Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaYe2uCDbNtucujWUqx4TmQYwod9JRoUHUs1fr7g4TcD/0/323830343a393961383a3a2f33322d313238203d3e20323735373935.roa
File:                     323830343a393961383a3a2f33322d313238203d3e20323735373935.roa (raw, json)
Hash identifier:          z52H/gKzE6eKGOHaF/Wd+Vkswe5rHqs4M1EmlCwHgiM=
Subject key identifier:   F4:AB:52:26:55:FD:C7:2C:33:B5:29:0F:53:3F:D0:DD:F0:CF:35:F6
Certificate issuer:       /CN=5EBA2DD86E92FA8CEE11473B6B01228E8F32D4C5
Certificate serial:       07B2EED53CF5D4C86C3773A19FE9425072C5E314
Authority key identifier: 5E:BA:2D:D8:6E:92:FA:8C:EE:11:47:3B:6B:01:22:8E:8F:32:D4:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EBA2DD86E92FA8CEE11473B6B01228E8F32D4C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaYe2uCDbNtucujWUqx4TmQYwod9JRoUHUs1fr7g4TcD/0/323830343a393961383a3a2f33322d313238203d3e20323735373935.roa
Signing time:             Mon 06 Jul 2026 18:33:00 +0000
ROA not before:           Mon 06 Jul 2026 18:28:00 +0000
ROA not after:            Mon 05 Jul 2027 18:33:00 +0000
asID:                     275795
IP address blocks:        2804:99a8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaYe2uCDbNtucujWUqx4TmQYwod9JRoUHUs1fr7g4TcD/0/5EBA2DD86E92FA8CEE11473B6B01228E8F32D4C5.crl
                          rsync://rpki-repo.registro.br/repo/GaYe2uCDbNtucujWUqx4TmQYwod9JRoUHUs1fr7g4TcD/0/5EBA2DD86E92FA8CEE11473B6B01228E8F32D4C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EBA2DD86E92FA8CEE11473B6B01228E8F32D4C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 10:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b2:ee:d5:3c:f5:d4:c8:6c:37:73:a1:9f:e9:42:50:72:c5:e3:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EBA2DD86E92FA8CEE11473B6B01228E8F32D4C5
        Validity
            Not Before: Jul  6 18:28:00 2026 GMT
            Not After : Jul  5 18:33:00 2027 GMT
        Subject: CN=F4AB522655FDC72C33B5290F533FD0DDF0CF35F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a9:d2:67:dd:b2:c8:34:a3:bc:fa:73:b8:1f:
                    e7:ae:31:16:24:a9:b6:1f:11:b6:c1:08:48:2e:f0:
                    33:4d:75:16:e8:7d:dd:0f:35:6d:05:f5:e5:49:62:
                    50:54:95:c8:b8:3d:90:6f:6b:93:9a:b9:61:de:e4:
                    91:74:f9:ba:62:53:a1:fe:2a:ab:39:79:23:bb:1d:
                    cd:8e:98:76:a3:52:0b:5e:b5:d3:ea:e7:1c:56:0e:
                    e1:5e:e8:18:3e:8a:05:8f:44:de:99:45:de:7c:4b:
                    44:e1:9f:dd:51:07:55:ca:6c:40:a3:e3:00:69:d4:
                    8f:02:ff:44:b9:7f:43:7a:8f:69:23:2e:7d:0b:2a:
                    7f:cb:c8:a7:8b:7a:7c:74:67:78:60:f2:fd:57:a7:
                    28:77:5d:08:87:ca:75:8a:d7:55:65:83:89:c0:e7:
                    18:10:f9:eb:d3:0e:27:d5:5e:ac:29:9d:dc:a2:0e:
                    6e:0e:af:4c:30:1e:63:76:59:3c:fc:97:f4:0a:c2:
                    c0:9a:c6:fa:27:a0:d2:7b:f2:d5:6c:85:82:0f:92:
                    35:cb:65:15:be:87:65:bb:58:7b:71:ce:f7:8b:9d:
                    f2:8a:0f:6e:22:13:b7:19:ed:1e:7c:8b:a1:01:b2:
                    b6:03:17:0d:d0:89:83:ac:a2:c6:29:dc:6c:26:19:
                    9b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AB:52:26:55:FD:C7:2C:33:B5:29:0F:53:3F:D0:DD:F0:CF:35:F6
            X509v3 Authority Key Identifier:
                keyid:5E:BA:2D:D8:6E:92:FA:8C:EE:11:47:3B:6B:01:22:8E:8F:32:D4:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaYe2uCDbNtucujWUqx4TmQYwod9JRoUHUs1fr7g4TcD/0/5EBA2DD86E92FA8CEE11473B6B01228E8F32D4C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EBA2DD86E92FA8CEE11473B6B01228E8F32D4C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaYe2uCDbNtucujWUqx4TmQYwod9JRoUHUs1fr7g4TcD/0/323830343a393961383a3a2f33322d313238203d3e20323735373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:99a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:8c:88:e5:8f:5c:58:30:de:75:4a:ae:86:3f:28:a4:d1:56:
         3f:18:62:c2:e1:c8:6b:85:7f:e5:9e:36:04:94:a8:9c:69:d2:
         3a:d4:f2:0f:8f:35:f8:0e:6a:40:15:68:27:6c:c8:0c:15:16:
         08:a2:7f:79:4b:13:fa:dd:5b:16:2c:8f:01:7d:8f:bc:2f:03:
         d8:6f:6f:8b:9a:77:80:ad:cb:24:1a:12:4b:f4:d1:d8:68:77:
         09:b0:ed:a7:38:b7:58:7a:49:b4:dc:dc:8c:fb:e8:08:6c:df:
         15:bd:92:58:b6:46:03:48:af:3c:2e:3f:0a:ce:19:05:44:ef:
         53:2b:fb:e8:f0:4a:17:46:8c:a2:28:ba:bf:93:11:2c:43:60:
         76:40:cc:c7:a7:46:a1:07:b6:5d:ac:2a:f3:2b:dc:36:90:44:
         d0:5f:db:b9:df:21:fb:f5:25:4c:08:9d:c7:6b:79:d7:2e:a2:
         60:8f:3c:aa:6a:eb:11:6d:e3:71:5b:db:91:43:cf:6c:9f:96:
         59:6a:f6:6d:3d:44:09:b1:33:67:f7:14:47:69:31:41:ed:35:
         3f:41:d6:a8:b8:75:64:33:d5:be:cb:74:1f:bd:c2:d0:34:a7:
         e4:32:39:ee:16:3a:23:a5:7d:f2:c2:fe:3f:92:40:4e:08:44:
         be:0c:86:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:09:00 2026 by rpki-client