Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/323830343a3939383a3a2f33322d3634203d3e203238353839.roa
File:                     323830343a3939383a3a2f33322d3634203d3e203238353839.roa (raw, json)
Hash identifier:          0F7Zwuu7JXuCEqO5/y4y3RoLEJ8SwZjfXNy+xmzr+ZQ=
Subject key identifier:   B1:5B:2A:81:91:B6:96:4B:A2:FF:B3:A3:25:A6:EB:84:BA:43:43:93
Certificate issuer:       /CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
Certificate serial:       4FFB6063507F1455817C383F6E8E94E6D3A0A200
Authority key identifier: AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/323830343a3939383a3a2f33322d3634203d3e203238353839.roa
Signing time:             Fri 29 May 2026 19:01:46 +0000
ROA not before:           Fri 29 May 2026 18:56:46 +0000
ROA not after:            Fri 28 May 2027 19:01:46 +0000
asID:                     28589
IP address blocks:        2804:998::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl
                          rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 19:37:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:fb:60:63:50:7f:14:55:81:7c:38:3f:6e:8e:94:e6:d3:a0:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
        Validity
            Not Before: May 29 18:56:46 2026 GMT
            Not After : May 28 19:01:46 2027 GMT
        Subject: CN=B15B2A8191B6964BA2FFB3A325A6EB84BA434393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:99:97:44:40:c6:7b:ff:a6:f8:82:ef:6e:e1:
                    b7:15:92:bf:d5:22:8c:33:9a:05:1d:84:e3:35:63:
                    56:38:d8:6c:39:86:b9:77:5c:b7:91:db:90:19:f1:
                    fa:c4:5f:cf:f4:49:7f:ae:e6:91:16:b2:62:35:d0:
                    55:43:4b:84:41:b1:b2:cc:1e:02:0a:69:a0:80:62:
                    0a:ba:b7:06:9a:77:a4:90:18:bc:04:66:11:be:99:
                    b3:e4:12:68:7b:de:7b:d8:05:4b:7c:65:f8:2e:ca:
                    c8:53:45:07:11:69:e8:19:f3:db:aa:4c:06:ee:d7:
                    ae:42:83:d3:95:31:7b:31:e7:38:ef:fa:32:09:da:
                    04:20:15:f9:b7:81:4f:5c:ac:aa:b6:54:79:ff:de:
                    85:87:4e:55:5f:22:a7:ec:33:a7:34:7d:6a:29:f6:
                    97:bf:d3:25:a6:c1:10:34:89:07:50:af:03:07:fc:
                    a4:99:5e:76:61:1d:32:fc:6e:90:fd:31:2c:10:2b:
                    f8:13:7d:3d:01:fe:4f:38:85:85:31:72:23:fc:09:
                    52:9e:f6:01:e2:31:15:b6:c6:5f:02:26:41:d8:5c:
                    35:80:a4:48:1f:0a:22:32:dd:a6:c1:37:ab:73:35:
                    5e:c6:4d:5c:42:6a:ce:7f:b4:12:c3:12:d4:17:1c:
                    1a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:5B:2A:81:91:B6:96:4B:A2:FF:B3:A3:25:A6:EB:84:BA:43:43:93
            X509v3 Authority Key Identifier:
                keyid:AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/323830343a3939383a3a2f33322d3634203d3e203238353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:998::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:e0:6f:fc:80:2e:4d:93:ed:20:51:32:8d:8c:08:6a:c7:ad:
         88:47:77:30:ea:80:de:7c:c0:d6:0f:40:29:ac:09:68:0a:fb:
         ee:db:de:7f:02:4e:32:79:1a:de:ef:87:0b:be:3b:9d:49:17:
         9c:4f:4a:90:77:90:2d:f5:c0:63:e9:ce:a8:78:16:23:64:6d:
         5e:d8:74:a2:f5:7f:9e:e1:30:de:c8:ef:00:0e:87:fb:93:d8:
         ed:33:e1:d0:06:b0:3b:b1:5f:8c:38:fb:46:72:9a:d5:0b:14:
         7c:8e:a8:2c:75:74:98:52:be:27:e2:e5:50:0e:3d:b6:be:ac:
         09:a8:a7:a4:81:6b:5e:27:00:30:6e:e4:26:a4:ab:07:08:7a:
         73:e9:62:af:41:9d:9f:cc:3c:46:af:ac:ad:ea:be:2c:df:9d:
         0c:32:07:46:3f:e0:60:71:81:6c:dc:2c:28:ae:db:e0:4a:dc:
         80:86:da:47:52:41:71:92:c9:56:e6:fd:c6:62:e7:da:1b:25:
         df:d2:bd:a9:5e:07:31:5e:5e:8d:eb:29:11:89:08:f5:47:97:
         ab:d4:cf:da:52:be:b6:f1:61:ae:d0:ae:fd:a8:f9:ef:b6:84:
         be:32:25:71:f0:73:28:59:91:34:90:2b:ae:2d:e9:90:1c:b3:
         9b:aa:96:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:38:04 2026 by rpki-client