Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/323830343a356265383a3a2f33332d3333203d3e20323638383736.roa
File:                     323830343a356265383a3a2f33332d3333203d3e20323638383736.roa (raw, json)
Hash identifier:          akXzzj0X6ZqFvQ4acabn2joyUPmLOAJdBUWEmc8EEl0=
Subject key identifier:   4F:84:AB:00:58:5E:77:85:40:AB:5D:42:D7:E6:45:F8:08:C0:E0:1C
Certificate issuer:       /CN=ABF43A2BFC57C3BE105182E1FDDD779364A5A2CA
Certificate serial:       625B8B3BA21EBFEFB4FDB3EF690B03B0984D3E45
Authority key identifier: AB:F4:3A:2B:FC:57:C3:BE:10:51:82:E1:FD:DD:77:93:64:A5:A2:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABF43A2BFC57C3BE105182E1FDDD779364A5A2CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/323830343a356265383a3a2f33332d3333203d3e20323638383736.roa
Signing time:             Thu 18 Jun 2026 14:31:42 +0000
ROA not before:           Thu 18 Jun 2026 14:26:42 +0000
ROA not after:            Thu 17 Jun 2027 14:31:42 +0000
asID:                     268876
IP address blocks:        2804:5be8::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/ABF43A2BFC57C3BE105182E1FDDD779364A5A2CA.crl
                          rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/ABF43A2BFC57C3BE105182E1FDDD779364A5A2CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABF43A2BFC57C3BE105182E1FDDD779364A5A2CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 06:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:5b:8b:3b:a2:1e:bf:ef:b4:fd:b3:ef:69:0b:03:b0:98:4d:3e:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABF43A2BFC57C3BE105182E1FDDD779364A5A2CA
        Validity
            Not Before: Jun 18 14:26:42 2026 GMT
            Not After : Jun 17 14:31:42 2027 GMT
        Subject: CN=4F84AB00585E778540AB5D42D7E645F808C0E01C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f9:57:d5:85:a8:75:7e:d3:5c:38:07:0d:5c:
                    d8:8e:05:a6:13:9c:74:07:a4:6c:52:dd:0c:18:f3:
                    75:6c:c7:d9:8c:3b:a3:98:7c:41:50:1c:1c:8b:8b:
                    73:f8:f6:85:ba:89:ef:51:6d:9a:74:c4:0b:0f:37:
                    0d:ad:57:b4:f6:04:e2:5a:91:b9:66:b8:32:52:5f:
                    50:45:69:6d:8d:7c:7e:2e:e1:4a:49:1e:3c:fd:e1:
                    8a:ed:04:b7:e2:3e:3b:52:5a:15:05:9a:a0:bf:6c:
                    8b:e7:f4:0e:58:12:37:37:14:eb:1d:8d:5d:44:88:
                    d3:bb:cf:57:08:21:6f:f7:f2:53:39:8d:e7:9f:7c:
                    62:97:82:51:c8:64:b2:67:a3:3e:10:83:d4:d3:ed:
                    eb:72:5d:71:20:92:ef:fc:5d:d4:f3:ac:ab:1b:fa:
                    c5:b2:ce:20:e9:07:f0:04:78:da:a9:12:b3:b6:57:
                    fe:f1:53:c6:2e:6b:35:30:7c:88:9b:2d:77:4e:41:
                    95:0c:7a:84:78:a2:7a:c8:41:9d:9d:1f:82:48:53:
                    70:76:26:e2:92:e8:43:72:30:4c:7a:15:a6:09:47:
                    58:9c:3d:57:a2:62:9a:4a:39:bc:07:86:14:ec:2c:
                    25:f3:da:39:bc:22:8b:43:9d:df:ec:b6:48:b8:84:
                    7d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:84:AB:00:58:5E:77:85:40:AB:5D:42:D7:E6:45:F8:08:C0:E0:1C
            X509v3 Authority Key Identifier:
                keyid:AB:F4:3A:2B:FC:57:C3:BE:10:51:82:E1:FD:DD:77:93:64:A5:A2:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/ABF43A2BFC57C3BE105182E1FDDD779364A5A2CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABF43A2BFC57C3BE105182E1FDDD779364A5A2CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/323830343a356265383a3a2f33332d3333203d3e20323638383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5be8::/33

    Signature Algorithm: sha256WithRSAEncryption
         1a:a8:31:3d:ca:77:ad:5a:d9:25:28:e9:11:fb:8b:51:99:b9:
         28:b0:c8:00:08:57:66:3a:b0:09:58:33:20:78:d6:b5:02:a3:
         91:89:38:a2:df:6b:d3:2c:de:18:dc:1c:b5:f1:d8:eb:2f:c2:
         44:a4:a8:93:12:08:98:42:31:e2:c1:d3:6b:7b:70:af:55:09:
         98:86:57:cc:68:53:76:47:8d:86:e0:7a:23:ea:0d:70:db:61:
         db:41:81:16:5c:94:91:b3:33:54:3c:01:4b:22:ba:25:e0:7b:
         09:74:01:9a:ea:32:68:b4:fe:23:ec:a8:4b:b1:43:6a:a3:0f:
         1e:a9:ee:7b:7d:2a:11:e7:af:85:55:4f:ad:d8:1a:38:02:73:
         41:ca:f1:10:0b:92:bd:60:7c:9f:ce:1d:61:e6:6e:b8:99:f8:
         cf:92:8a:d2:a0:96:0c:09:91:ce:87:52:ff:bf:27:42:c7:54:
         34:9b:8d:9b:81:6a:78:01:05:ba:25:3a:a3:0a:cb:3e:a9:61:
         9d:ae:67:08:e4:03:3a:16:71:e1:ad:43:85:04:b1:a7:1e:aa:
         81:30:05:10:da:75:ab:8c:fc:f2:63:11:21:2b:b9:15:dc:78:
         28:99:8b:57:96:62:91:23:63:c0:8d:2b:b7:0b:9f:e7:6e:a8:
         e0:c8:2e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 20:15:46 2026 by rpki-client