Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/323830343a376366343a343031343a3a2f34382d3438203d3e20323731353239.roa
File:                     323830343a376366343a343031343a3a2f34382d3438203d3e20323731353239.roa (raw, json)
Hash identifier:          ym5OEVgpAzBKrubXXJplGgO0Nh8i6lQUTRvpI6Slaeo=
Subject key identifier:   92:F3:1C:F9:DA:C5:AE:A3:72:10:5C:37:5A:E2:53:B2:9F:FD:56:D7
Certificate issuer:       /CN=5C0804A9BB19C7C8ADB91BA06E8FFF14EE9808E4
Certificate serial:       4987F49A6FAC95294B7AA08E614059E4014FEF7B
Authority key identifier: 5C:08:04:A9:BB:19:C7:C8:AD:B9:1B:A0:6E:8F:FF:14:EE:98:08:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C0804A9BB19C7C8ADB91BA06E8FFF14EE9808E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/323830343a376366343a343031343a3a2f34382d3438203d3e20323731353239.roa
Signing time:             Mon 22 Jun 2026 14:16:21 +0000
ROA not before:           Mon 22 Jun 2026 14:11:21 +0000
ROA not after:            Mon 21 Jun 2027 14:16:21 +0000
asID:                     271529
IP address blocks:        2804:7cf4:4014::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/5C0804A9BB19C7C8ADB91BA06E8FFF14EE9808E4.crl
                          rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/5C0804A9BB19C7C8ADB91BA06E8FFF14EE9808E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C0804A9BB19C7C8ADB91BA06E8FFF14EE9808E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Jul 2026 23:34:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:87:f4:9a:6f:ac:95:29:4b:7a:a0:8e:61:40:59:e4:01:4f:ef:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C0804A9BB19C7C8ADB91BA06E8FFF14EE9808E4
        Validity
            Not Before: Jun 22 14:11:21 2026 GMT
            Not After : Jun 21 14:16:21 2027 GMT
        Subject: CN=92F31CF9DAC5AEA372105C375AE253B29FFD56D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c0:aa:bd:41:92:06:fb:ca:6c:f4:39:6c:fe:
                    ce:e1:3f:8c:ad:71:58:ec:da:5f:d3:9e:95:0e:ab:
                    64:ec:3a:9a:9a:39:09:36:b6:e5:af:43:78:25:73:
                    b2:b8:d9:60:ee:2b:fa:74:56:06:a8:d9:c3:f4:07:
                    a7:67:3d:a5:b9:52:7c:d9:b8:d7:4f:52:88:e5:ff:
                    9a:40:14:a4:aa:41:73:8d:83:bc:93:32:36:fc:7a:
                    8a:b7:a8:05:3a:98:9a:61:db:8a:d2:28:fa:44:f5:
                    b7:87:58:bc:ba:c1:be:45:e7:86:f5:fe:e6:69:ef:
                    29:d2:98:e3:08:f6:07:9b:7a:c8:9b:20:20:cf:63:
                    b6:1f:99:b4:3e:33:b1:3b:2d:89:df:c2:c3:af:f2:
                    28:2d:29:a8:f5:71:a2:e9:9e:8a:96:36:ee:c7:e9:
                    34:e4:29:f1:f5:3f:2e:95:f7:7b:53:9c:b7:64:24:
                    76:31:44:f5:73:b4:65:69:f1:c7:08:47:b9:ef:d3:
                    63:de:00:0f:48:16:35:f9:bf:de:ea:e5:7f:a2:d4:
                    d3:22:54:26:94:13:78:57:a2:c8:86:5d:cf:3a:38:
                    6b:e7:71:31:14:22:3d:78:d5:66:13:52:cb:26:3a:
                    f5:8e:42:c5:71:07:72:27:0a:21:f7:21:6b:42:38:
                    22:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F3:1C:F9:DA:C5:AE:A3:72:10:5C:37:5A:E2:53:B2:9F:FD:56:D7
            X509v3 Authority Key Identifier:
                keyid:5C:08:04:A9:BB:19:C7:C8:AD:B9:1B:A0:6E:8F:FF:14:EE:98:08:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/5C0804A9BB19C7C8ADB91BA06E8FFF14EE9808E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C0804A9BB19C7C8ADB91BA06E8FFF14EE9808E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/323830343a376366343a343031343a3a2f34382d3438203d3e20323731353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7cf4:4014::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:2c:33:55:4b:d3:ad:0e:a0:2b:4f:fe:39:15:ae:64:5f:6e:
         07:ba:85:e5:6c:93:1e:7c:e9:f0:b4:53:b8:09:5c:e5:14:89:
         89:b5:e4:c1:72:6f:b0:82:23:97:47:89:7f:17:08:1d:22:ca:
         c2:b6:9c:b1:f3:bd:bb:6f:35:b6:2b:24:a6:1b:a8:43:6e:cd:
         57:23:49:9d:d6:4a:57:ed:72:53:6f:13:24:6c:66:07:65:89:
         bc:0c:af:25:d4:dc:82:84:fb:00:4a:23:6a:15:6e:0a:78:4f:
         fc:c8:4b:9d:96:5e:89:77:f1:8e:cd:85:2d:1f:11:da:bc:0a:
         7e:39:df:75:51:d3:2a:17:69:b0:aa:08:75:d9:f9:43:16:4a:
         16:63:f3:c3:56:7a:15:66:8c:2b:f1:2e:87:f2:1d:14:94:e1:
         b7:cc:28:2b:18:70:6c:9e:11:4b:e5:91:65:a7:f2:a5:89:79:
         0a:1c:85:3d:dc:12:6f:e5:05:ed:57:15:50:f2:54:a2:fe:9b:
         34:9c:69:46:ca:9c:96:10:1a:a7:72:4a:89:5e:8e:54:b7:80:
         ca:50:a9:6c:6d:b9:4f:be:92:88:10:b4:c1:92:cf:05:c4:74:
         cf:eb:fc:b3:b5:6b:52:a4:b8:b6:08:64:6c:cc:4e:c0:2b:bd:
         7e:d7:a2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:09:24 2026 by rpki-client