Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/323830343a353030343a3a2f33322d313238203d3e20323638333634.roa
File:                     323830343a353030343a3a2f33322d313238203d3e20323638333634.roa (raw, json)
Hash identifier:          WnPjCiNtpCdShLcnExVVXPoJnv72sKpjVerPWhJZjdA=
Subject key identifier:   65:61:3E:D1:75:CC:AD:FF:04:0B:1C:D4:D7:E0:1D:40:A9:E6:A6:88
Certificate issuer:       /CN=F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43
Certificate serial:       56E170FA5C72267040514180A744F39F44A897CF
Authority key identifier: F3:48:AB:79:6A:84:D4:7D:29:3E:1A:4C:C8:5A:1D:3B:3A:6C:2A:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/323830343a353030343a3a2f33322d313238203d3e20323638333634.roa
Signing time:             Tue 19 May 2026 18:16:14 +0000
ROA not before:           Tue 19 May 2026 18:11:14 +0000
ROA not after:            Tue 18 May 2027 18:16:14 +0000
asID:                     268364
IP address blocks:        2804:5004::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43.crl
                          rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 08:55:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e1:70:fa:5c:72:26:70:40:51:41:80:a7:44:f3:9f:44:a8:97:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43
        Validity
            Not Before: May 19 18:11:14 2026 GMT
            Not After : May 18 18:16:14 2027 GMT
        Subject: CN=65613ED175CCADFF040B1CD4D7E01D40A9E6A688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:71:ee:e6:0f:7b:d3:0f:dc:42:f5:ac:d7:24:
                    63:3e:d2:fd:e9:75:d2:8a:df:e2:69:b8:75:cf:2c:
                    82:3b:c8:23:a6:0a:07:86:eb:2f:01:e9:fe:34:ba:
                    27:a1:9a:29:c6:06:b5:23:4e:9c:5d:b1:f5:64:95:
                    b8:86:d9:2b:c4:28:8a:ce:89:97:1a:c4:b9:4d:e9:
                    0f:0e:42:c4:b8:ae:e8:d7:4e:41:ce:b3:e4:37:3c:
                    72:a9:7e:2f:0d:92:08:8a:41:6e:12:8f:0d:cf:eb:
                    aa:12:0e:06:7f:cb:10:01:6f:01:53:c7:9c:20:68:
                    11:6f:55:4d:2a:e2:d0:63:b8:7e:2c:07:4b:65:4b:
                    df:3c:ce:4b:2c:1b:5b:42:74:a7:04:9a:93:fd:57:
                    c6:46:81:10:c4:ea:2f:99:f7:66:b0:08:a5:ec:4c:
                    5c:fd:2c:12:69:c4:a9:6c:38:d3:a3:6b:6f:5c:52:
                    7c:4c:4e:4d:90:ed:d4:a1:32:46:65:a1:b2:6f:1b:
                    fe:6b:1f:74:6f:4c:a5:ad:a9:31:d3:13:3f:8c:38:
                    be:98:dd:b4:90:df:cb:a1:e5:97:e4:2f:79:c0:aa:
                    b5:c2:0c:23:16:7d:d3:79:e1:65:94:3a:f0:8b:2a:
                    7f:b1:dc:c3:1c:b0:a1:06:50:47:e4:03:f4:37:cc:
                    6c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:61:3E:D1:75:CC:AD:FF:04:0B:1C:D4:D7:E0:1D:40:A9:E6:A6:88
            X509v3 Authority Key Identifier:
                keyid:F3:48:AB:79:6A:84:D4:7D:29:3E:1A:4C:C8:5A:1D:3B:3A:6C:2A:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/323830343a353030343a3a2f33322d313238203d3e20323638333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5004::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:c9:57:6f:8e:27:c6:93:b7:7d:07:eb:38:ec:0b:5d:1c:a4:
         78:bf:3e:5b:a4:27:85:90:b2:54:59:95:29:9f:96:d9:24:a2:
         d0:41:94:2b:ee:69:46:c7:3f:82:e4:26:6e:09:78:73:ec:4c:
         0c:f0:03:88:92:3a:8b:73:42:6c:ed:66:ab:d2:db:c3:6c:2f:
         e7:73:fe:70:c6:26:61:5d:4b:32:40:1d:97:53:9d:d0:83:66:
         62:ff:cd:c0:f9:a1:47:66:f4:ef:82:0c:0e:e0:cb:ce:51:ec:
         6a:81:f6:42:6f:3b:61:2f:e1:ef:4d:ce:5b:db:6e:fa:af:d6:
         ab:7f:60:e9:6b:60:17:5b:db:6b:07:81:77:a5:f1:fd:41:8a:
         0f:8a:68:69:71:04:1b:12:e1:6b:66:9c:2b:32:9d:99:1a:26:
         de:7f:54:6e:cf:5d:20:c9:cc:c6:54:5d:ea:63:ca:ff:a8:3d:
         a7:22:3c:43:41:b1:f4:9c:dd:3c:63:ff:b3:0e:b3:77:fb:f7:
         00:45:9a:10:30:af:2c:a9:45:e0:86:cc:0a:44:c9:d1:ae:e2:
         5b:b3:06:2d:e4:7c:a4:d0:7e:d4:9c:5b:d8:30:ee:d4:ee:dd:
         5d:5e:fc:e3:8d:10:68:6b:0f:a3:38:8e:d6:c9:84:66:42:4a:
         f4:ee:51:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 15:58:29 2026 by rpki-client