Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/323830343a356366303a3a2f33322d3334203d3e20323638393430.roa
File:                     323830343a356366303a3a2f33322d3334203d3e20323638393430.roa (raw, json)
Hash identifier:          6pK2jnP/Aatui/DmQ0REoVvZ7PUMEcyfRvjoKVTuFpI=
Subject key identifier:   C9:D9:31:3D:ED:E5:31:58:96:99:57:1B:1F:A1:AC:5F:60:EB:C6:7E
Certificate issuer:       /CN=5450FD2F6D5331D1075A9DC188ECC4B77068BEBC
Certificate serial:       0607D8ADB52C297F55A5BA1792448C22FE9FDCA7
Authority key identifier: 54:50:FD:2F:6D:53:31:D1:07:5A:9D:C1:88:EC:C4:B7:70:68:BE:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5450FD2F6D5331D1075A9DC188ECC4B77068BEBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/323830343a356366303a3a2f33322d3334203d3e20323638393430.roa
Signing time:             Mon 15 Jun 2026 20:31:40 +0000
ROA not before:           Mon 15 Jun 2026 20:26:40 +0000
ROA not after:            Mon 14 Jun 2027 20:31:40 +0000
asID:                     268940
IP address blocks:        2804:5cf0::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/5450FD2F6D5331D1075A9DC188ECC4B77068BEBC.crl
                          rsync://rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/5450FD2F6D5331D1075A9DC188ECC4B77068BEBC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5450FD2F6D5331D1075A9DC188ECC4B77068BEBC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 05:53:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:07:d8:ad:b5:2c:29:7f:55:a5:ba:17:92:44:8c:22:fe:9f:dc:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5450FD2F6D5331D1075A9DC188ECC4B77068BEBC
        Validity
            Not Before: Jun 15 20:26:40 2026 GMT
            Not After : Jun 14 20:31:40 2027 GMT
        Subject: CN=C9D9313DEDE531589699571B1FA1AC5F60EBC67E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:aa:db:3f:6d:2a:dd:a9:e5:01:86:33:68:d8:
                    41:36:12:36:e6:18:7c:35:10:09:0e:57:d1:08:b4:
                    fa:48:08:17:34:86:43:57:ff:39:7f:a3:cd:7e:bf:
                    62:ec:94:91:10:eb:c8:17:af:8e:94:40:b3:9e:57:
                    3e:ec:2f:63:b5:d4:c5:16:d5:bf:59:68:09:a5:98:
                    7c:b6:e7:e1:f3:b4:aa:7e:7e:94:c8:e8:ce:84:55:
                    cb:e9:67:3e:23:8b:df:e1:ce:3d:36:fe:1f:5c:6d:
                    7d:49:4f:e0:6d:8c:35:e3:91:03:19:41:fa:fc:8b:
                    95:39:e5:f2:ca:18:bf:25:86:81:9c:30:d4:f5:ed:
                    66:72:6d:c9:b1:51:fd:42:97:7a:3f:f0:9f:85:53:
                    7b:21:13:79:6e:10:15:5c:6e:13:c9:49:5b:4a:b8:
                    93:a6:41:d3:54:3d:e9:eb:8f:2e:5f:87:ad:79:1c:
                    96:d5:2f:40:46:2e:91:98:6b:50:7f:31:01:ce:08:
                    7b:f0:39:3b:66:a9:dc:06:ce:e6:e1:1c:4b:d2:05:
                    74:1f:e9:c4:d6:bd:23:ee:f1:db:bb:bc:78:34:07:
                    6d:54:45:36:86:4f:05:df:bb:de:b6:e9:e6:c6:37:
                    b1:fc:19:5c:5d:73:7c:d4:21:dc:ba:1d:2c:f8:49:
                    96:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D9:31:3D:ED:E5:31:58:96:99:57:1B:1F:A1:AC:5F:60:EB:C6:7E
            X509v3 Authority Key Identifier:
                keyid:54:50:FD:2F:6D:53:31:D1:07:5A:9D:C1:88:EC:C4:B7:70:68:BE:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/5450FD2F6D5331D1075A9DC188ECC4B77068BEBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5450FD2F6D5331D1075A9DC188ECC4B77068BEBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/323830343a356366303a3a2f33322d3334203d3e20323638393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5cf0::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:ac:ea:44:54:71:b2:28:55:8d:5a:88:00:e9:19:43:0d:5e:
         69:f7:5a:ac:ad:8c:3d:14:28:e0:99:6e:ae:92:87:d5:05:0d:
         58:37:34:04:84:96:bd:c7:94:6c:df:1d:63:e4:a6:c8:76:4f:
         70:16:ea:2b:4e:c1:6d:9b:d6:a0:72:b4:0b:b1:35:8e:a6:fc:
         25:0c:5a:cf:46:58:b8:e9:6f:f8:37:79:24:9c:e2:9d:e2:ac:
         ea:5f:52:89:48:5d:f3:31:d5:5f:67:db:a3:ca:f0:ae:df:43:
         97:9e:f5:24:3e:bf:84:e3:f9:da:f7:2c:62:82:cb:2d:95:8a:
         1c:1a:35:b1:87:ad:35:87:b9:8e:d5:5e:8b:20:c9:82:6e:f1:
         3e:77:e1:a5:ac:43:56:8c:a3:0f:5d:d4:6d:22:1e:67:74:13:
         b7:65:1e:f9:6d:d3:35:7a:32:ea:9f:42:ee:4c:41:45:04:70:
         c8:28:de:fc:d9:27:f1:ea:bb:35:f3:60:ef:35:f2:d5:c6:a8:
         04:2a:de:34:dc:2b:68:d2:ce:21:36:c8:12:5f:68:44:46:2b:
         8c:17:70:75:f6:bc:29:57:8d:e5:42:62:0e:ce:4e:66:f5:5b:
         93:39:fe:e9:e1:7b:c5:20:07:11:3c:42:5a:52:2f:f3:22:01:
         d0:5c:3f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:02:02 2026 by rpki-client