Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/323830343a376163303a3a2f33322d313238203d3e20323731333930.roa
File:                     323830343a376163303a3a2f33322d313238203d3e20323731333930.roa (raw, json)
Hash identifier:          F9KLyQ/ToyryUB5M4TvuNaod0D89wVeJp0XyZYQ+mdE=
Subject key identifier:   9E:BA:F5:ED:F1:14:89:C1:AD:4F:07:11:A3:CB:C6:CC:01:97:1F:12
Certificate issuer:       /CN=CC58DAF288CB59CD86B813345628DC535B34879B
Certificate serial:       389DA35CF98F0B57CC97FD4234283FCF03716D39
Authority key identifier: CC:58:DA:F2:88:CB:59:CD:86:B8:13:34:56:28:DC:53:5B:34:87:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC58DAF288CB59CD86B813345628DC535B34879B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/323830343a376163303a3a2f33322d313238203d3e20323731333930.roa
Signing time:             Sat 30 May 2026 12:46:56 +0000
ROA not before:           Sat 30 May 2026 12:41:56 +0000
ROA not after:            Sat 29 May 2027 12:46:56 +0000
asID:                     271390
IP address blocks:        2804:7ac0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/CC58DAF288CB59CD86B813345628DC535B34879B.crl
                          rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/CC58DAF288CB59CD86B813345628DC535B34879B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC58DAF288CB59CD86B813345628DC535B34879B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 00:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:9d:a3:5c:f9:8f:0b:57:cc:97:fd:42:34:28:3f:cf:03:71:6d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC58DAF288CB59CD86B813345628DC535B34879B
        Validity
            Not Before: May 30 12:41:56 2026 GMT
            Not After : May 29 12:46:56 2027 GMT
        Subject: CN=9EBAF5EDF11489C1AD4F0711A3CBC6CC01971F12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3b:47:ac:d1:2e:c1:2f:d9:e0:f0:5a:6b:61:
                    75:be:70:04:68:2d:ad:32:58:40:2d:86:4f:9a:6e:
                    34:2a:7b:07:f8:f1:ab:cf:b9:66:95:2d:1a:65:0b:
                    aa:a2:30:f4:c0:47:ab:d6:e8:69:d3:60:92:8c:3f:
                    9b:3c:1a:94:f9:0e:b1:ab:67:4b:d7:59:d8:9e:26:
                    f4:bc:71:dd:be:9a:f8:4e:86:24:28:0c:5d:3a:e3:
                    33:06:b9:c1:3b:cc:e9:c1:de:66:d7:43:4d:f1:f5:
                    32:0f:c3:59:7a:24:4a:65:54:f9:69:55:c8:54:4b:
                    42:ec:84:8d:f6:66:59:e2:36:21:8e:01:4d:e0:f2:
                    87:ff:b8:39:6e:cc:f5:fc:c5:a5:0c:f6:f8:76:80:
                    42:ad:52:b7:fe:04:1d:2f:23:77:db:41:69:73:f9:
                    e1:e3:5a:a9:4a:5a:c7:a0:3c:c2:e3:02:0d:0e:ff:
                    2b:e5:0a:4f:04:79:4c:e8:81:b2:62:c4:b6:f9:20:
                    9e:e0:e4:4e:d2:5e:11:37:d4:7a:ad:e4:ae:b6:5c:
                    03:dd:b2:a1:76:2a:dc:f9:e0:6b:f9:70:c8:35:71:
                    a6:0f:a8:de:d9:5c:2b:4b:2f:b6:41:0b:b5:99:a9:
                    ec:cd:96:79:69:3d:3c:b4:b2:81:f4:f3:64:14:ff:
                    15:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BA:F5:ED:F1:14:89:C1:AD:4F:07:11:A3:CB:C6:CC:01:97:1F:12
            X509v3 Authority Key Identifier:
                keyid:CC:58:DA:F2:88:CB:59:CD:86:B8:13:34:56:28:DC:53:5B:34:87:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/CC58DAF288CB59CD86B813345628DC535B34879B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC58DAF288CB59CD86B813345628DC535B34879B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/323830343a376163303a3a2f33322d313238203d3e20323731333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:6e:4a:80:ff:f3:e6:48:56:75:3b:5d:ed:3c:fd:33:a8:17:
         b7:c4:4c:37:fe:2b:d1:a2:35:67:d6:9b:90:5c:76:6d:43:5b:
         27:18:57:ba:99:e2:b8:da:e6:69:8a:cf:77:a1:d2:b3:42:af:
         52:87:fc:e8:df:a2:c3:5a:ad:b4:e7:71:31:45:23:76:52:d6:
         cc:c1:bc:0b:08:0e:f3:e9:48:2c:d5:3d:d8:a7:df:76:ce:3e:
         ed:7c:f8:a2:19:ce:5e:b8:3c:28:fd:7b:e4:24:1d:97:c4:db:
         58:af:48:92:70:6f:5e:f3:6b:f4:67:f4:81:9f:7e:9a:0c:93:
         0e:2e:f1:a3:ac:e1:e0:5b:03:f4:5c:c3:4d:40:f0:c7:7c:ed:
         8a:63:88:43:2d:ae:2a:c3:b4:00:5d:29:f6:95:77:c4:4a:38:
         52:51:5a:49:19:cc:25:f9:7c:66:fb:46:95:2e:b7:12:02:01:
         7f:84:a3:ae:a8:c7:80:01:b4:c7:02:08:63:d8:a0:f2:5a:49:
         25:47:63:7e:bc:2c:e7:d4:85:63:0c:ac:21:b2:90:58:cf:c4:
         7a:62:6a:94:82:df:b3:a8:3a:82:a1:59:99:a4:d3:6e:10:5b:
         1e:c3:9a:44:51:fb:62:f2:8c:93:66:f9:8d:37:ff:41:66:b6:
         cb:9c:06:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:40:56 2026 by rpki-client