Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/323830343a353836343a3a2f33322d3438203d3e20323638313236.roa
File:                     323830343a353836343a3a2f33322d3438203d3e20323638313236.roa (raw, json)
Hash identifier:          chRVtIHp6nGMrIJDPNgi91hUKOAdUo7jD9sDVcZvxOk=
Subject key identifier:   F9:3A:38:81:B5:A8:08:CE:4E:DB:EF:A7:DB:95:D6:8F:2D:94:B1:7F
Certificate issuer:       /CN=AB947FB292EAC0791DC1DB5B5D0A4C4C390241E5
Certificate serial:       58D795891785B6086AC799C56889AD33D4C9320E
Authority key identifier: AB:94:7F:B2:92:EA:C0:79:1D:C1:DB:5B:5D:0A:4C:4C:39:02:41:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB947FB292EAC0791DC1DB5B5D0A4C4C390241E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/323830343a353836343a3a2f33322d3438203d3e20323638313236.roa
Signing time:             Fri 12 Jun 2026 15:23:39 +0000
ROA not before:           Fri 12 Jun 2026 15:18:39 +0000
ROA not after:            Fri 11 Jun 2027 15:23:39 +0000
asID:                     268126
IP address blocks:        2804:5864::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/AB947FB292EAC0791DC1DB5B5D0A4C4C390241E5.crl
                          rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/AB947FB292EAC0791DC1DB5B5D0A4C4C390241E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB947FB292EAC0791DC1DB5B5D0A4C4C390241E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d7:95:89:17:85:b6:08:6a:c7:99:c5:68:89:ad:33:d4:c9:32:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB947FB292EAC0791DC1DB5B5D0A4C4C390241E5
        Validity
            Not Before: Jun 12 15:18:39 2026 GMT
            Not After : Jun 11 15:23:39 2027 GMT
        Subject: CN=F93A3881B5A808CE4EDBEFA7DB95D68F2D94B17F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1d:37:67:f9:de:77:d5:56:be:9b:72:64:bf:
                    2c:81:6c:9b:d8:ce:9c:20:8c:6d:b1:9e:ee:f1:db:
                    18:6a:32:09:a3:75:1c:10:c5:7f:77:a2:1f:96:57:
                    ab:91:33:73:49:8a:9f:bb:ee:e4:49:4a:d7:c2:92:
                    5a:50:ba:cc:32:dc:02:f6:1c:ba:92:37:63:35:68:
                    95:26:57:48:6c:eb:99:04:8e:79:ba:f6:fc:d6:c5:
                    4b:25:70:34:ce:c9:76:f4:49:a4:e7:5b:86:d4:b8:
                    74:07:e6:08:2a:00:91:50:96:33:2f:c4:db:43:96:
                    78:6f:e1:b8:0b:cf:93:a0:2f:d0:58:07:6b:4d:d6:
                    a0:bc:97:cb:e0:bf:f0:39:3f:6f:7b:2c:73:fa:6f:
                    12:66:b6:03:4f:ef:cf:53:f6:cb:ed:30:8f:05:62:
                    58:cf:4c:59:d0:9e:da:df:0c:91:a2:29:73:10:09:
                    a7:1c:60:08:57:15:13:ed:e7:27:ea:8c:93:71:24:
                    58:24:87:ff:2b:ae:3b:4f:d1:b4:d6:83:02:c3:13:
                    94:af:91:1b:ff:04:78:dd:77:a1:7e:c2:9a:9b:21:
                    b6:a1:14:06:a6:3d:45:b3:34:8f:2b:45:a3:f4:bc:
                    09:a3:24:1c:6c:5c:65:c8:30:72:50:47:e0:b4:68:
                    e9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3A:38:81:B5:A8:08:CE:4E:DB:EF:A7:DB:95:D6:8F:2D:94:B1:7F
            X509v3 Authority Key Identifier:
                keyid:AB:94:7F:B2:92:EA:C0:79:1D:C1:DB:5B:5D:0A:4C:4C:39:02:41:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/AB947FB292EAC0791DC1DB5B5D0A4C4C390241E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB947FB292EAC0791DC1DB5B5D0A4C4C390241E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/323830343a353836343a3a2f33322d3438203d3e20323638313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5864::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:1c:0a:a8:02:92:9f:79:62:ad:08:41:f2:9b:7d:b2:24:af:
         8c:4a:02:be:46:ae:43:00:2a:57:f0:68:c5:8e:e6:58:96:27:
         dd:82:ce:e0:de:b7:48:66:f8:4d:e7:d9:f5:8c:86:44:cf:39:
         07:c0:cc:c1:c9:8d:26:dd:24:ab:14:f6:e0:38:84:32:06:c6:
         87:ba:fa:b1:c0:8b:78:98:e6:74:0f:e9:2b:03:1c:b7:fe:2c:
         32:0f:d3:1f:ea:56:12:23:b7:5d:d9:bb:9a:bf:a3:07:49:dc:
         b1:fa:91:56:85:63:3e:5c:a1:56:1d:22:bd:cb:77:13:c0:0b:
         d9:5a:68:13:f1:e0:cd:42:85:f6:19:90:8d:8a:2b:8e:1f:64:
         33:a0:8a:c2:a0:31:ab:27:cb:30:94:15:b1:d0:94:2f:d4:85:
         65:6c:63:81:00:50:34:b9:2c:2e:b6:af:29:b0:40:a1:37:1c:
         00:73:bc:8f:d3:92:2d:b4:08:5c:51:17:4c:13:1d:67:4a:e1:
         03:3b:67:ae:ca:d1:7e:9b:bd:48:2e:3d:80:1b:74:65:d8:44:
         21:b1:7a:85:12:53:2b:bb:17:a0:e9:98:fd:c3:e9:c7:ea:bb:
         b1:7e:2b:f6:f9:95:f1:13:97:f1:79:39:9c:9d:67:37:ec:7b:
         25:74:6b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:29:45 2026 by rpki-client