Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/323830343a383331303a3a2f33332d3333203d3e20323732313734.roa
File:                     323830343a383331303a3a2f33332d3333203d3e20323732313734.roa (raw, json)
Hash identifier:          mtfiO5MU2J3zqxBVpd1cxcqRq4DySdlmBBne29m3+W4=
Subject key identifier:   FC:54:AF:25:94:D9:34:2D:C1:6E:E2:8C:07:62:BB:66:63:B9:2C:34
Certificate issuer:       /CN=3757F5C9C1F0D2D4346EC87FDF0C16E89C9E8C66
Certificate serial:       6C04AC8DDD0E587B455B4410E1534077CCB066A2
Authority key identifier: 37:57:F5:C9:C1:F0:D2:D4:34:6E:C8:7F:DF:0C:16:E8:9C:9E:8C:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3757F5C9C1F0D2D4346EC87FDF0C16E89C9E8C66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/323830343a383331303a3a2f33332d3333203d3e20323732313734.roa
Signing time:             Sat 06 Jun 2026 02:12:34 +0000
ROA not before:           Sat 06 Jun 2026 02:07:34 +0000
ROA not after:            Sat 05 Jun 2027 02:12:34 +0000
asID:                     272174
IP address blocks:        2804:8310::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/3757F5C9C1F0D2D4346EC87FDF0C16E89C9E8C66.crl
                          rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/3757F5C9C1F0D2D4346EC87FDF0C16E89C9E8C66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3757F5C9C1F0D2D4346EC87FDF0C16E89C9E8C66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 14:12:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:04:ac:8d:dd:0e:58:7b:45:5b:44:10:e1:53:40:77:cc:b0:66:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3757F5C9C1F0D2D4346EC87FDF0C16E89C9E8C66
        Validity
            Not Before: Jun  6 02:07:34 2026 GMT
            Not After : Jun  5 02:12:34 2027 GMT
        Subject: CN=FC54AF2594D9342DC16EE28C0762BB6663B92C34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:56:12:79:c4:df:a8:a2:df:11:1e:e3:b9:30:
                    9c:68:c2:75:76:33:92:4e:d2:eb:3d:4c:0b:e0:7c:
                    56:fe:ca:48:8d:03:6b:bb:b3:c8:ce:4b:9e:cc:ab:
                    41:88:66:b8:27:3f:21:b5:56:b5:1f:c9:17:b3:4b:
                    e7:1c:8f:13:0f:aa:4e:85:59:57:b7:fb:43:7c:a7:
                    c9:ac:0b:cb:0c:50:7a:1f:60:9b:b7:ae:5f:3d:fe:
                    8e:a0:f1:d7:a1:e9:75:83:e5:96:7a:c2:d3:16:8c:
                    34:0c:28:8e:ca:54:c0:cf:d6:b3:73:38:d8:4a:24:
                    7a:f2:ff:d3:c9:0e:6e:91:dc:44:9f:80:f9:e1:5c:
                    e7:5c:f9:4f:05:6f:4a:68:88:82:3b:5b:d1:bb:15:
                    38:19:0d:e9:00:be:47:c7:22:16:ff:b7:01:f8:65:
                    59:85:2c:db:45:99:a8:e4:4b:6e:9c:fa:d2:d7:2c:
                    d2:7a:9c:cb:7c:9a:ee:25:d6:2a:7e:c3:97:ca:2c:
                    80:fe:2c:21:b1:88:df:62:c0:d2:5f:99:4f:7d:40:
                    6b:06:17:dc:f7:63:7d:f7:33:ed:ef:2a:bd:12:5c:
                    c0:05:b9:dc:4d:0b:2f:42:f7:1d:59:4c:fa:9b:cd:
                    9c:a4:5a:ac:65:1a:72:b8:b3:03:fe:79:d9:f6:d2:
                    cd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:54:AF:25:94:D9:34:2D:C1:6E:E2:8C:07:62:BB:66:63:B9:2C:34
            X509v3 Authority Key Identifier:
                keyid:37:57:F5:C9:C1:F0:D2:D4:34:6E:C8:7F:DF:0C:16:E8:9C:9E:8C:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/3757F5C9C1F0D2D4346EC87FDF0C16E89C9E8C66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3757F5C9C1F0D2D4346EC87FDF0C16E89C9E8C66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/323830343a383331303a3a2f33332d3333203d3e20323732313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8310::/33

    Signature Algorithm: sha256WithRSAEncryption
         0d:81:96:7c:85:be:cd:38:5a:3b:7b:1f:22:de:94:10:d9:99:
         b7:5b:2a:67:29:89:d8:05:46:b9:59:cd:06:4c:5a:65:0f:0b:
         57:b4:a5:f5:b2:19:b1:c8:37:82:26:a0:66:94:91:74:eb:41:
         aa:d5:dc:6e:12:76:7f:25:82:d6:7e:02:62:91:36:08:9e:8b:
         c9:7a:57:88:80:50:5c:c8:f1:74:94:03:a8:c9:8a:1f:4b:20:
         6a:12:c9:60:af:03:14:09:09:25:2a:a6:9d:e9:51:9d:ed:55:
         d6:3b:04:f3:68:b3:d7:28:1a:8a:46:60:e6:d4:ae:44:36:45:
         1a:a3:e0:6b:3f:0e:ed:e9:46:97:9d:07:49:3a:d7:65:3b:b0:
         87:a6:c0:b2:fc:7f:11:e9:cd:fa:51:83:6b:15:2b:d2:fe:cc:
         21:ce:2b:f4:b2:dd:5f:31:7a:f3:f3:b4:36:9d:f0:d1:98:a2:
         08:dd:c6:1d:f6:6c:e5:4c:87:b6:82:26:80:9a:49:3d:51:e7:
         66:04:96:24:1c:7a:90:ab:31:68:b8:ab:ac:12:73:40:14:e1:
         56:9f:20:e6:69:20:ef:bc:41:9f:e6:c4:5e:1b:f9:30:d8:2e:
         05:43:14:7f:9e:0a:96:c2:ab:8a:24:34:f4:56:06:07:cb:9a:
         19:1d:db:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:48:40 2026 by rpki-client