Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/323830343a6365633a3a2f33322d3332203d3e203532353735.roa
File:                     323830343a6365633a3a2f33322d3332203d3e203532353735.roa (raw, json)
Hash identifier:          1pnRkrd7fUyY43JjnT+ejXXirCUmPMhIpo4dY9CJvF4=
Subject key identifier:   BE:82:35:AF:B2:4C:4F:27:4C:55:3E:ED:09:B0:C8:5F:80:97:03:E7
Certificate issuer:       /CN=3260D5B977B09CA3A78FE87024E3A07443C93270
Certificate serial:       7003D2346413D92156161F9CD4D785723185AB20
Authority key identifier: 32:60:D5:B9:77:B0:9C:A3:A7:8F:E8:70:24:E3:A0:74:43:C9:32:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3260D5B977B09CA3A78FE87024E3A07443C93270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/323830343a6365633a3a2f33322d3332203d3e203532353735.roa
Signing time:             Tue 14 Apr 2026 16:33:16 +0000
ROA not before:           Tue 14 Apr 2026 16:28:16 +0000
ROA not after:            Tue 13 Apr 2027 16:33:16 +0000
asID:                     52575
IP address blocks:        2804:cec::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3260D5B977B09CA3A78FE87024E3A07443C93270.crl
                          rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3260D5B977B09CA3A78FE87024E3A07443C93270.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3260D5B977B09CA3A78FE87024E3A07443C93270.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 15:54:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:03:d2:34:64:13:d9:21:56:16:1f:9c:d4:d7:85:72:31:85:ab:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3260D5B977B09CA3A78FE87024E3A07443C93270
        Validity
            Not Before: Apr 14 16:28:16 2026 GMT
            Not After : Apr 13 16:33:16 2027 GMT
        Subject: CN=BE8235AFB24C4F274C553EED09B0C85F809703E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:82:21:86:23:bb:13:fd:18:e7:fa:47:a9:83:
                    2b:30:f9:a9:5d:2a:7b:60:9b:0a:93:ac:8d:94:3f:
                    ce:08:c4:40:41:36:44:6c:68:78:47:55:e6:cd:e6:
                    85:65:30:9c:8f:a5:f9:26:44:74:87:b2:6e:7e:2f:
                    44:89:3c:e9:12:a0:b6:fd:1c:5d:27:3d:ae:b8:0a:
                    5d:2a:34:3b:f0:52:91:39:ce:39:65:40:75:0c:14:
                    b4:5c:7e:f4:66:d8:f7:c5:13:fe:26:9a:0e:bb:34:
                    bc:e2:c5:3c:0b:88:bc:54:e7:c0:f5:ce:4c:ac:b8:
                    67:6b:99:47:57:4d:0b:28:7f:4a:a4:ce:a9:e9:1d:
                    91:94:35:c1:53:c0:b0:49:b9:a6:4b:78:6f:f4:0a:
                    ab:d3:69:48:e9:11:4a:74:88:b6:14:47:32:db:8d:
                    9d:37:89:43:51:7d:d0:4a:9d:61:c2:dc:1d:b5:cb:
                    49:88:74:ca:37:5c:1e:39:9c:94:5d:18:42:09:bb:
                    9a:6d:ee:8f:5e:e9:8f:7f:0a:71:cb:e1:66:3a:d4:
                    e4:0c:ff:3e:f3:ca:b1:e7:5d:78:34:dc:0d:b2:8c:
                    dd:b7:f3:9e:6c:41:cc:55:c3:aa:47:41:95:16:1e:
                    1e:8d:c3:0c:53:5b:c7:c9:04:1d:99:22:7d:36:33:
                    37:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:82:35:AF:B2:4C:4F:27:4C:55:3E:ED:09:B0:C8:5F:80:97:03:E7
            X509v3 Authority Key Identifier:
                keyid:32:60:D5:B9:77:B0:9C:A3:A7:8F:E8:70:24:E3:A0:74:43:C9:32:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3260D5B977B09CA3A78FE87024E3A07443C93270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3260D5B977B09CA3A78FE87024E3A07443C93270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/323830343a6365633a3a2f33322d3332203d3e203532353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cec::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:dc:8e:8f:3f:07:a7:37:9b:c4:d7:8d:8c:f3:55:d7:d3:21:
         27:19:5e:c5:b2:41:a0:68:4d:ee:a3:0e:b1:63:43:14:20:85:
         96:ac:d9:69:4d:af:50:a5:0d:d9:be:54:53:26:fb:d6:a4:ea:
         5b:44:1f:fc:d4:11:bf:c4:b5:3d:5c:f4:b7:c8:76:83:72:7f:
         00:88:3d:49:4d:9a:54:3b:66:1e:2a:06:82:4b:83:c9:3a:66:
         c7:3d:ff:31:4c:f4:aa:59:4b:b5:62:23:79:11:47:07:61:07:
         fb:ec:e3:e6:e7:5a:c0:7e:f9:6a:88:fa:8e:37:62:2b:b3:08:
         63:d4:f8:c1:ed:0e:3a:a9:d3:0a:48:46:84:94:a5:11:4c:be:
         00:de:4a:d9:94:26:5f:7f:09:2f:a4:2b:75:12:8a:31:b3:9f:
         c7:72:a7:f7:9d:f9:c7:d8:be:c6:a9:5e:be:16:2f:83:0a:1a:
         50:ed:11:6a:ac:3b:c0:80:f4:6e:55:20:01:6b:e6:dc:d6:40:
         a3:68:3b:82:1d:f3:6e:d7:fb:23:3b:1c:0d:0e:50:82:c6:dd:
         81:cd:c4:dd:05:2f:86:a0:ce:f0:1b:12:e1:c5:e2:4e:12:0a:
         8f:b4:df:e4:69:ef:33:4b:87:73:ff:7f:7d:40:79:f8:44:50:
         5b:cf:a9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:02:12 2026 by rpki-client