Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QFh71nUnuhweHKBwdYvoU2CacsVbSEYdTcaTjcTD2ts/0/323830343a356435303a3a2f33322d313238203d3e20323638393634.roa
File:                     323830343a356435303a3a2f33322d313238203d3e20323638393634.roa (raw, json)
Hash identifier:          6DYZ/GH/00AwmKLQSOKYOOSjjBTNZzdUZmdBzZi0V0U=
Subject key identifier:   1D:9C:0E:6E:41:AD:57:40:CE:F4:5D:35:BA:40:C7:2D:27:59:CC:5D
Certificate issuer:       /CN=32C41D69081682DAC1F2F005F9EFD4E9624DB131
Certificate serial:       765DAA51B982BB96FD9CFCB5D750FC09C4D02E5A
Authority key identifier: 32:C4:1D:69:08:16:82:DA:C1:F2:F0:05:F9:EF:D4:E9:62:4D:B1:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C41D69081682DAC1F2F005F9EFD4E9624DB131.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QFh71nUnuhweHKBwdYvoU2CacsVbSEYdTcaTjcTD2ts/0/323830343a356435303a3a2f33322d313238203d3e20323638393634.roa
Signing time:             Fri 05 Jun 2026 16:15:10 +0000
ROA not before:           Fri 05 Jun 2026 16:10:10 +0000
ROA not after:            Fri 04 Jun 2027 16:15:10 +0000
asID:                     268964
IP address blocks:        2804:5d50::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4QFh71nUnuhweHKBwdYvoU2CacsVbSEYdTcaTjcTD2ts/0/32C41D69081682DAC1F2F005F9EFD4E9624DB131.crl
                          rsync://rpki-repo.registro.br/repo/4QFh71nUnuhweHKBwdYvoU2CacsVbSEYdTcaTjcTD2ts/0/32C41D69081682DAC1F2F005F9EFD4E9624DB131.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C41D69081682DAC1F2F005F9EFD4E9624DB131.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:29:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:5d:aa:51:b9:82:bb:96:fd:9c:fc:b5:d7:50:fc:09:c4:d0:2e:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32C41D69081682DAC1F2F005F9EFD4E9624DB131
        Validity
            Not Before: Jun  5 16:10:10 2026 GMT
            Not After : Jun  4 16:15:10 2027 GMT
        Subject: CN=1D9C0E6E41AD5740CEF45D35BA40C72D2759CC5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a4:b4:35:36:55:c4:93:11:2d:58:12:ec:8a:
                    e8:aa:ca:c2:de:de:c8:d4:d5:60:90:61:75:83:3a:
                    ce:54:2e:ef:f3:05:f7:2a:18:f1:57:c4:09:e4:c3:
                    2e:5b:a9:db:33:88:cd:62:60:1d:20:68:4b:0b:89:
                    fe:9b:d3:23:b5:a4:e6:c2:16:e3:d3:b2:a5:83:e1:
                    65:88:57:c9:a5:3a:49:20:b6:d4:d1:53:b5:09:dd:
                    90:6f:b6:2d:0c:f2:da:3d:7d:c2:19:ca:3c:da:d8:
                    47:6a:19:ab:80:e1:ec:8b:50:5d:f5:a0:32:f6:12:
                    fd:d6:39:08:8d:db:31:ba:f8:70:9c:23:22:8d:6a:
                    a7:80:30:fa:43:49:fd:5d:bc:46:cb:b6:53:c2:8d:
                    09:cb:5c:48:52:d1:2e:5e:49:7f:f6:23:8f:c8:58:
                    e6:d1:f7:a5:e2:eb:98:8d:5f:c2:fe:01:14:a8:50:
                    a1:88:16:4a:94:bc:8e:59:03:95:e8:f1:16:9f:bd:
                    51:ab:12:76:2d:d0:26:29:1a:1c:bd:08:f9:da:a4:
                    b6:78:a6:aa:47:1c:9d:81:db:2b:7a:8a:31:9b:cb:
                    92:3e:a8:55:0b:ed:22:a0:ea:b8:7e:bd:1a:90:2a:
                    66:5d:b5:9a:b0:9e:e9:b6:cc:9b:b6:2e:79:e4:1f:
                    f7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:9C:0E:6E:41:AD:57:40:CE:F4:5D:35:BA:40:C7:2D:27:59:CC:5D
            X509v3 Authority Key Identifier:
                keyid:32:C4:1D:69:08:16:82:DA:C1:F2:F0:05:F9:EF:D4:E9:62:4D:B1:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QFh71nUnuhweHKBwdYvoU2CacsVbSEYdTcaTjcTD2ts/0/32C41D69081682DAC1F2F005F9EFD4E9624DB131.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C41D69081682DAC1F2F005F9EFD4E9624DB131.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QFh71nUnuhweHKBwdYvoU2CacsVbSEYdTcaTjcTD2ts/0/323830343a356435303a3a2f33322d313238203d3e20323638393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5d50::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:09:ab:7b:f7:a8:71:36:3c:98:b1:37:7a:23:71:4b:39:f2:
         93:12:65:7f:ef:ea:6e:6b:d2:66:f8:59:dc:c7:b1:b7:92:9a:
         75:36:94:54:55:c7:93:d5:44:98:e8:c6:3f:80:77:59:cb:a4:
         bc:59:6a:29:ba:10:65:88:78:b3:21:b1:b2:df:f8:57:b3:c4:
         ff:fb:66:54:73:17:98:d7:c6:f2:33:e8:dd:22:9e:7c:4e:3b:
         f4:20:23:e1:59:54:85:ea:63:0e:15:47:35:64:4f:49:50:4c:
         9f:d4:a5:13:93:87:8c:4f:59:7f:cc:3f:79:51:ed:a4:e3:51:
         f8:e3:d3:98:ff:a4:f2:35:12:15:9c:9a:1d:9b:b3:af:d3:e9:
         c9:d9:51:56:af:10:e1:18:66:ac:d3:28:e7:c5:db:ba:39:70:
         e7:43:22:45:2b:ef:c2:43:86:de:e6:ff:b8:ae:10:47:e5:2e:
         c2:06:87:43:3a:71:5b:60:6b:37:51:aa:6b:28:7d:e0:ec:87:
         7a:bd:4d:db:ba:fe:dd:5b:0f:b0:ae:d6:9a:8c:59:65:90:b7:
         3c:f3:75:eb:46:fe:67:29:db:ea:99:4b:52:a1:6d:22:d0:cd:
         15:e5:05:9f:c3:97:fe:2a:53:7c:ba:99:12:c9:fb:80:45:d4:
         bc:d8:27:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:14:20 2026 by rpki-client