:64:06:8c:d3:
         d1:fe:e9:b1:7e:a3:06:02:a0:c2:9c:62:6b:9b:c2:c8:c5:5b:
         ff:5f:aa:1e:11:e8:a8:8a:5c:a1:ce:cc:aa:e1:e7:b3:a5:da:
         55:e5:ee:d3:44:dc:fe:39:59:94:95:8f:4b:72:86:ef:26:c5:
         26:5e:65:22:86:b0:f4:3b:70:76:bb:ef:e3:d6:ae:29:91:55:
         78:48:3f:ff:38:a9:92:81:b7:94:92:18:5f:4a:70:6d:b7:65:
         1e:77:58:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:06:17 2026 by rpki-client