Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a373030303a3a2f33362d3336203d3e20323638373730.roa
File:                     323830343a356136343a373030303a3a2f33362d3336203d3e20323638373730.roa (raw, json)
Hash identifier:          oP879AB2w9kBvL57uINf9QlPyy7KHv7RMmJEWuDK4IY=
Subject key identifier:   CE:B3:B3:60:9F:1A:EC:A5:81:FE:5F:B1:0D:FD:49:E9:72:06:81:FF
Certificate issuer:       /CN=AA3B743EC7E4F08EBA8C201668D2374C737F8DA7
Certificate serial:       2EEE1DD4473196011D8F59F49C32381951127B83
Authority key identifier: AA:3B:74:3E:C7:E4:F0:8E:BA:8C:20:16:68:D2:37:4C:73:7F:8D:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a373030303a3a2f33362d3336203d3e20323638373730.roa
Signing time:             Thu 21 May 2026 22:41:14 +0000
ROA not before:           Thu 21 May 2026 22:36:14 +0000
ROA not after:            Thu 20 May 2027 22:41:14 +0000
asID:                     268770
IP address blocks:        2804:5a64:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.crl
                          rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 05:20:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ee:1d:d4:47:31:96:01:1d:8f:59:f4:9c:32:38:19:51:12:7b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA3B743EC7E4F08EBA8C201668D2374C737F8DA7
        Validity
            Not Before: May 21 22:36:14 2026 GMT
            Not After : May 20 22:41:14 2027 GMT
        Subject: CN=CEB3B3609F1AECA581FE5FB10DFD49E9720681FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f6:ec:97:19:09:fe:1a:bc:93:e8:f7:23:33:
                    58:da:27:91:98:75:32:b2:e9:f3:b9:d7:2c:4f:55:
                    32:9f:5c:7c:fa:52:4f:08:35:fd:21:e7:dd:24:f0:
                    76:1a:42:5b:34:e0:12:b9:69:4f:1c:68:1d:fa:6f:
                    1e:e8:41:aa:f4:d2:cd:b1:4b:c4:90:bb:1c:a3:1a:
                    09:53:66:ae:36:fd:54:2e:57:df:8a:9d:1e:26:74:
                    53:1e:e6:f7:37:dd:69:02:9d:c6:8d:22:18:43:d4:
                    43:d7:b6:0c:71:13:60:ec:68:71:e5:23:8b:a8:8c:
                    37:a5:61:56:2f:c6:11:8d:71:1f:a6:c9:71:03:f6:
                    3f:ad:52:82:b9:c8:9d:b9:af:20:63:0b:ad:86:ac:
                    69:80:45:8f:43:76:c1:ca:80:01:f0:ba:7b:24:d7:
                    3d:81:35:7e:98:29:54:29:47:59:00:31:93:41:76:
                    0c:ae:f0:f1:00:e4:13:0c:fb:cf:3c:7d:2c:f0:f8:
                    c6:e5:4c:3e:f9:82:1b:c8:76:61:c3:65:ff:26:8b:
                    04:bc:63:48:07:8b:3b:cc:4a:33:55:4c:65:5a:ec:
                    cd:17:de:27:75:41:29:f7:88:3d:35:d6:84:61:0e:
                    0e:74:7f:05:2c:23:ea:dd:af:bb:b9:cf:5e:37:fe:
                    ac:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B3:B3:60:9F:1A:EC:A5:81:FE:5F:B1:0D:FD:49:E9:72:06:81:FF
            X509v3 Authority Key Identifier:
                keyid:AA:3B:74:3E:C7:E4:F0:8E:BA:8C:20:16:68:D2:37:4C:73:7F:8D:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a373030303a3a2f33362d3336203d3e20323638373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a64:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         24:03:c2:ae:24:83:93:30:7d:e2:e2:c1:f2:8b:bb:dd:3e:86:
         91:d6:04:d8:89:44:30:cb:62:20:f3:b5:d0:60:5f:3b:16:92:
         a3:ba:61:45:fc:32:52:fc:b1:77:1b:1c:4b:83:2e:a8:2f:ef:
         fd:a0:66:1e:a4:05:89:f6:67:92:a1:ba:b0:7b:90:88:27:76:
         4f:e8:37:6a:f0:22:74:7a:49:cf:04:58:fb:fd:7f:4d:f5:3b:
         39:10:fe:89:97:be:85:2f:2e:85:e5:61:29:b8:a5:b1:ba:bf:
         02:0b:99:9f:33:a5:9b:e4:da:0c:93:b4:0d:56:24:d7:46:6a:
         00:18:f4:0c:1b:8d:78:91:4e:d1:a9:c2:bc:89:68:64:91:96:
         68:1a:ec:1f:d7:56:fa:38:79:81:95:06:45:43:d4:76:29:45:
         11:72:b3:60:95:43:ea:fc:e3:97:24:d4:0d:54:08:76:f6:bb:
         93:b1:43:9c:77:7e:73:e3:6b:b0:20:bc:7b:8e:2a:3e:53:b7:
         04:c8:15:ce:e0:ae:1f:8d:91:d1:8c:35:51:38:c5:eb:64:d3:
         0d:d7:c3:f0:ce:7f:a9:2a:c6:5f:a1:f6:ad:e9:8b:a1:1c:e8:
         2a:83:35:73:25:8f:52:88:33:0f:4e:0f:b5:c4:0e:d4:79:f3:
         46:c0:cb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 20:16:08 2026 by rpki-client