Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/323830343a353339633a3a2f33322d313238203d3e20323638353935.roa
File:                     323830343a353339633a3a2f33322d313238203d3e20323638353935.roa (raw, json)
Hash identifier:          SRzBXMWjfpV+olcBrI9aId54u+pjLyk2y1qqDFDOwkw=
Subject key identifier:   CD:88:EF:92:D4:F1:44:D2:BB:1A:77:E6:78:2A:18:62:FE:94:8E:6D
Certificate issuer:       /CN=5AB81206EE4FA918D4C431BE747879186DE15C96
Certificate serial:       6F5FE42DD2023C1482F7D6B462ABFA850E1A3F3F
Authority key identifier: 5A:B8:12:06:EE:4F:A9:18:D4:C4:31:BE:74:78:79:18:6D:E1:5C:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB81206EE4FA918D4C431BE747879186DE15C96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/323830343a353339633a3a2f33322d313238203d3e20323638353935.roa
Signing time:             Thu 04 Jun 2026 00:09:40 +0000
ROA not before:           Thu 04 Jun 2026 00:04:40 +0000
ROA not after:            Thu 03 Jun 2027 00:09:40 +0000
asID:                     268595
IP address blocks:        2804:539c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/5AB81206EE4FA918D4C431BE747879186DE15C96.crl
                          rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/5AB81206EE4FA918D4C431BE747879186DE15C96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB81206EE4FA918D4C431BE747879186DE15C96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:05:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:5f:e4:2d:d2:02:3c:14:82:f7:d6:b4:62:ab:fa:85:0e:1a:3f:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB81206EE4FA918D4C431BE747879186DE15C96
        Validity
            Not Before: Jun  4 00:04:40 2026 GMT
            Not After : Jun  3 00:09:40 2027 GMT
        Subject: CN=CD88EF92D4F144D2BB1A77E6782A1862FE948E6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:01:c6:f6:1d:6f:85:6c:8a:30:79:f6:f3:4b:
                    71:f0:9b:0d:86:f1:95:99:b7:e3:b4:f8:41:82:9f:
                    25:44:4b:88:09:bb:25:76:89:8a:04:51:ee:ae:b4:
                    eb:d9:e3:8b:9c:7e:0c:ce:9f:ad:23:d1:8f:62:32:
                    76:41:24:b6:a3:08:7c:42:8a:6d:6d:d9:37:f1:68:
                    dc:e3:71:c7:8b:0b:86:5e:f1:3c:73:5a:e8:51:c0:
                    97:d7:0a:09:0a:64:1b:ab:28:fb:cc:19:95:ca:b2:
                    1e:56:ae:6d:54:de:e1:96:05:2c:57:e3:d9:92:8a:
                    1a:84:5b:5b:50:05:ea:db:f0:b8:e4:d3:43:67:02:
                    6a:f1:65:b4:40:b8:a6:92:ab:35:fd:d2:72:0f:4e:
                    4e:8d:b0:f3:83:c7:00:3f:9d:bb:fc:4b:34:7c:f4:
                    27:4d:d9:64:7e:2e:36:a8:7f:4f:70:16:62:ef:d3:
                    0a:ac:21:ee:e2:3e:ac:0c:c2:18:bf:c4:31:81:9b:
                    58:24:80:fb:e0:58:3d:01:92:9e:6b:d1:4a:92:22:
                    0c:dc:e8:05:95:cd:a0:d8:3f:94:87:7d:1e:dd:1d:
                    76:4a:3c:52:24:a8:bd:ab:a8:61:9d:0f:50:4e:ad:
                    34:1d:b4:e3:29:56:f1:f7:be:dc:b0:61:5e:8e:a4:
                    52:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:88:EF:92:D4:F1:44:D2:BB:1A:77:E6:78:2A:18:62:FE:94:8E:6D
            X509v3 Authority Key Identifier:
                keyid:5A:B8:12:06:EE:4F:A9:18:D4:C4:31:BE:74:78:79:18:6D:E1:5C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/5AB81206EE4FA918D4C431BE747879186DE15C96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB81206EE4FA918D4C431BE747879186DE15C96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/323830343a353339633a3a2f33322d313238203d3e20323638353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:539c::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:36:ed:46:b9:94:7a:93:12:b2:9f:3a:b2:5b:50:e0:f1:ec:
         fd:26:50:93:2f:35:95:e2:32:e5:43:4f:84:4f:b8:41:e8:a2:
         6b:a5:af:c0:d7:29:18:2a:46:81:f3:1b:96:5b:f8:b5:ac:aa:
         f6:3a:e4:ca:fc:7c:3c:b4:62:8b:60:ee:28:03:f2:80:0f:c5:
         e2:83:18:66:57:e3:83:c1:1a:f6:7a:07:5d:04:16:c1:f2:96:
         b0:14:53:4b:17:20:1d:16:10:b2:c3:fb:0f:08:89:bd:f8:78:
         a3:bc:db:ab:c8:41:48:d8:db:be:7d:f3:2f:60:a2:02:b2:31:
         e2:1a:c3:95:96:57:66:35:0e:2d:70:5f:73:2e:42:38:c1:8a:
         39:11:ee:74:ab:7b:96:c1:84:ef:6d:59:63:41:5d:2b:49:b8:
         60:53:60:4b:87:c2:5f:d8:26:8d:4f:74:ec:5b:ef:7b:78:c6:
         e9:36:f4:67:af:e5:73:03:74:4d:c4:2f:47:72:0b:b1:81:72:
         8f:b4:8e:f1:dd:33:74:c4:c6:88:80:31:56:9e:53:b8:69:87:
         32:be:19:4c:a9:23:f8:02:d7:7e:58:88:4d:67:c2:e5:8b:43:
         b8:db:8e:17:f7:32:aa:8d:30:9d:b3:36:4e:89:ee:03:b4:f3:
         4f:fe:18:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:05:58 2026 by rpki-client