Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/323830343a6233383a3a2f33322d3438203d3e203532373538.roa
File:                     323830343a6233383a3a2f33322d3438203d3e203532373538.roa (raw, json)
Hash identifier:          yFx3ehbs6kD1O83Pz1zQ+DNga8Y7rEsJ/HhUCporP4Y=
Subject key identifier:   51:82:2D:47:22:31:49:F8:2B:F5:84:EA:29:41:5A:47:62:EF:3C:53
Certificate issuer:       /CN=2159A2A607956D399271CDC6A3AC1E80617FEEE1
Certificate serial:       768B64A3D99ABF7C3713159BA1661CA2B48FAF19
Authority key identifier: 21:59:A2:A6:07:95:6D:39:92:71:CD:C6:A3:AC:1E:80:61:7F:EE:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2159A2A607956D399271CDC6A3AC1E80617FEEE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/323830343a6233383a3a2f33322d3438203d3e203532373538.roa
Signing time:             Thu 14 May 2026 12:23:51 +0000
ROA not before:           Thu 14 May 2026 12:18:51 +0000
ROA not after:            Thu 13 May 2027 12:23:51 +0000
asID:                     52758
IP address blocks:        2804:b38::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/2159A2A607956D399271CDC6A3AC1E80617FEEE1.crl
                          rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/2159A2A607956D399271CDC6A3AC1E80617FEEE1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2159A2A607956D399271CDC6A3AC1E80617FEEE1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 10:39:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:8b:64:a3:d9:9a:bf:7c:37:13:15:9b:a1:66:1c:a2:b4:8f:af:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2159A2A607956D399271CDC6A3AC1E80617FEEE1
        Validity
            Not Before: May 14 12:18:51 2026 GMT
            Not After : May 13 12:23:51 2027 GMT
        Subject: CN=51822D47223149F82BF584EA29415A4762EF3C53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:10:7d:a2:08:5c:21:ba:c8:ad:0b:1a:3e:97:
                    2b:17:bd:3c:c6:40:44:fb:fc:9c:5e:77:fe:64:42:
                    e6:2f:c6:77:16:d4:b7:f4:9f:c4:00:e8:a9:80:08:
                    fc:ee:b6:dc:de:34:32:50:c9:3d:86:fa:e6:c1:56:
                    ba:af:b1:b3:a0:6e:f0:67:f3:e7:e3:f4:91:76:ae:
                    21:01:19:14:a3:48:72:1d:0d:b2:1d:74:d6:7a:3b:
                    a8:0e:0e:33:d9:c5:9a:c3:e1:f4:5b:bf:f8:dd:83:
                    a0:f0:e7:76:6f:7a:7b:5b:7f:78:7a:45:e4:da:af:
                    7c:7a:a9:dc:2c:d9:c1:ec:a6:b0:2b:82:0b:1e:90:
                    2e:4c:08:47:fd:42:ba:1c:ce:ec:86:45:8e:1f:e1:
                    e5:7e:3b:39:e3:48:46:fe:b7:09:2d:1b:05:0b:74:
                    fd:af:1d:18:d8:a1:6b:19:82:61:0f:de:d1:b6:cc:
                    7e:b7:db:e6:c4:bc:a1:2b:5c:f1:63:3f:78:cb:b7:
                    5a:d5:d0:82:58:d7:74:4c:a6:3d:21:cb:36:59:30:
                    ce:ee:50:11:b7:d1:37:5c:4c:58:6b:ef:ef:bb:f1:
                    e4:94:6a:ba:d9:20:77:33:e3:4e:70:5d:a0:36:b4:
                    fa:0d:0a:18:69:1f:8c:d8:bf:52:32:b8:28:3c:49:
                    bd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:82:2D:47:22:31:49:F8:2B:F5:84:EA:29:41:5A:47:62:EF:3C:53
            X509v3 Authority Key Identifier:
                keyid:21:59:A2:A6:07:95:6D:39:92:71:CD:C6:A3:AC:1E:80:61:7F:EE:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/2159A2A607956D399271CDC6A3AC1E80617FEEE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2159A2A607956D399271CDC6A3AC1E80617FEEE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/323830343a6233383a3a2f33322d3438203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b38::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:c8:8b:44:30:a1:80:52:c3:9f:9b:26:3d:24:4f:77:86:88:
         0a:f4:fc:9e:31:37:fe:5a:5a:39:73:64:f8:b1:b5:3f:fd:d1:
         4a:66:4f:ca:7f:e0:0d:98:8f:93:75:1f:5e:b0:de:be:e6:be:
         de:6c:c9:68:be:e6:82:72:3b:4e:81:49:c4:25:33:ca:f4:a6:
         d1:33:df:64:ec:ae:bf:fd:8c:fb:bf:69:29:5a:5e:a1:bd:23:
         ef:79:81:23:49:51:2b:31:68:d8:f0:86:8e:c3:3f:f3:38:d3:
         f0:51:58:0f:ac:27:eb:02:b3:17:6b:61:23:3a:61:af:8d:99:
         ce:dc:62:f4:a5:dd:29:6a:b5:25:78:e9:ce:20:1c:e2:b1:be:
         19:7f:85:5d:7d:b5:2b:2a:d5:ef:70:8a:dc:8e:c1:43:19:1a:
         cb:97:4d:2c:f7:76:f7:63:b3:cc:af:34:f2:8d:bf:8f:99:bf:
         fa:fe:82:91:49:e0:10:a0:62:a5:6b:fa:38:8b:7b:c1:cb:fe:
         c5:d7:01:68:52:11:1f:ca:10:b7:bc:f5:25:34:72:06:58:c5:
         52:77:d5:e2:96:68:1f:8b:70:fc:ba:be:dd:02:bc:31:9b:d1:
         ce:95:c7:d6:72:56:e4:db:30:9a:17:b8:84:d8:15:b4:34:64:
         e0:0e:52:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:18:43 2026 by rpki-client