Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/323830343a383331303a3a2f33342d3334203d3e20323732313734.roa
File:                     323830343a383331303a3a2f33342d3334203d3e20323732313734.roa (raw, json)
Hash identifier:          4P2GbzQEgrQAa9VJxaP0lGBy/eafWRKBXHoH8V4mc34=
Subject key identifier:   B5:39:48:11:5D:0E:A4:C8:01:F9:89:8C:83:FF:82:64:19:71:8A:C6
Certificate issuer:       /CN=3757F5C9C1F0D2D4346EC87FDF0C16E89C9E8C66
Certificate serial:       7546B3444D81987235F8746FA69B62776804C4DA
Authority key identifier: 37:57:F5:C9:C1:F0:D2:D4:34:6E:C8:7F:DF:0C:16:E8:9C:9E:8C:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3757F5C9C1F0D2D4346EC87FDF0C16E89C9E8C66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/323830343a383331303a3a2f33342d3334203d3e20323732313734.roa
Signing time:             Sat 06 Jun 2026 02:13:54 +0000
ROA not before:           Sat 06 Jun 2026 02:08:54 +0000
ROA not after:            Sat 05 Jun 2027 02:13:54 +0000
asID:                     272174
IP address blocks:        2804:8310::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/3757F5C9C1F0D2D4346EC87FDF0C16E89C9E8C66.crl
                          rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/3757F5C9C1F0D2D4346EC87FDF0C16E89C9E8C66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3757F5C9C1F0D2D4346EC87FDF0C16E89C9E8C66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 14:12:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:46:b3:44:4d:81:98:72:35:f8:74:6f:a6:9b:62:77:68:04:c4:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3757F5C9C1F0D2D4346EC87FDF0C16E89C9E8C66
        Validity
            Not Before: Jun  6 02:08:54 2026 GMT
            Not After : Jun  5 02:13:54 2027 GMT
        Subject: CN=B53948115D0EA4C801F9898C83FF826419718AC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d0:13:20:a4:c8:d5:75:05:f4:ca:57:ac:81:
                    e7:65:b0:5a:12:94:06:7d:d8:7b:94:39:cd:6f:6c:
                    11:97:82:3c:aa:9e:e0:4b:65:ea:5a:fc:26:cf:12:
                    60:36:16:dc:84:46:d5:18:81:fc:a7:63:db:81:88:
                    48:17:c5:d7:38:7c:f3:80:6a:56:e6:cc:75:19:48:
                    57:dc:47:b6:df:38:01:91:37:0b:c4:37:2a:11:e0:
                    93:8d:83:e4:bc:10:03:a5:be:00:c4:73:9f:27:ca:
                    f0:ad:6d:93:3b:06:d9:c5:20:57:9c:9e:ab:8e:f3:
                    85:28:dc:8e:66:33:54:ee:83:b3:9b:40:ad:e9:91:
                    3c:48:17:f6:d3:29:d9:16:0a:62:0e:15:99:c3:63:
                    33:6d:8b:00:aa:db:2b:2b:ba:79:08:32:43:66:8c:
                    2c:2a:a4:bb:38:73:32:4f:9b:a5:26:9e:f0:ae:24:
                    57:75:2d:c6:d6:5d:c4:16:0d:72:d5:6b:fa:eb:f0:
                    3a:67:ff:85:c4:95:57:f2:7d:9f:bb:1f:21:1e:42:
                    b8:4c:b7:69:48:65:87:36:15:6d:a5:13:6b:4f:86:
                    84:ed:a8:42:00:6a:8e:53:09:d7:47:a3:c1:2b:cf:
                    86:84:71:55:b4:b4:aa:71:fa:3b:85:47:4c:1a:ff:
                    d2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:39:48:11:5D:0E:A4:C8:01:F9:89:8C:83:FF:82:64:19:71:8A:C6
            X509v3 Authority Key Identifier:
                keyid:37:57:F5:C9:C1:F0:D2:D4:34:6E:C8:7F:DF:0C:16:E8:9C:9E:8C:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/3757F5C9C1F0D2D4346EC87FDF0C16E89C9E8C66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3757F5C9C1F0D2D4346EC87FDF0C16E89C9E8C66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/323830343a383331303a3a2f33342d3334203d3e20323732313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8310::/34

    Signature Algorithm: sha256WithRSAEncryption
         21:71:fd:4f:6f:bb:63:8d:92:db:d4:1a:4d:c3:08:d8:0b:ba:
         da:e7:6b:60:28:d8:c1:a7:c0:b3:7b:81:ad:78:d1:93:69:ed:
         12:9d:a3:02:75:73:30:70:38:58:3b:fb:ac:97:85:b9:25:23:
         7e:54:eb:22:e0:07:70:0e:58:e2:4f:61:d5:47:5b:2b:d2:bb:
         bb:19:e9:57:2a:0a:42:2a:ba:66:78:28:05:36:21:da:26:ee:
         7b:35:a3:a2:05:0f:eb:d9:e0:00:64:a8:aa:04:26:e6:e3:af:
         14:36:93:9f:bc:12:c5:0f:b2:b5:92:b9:95:1a:13:24:6f:74:
         32:90:a7:37:e6:5d:16:7b:22:3b:4c:ec:e3:da:4a:28:42:a2:
         0d:01:21:3e:2a:16:d6:a9:57:bc:08:6d:63:5f:3f:20:e1:69:
         0d:9f:b2:8d:40:b2:d0:f4:69:aa:06:21:e1:2e:76:54:39:9a:
         9f:19:9b:8e:75:30:04:5e:78:a1:4b:81:60:4d:e2:45:1b:c8:
         67:71:f4:23:b6:47:44:e0:21:a2:5d:d2:0d:d4:9e:79:b4:48:
         47:dc:55:82:90:24:eb:6f:08:ef:9c:b3:06:3d:d3:77:fc:22:
         1e:41:e3:f9:f1:7a:b1:52:c3:06:cc:6f:28:32:96:ce:85:2e:
         1c:f6:21:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:48:51 2026 by rpki-client