Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AcNnt52aUayrVBCi7Ar3gXSW8Ay8EcGGjTyZmN41Jx52/0/323830343a326339303a3a2f33322d3334203d3e20323635323237.roa
File:                     323830343a326339303a3a2f33322d3334203d3e20323635323237.roa (raw, json)
Hash identifier:          4/8g9PJ+wEtWXp5Xr9HoACnSO8sTdiLkNOKRkf0hLhE=
Subject key identifier:   E4:83:26:43:7B:53:65:F1:B6:F5:B8:8A:4C:54:E9:8B:39:20:CF:FB
Certificate issuer:       /CN=7BA5FB6A0A9CAA95AD98B8F0B606885B412F65A3
Certificate serial:       2FDC3E0F7A45DE9DE4BCC6C47C4F3199C46C2E0A
Authority key identifier: 7B:A5:FB:6A:0A:9C:AA:95:AD:98:B8:F0:B6:06:88:5B:41:2F:65:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BA5FB6A0A9CAA95AD98B8F0B606885B412F65A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AcNnt52aUayrVBCi7Ar3gXSW8Ay8EcGGjTyZmN41Jx52/0/323830343a326339303a3a2f33322d3334203d3e20323635323237.roa
Signing time:             Tue 26 May 2026 12:16:14 +0000
ROA not before:           Tue 26 May 2026 12:11:14 +0000
ROA not after:            Tue 25 May 2027 12:16:14 +0000
asID:                     265227
IP address blocks:        2804:2c90::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AcNnt52aUayrVBCi7Ar3gXSW8Ay8EcGGjTyZmN41Jx52/0/7BA5FB6A0A9CAA95AD98B8F0B606885B412F65A3.crl
                          rsync://rpki-repo.registro.br/repo/AcNnt52aUayrVBCi7Ar3gXSW8Ay8EcGGjTyZmN41Jx52/0/7BA5FB6A0A9CAA95AD98B8F0B606885B412F65A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BA5FB6A0A9CAA95AD98B8F0B606885B412F65A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 13:52:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:dc:3e:0f:7a:45:de:9d:e4:bc:c6:c4:7c:4f:31:99:c4:6c:2e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BA5FB6A0A9CAA95AD98B8F0B606885B412F65A3
        Validity
            Not Before: May 26 12:11:14 2026 GMT
            Not After : May 25 12:16:14 2027 GMT
        Subject: CN=E48326437B5365F1B6F5B88A4C54E98B3920CFFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:88:15:49:06:1d:53:cb:1a:d2:b3:e4:1b:7c:
                    a5:4a:97:93:07:a1:68:26:5a:ea:ad:34:25:af:09:
                    eb:81:06:80:36:67:b3:3d:5d:55:5b:bb:6d:36:16:
                    ce:6f:66:13:cd:71:b5:1e:8b:00:93:64:17:d4:1d:
                    41:18:eb:3e:b4:ee:7f:e5:8d:cb:cb:dc:3e:40:c9:
                    a1:3d:df:3c:d7:22:87:d6:50:0b:3c:99:94:0a:bf:
                    e6:1c:22:15:36:7a:6b:0b:f4:42:37:14:5e:df:f9:
                    36:c7:c5:ff:b2:c4:de:25:a4:64:9a:29:88:82:cf:
                    56:0e:d5:8d:c8:14:3b:df:43:36:c5:aa:5c:58:47:
                    45:38:62:27:a0:0c:66:10:c0:a3:8b:e9:88:7a:66:
                    16:81:47:a0:3f:6f:e6:36:04:83:bf:0d:c5:46:a3:
                    6e:45:1c:2f:7d:ac:e2:19:4b:40:48:52:d4:c1:d1:
                    60:f2:d8:1a:db:11:27:33:1b:60:fe:4b:11:23:80:
                    c2:66:02:45:90:da:f8:d2:4d:32:ee:9a:e4:5e:e1:
                    ab:46:ea:e8:61:3d:5d:ad:47:a3:bf:40:e2:11:51:
                    34:99:7e:75:ab:52:a7:af:ef:24:e2:05:da:e4:d2:
                    8c:66:11:3d:81:8c:7f:2a:57:63:f6:a6:dd:90:27:
                    c5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:83:26:43:7B:53:65:F1:B6:F5:B8:8A:4C:54:E9:8B:39:20:CF:FB
            X509v3 Authority Key Identifier:
                keyid:7B:A5:FB:6A:0A:9C:AA:95:AD:98:B8:F0:B6:06:88:5B:41:2F:65:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AcNnt52aUayrVBCi7Ar3gXSW8Ay8EcGGjTyZmN41Jx52/0/7BA5FB6A0A9CAA95AD98B8F0B606885B412F65A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BA5FB6A0A9CAA95AD98B8F0B606885B412F65A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AcNnt52aUayrVBCi7Ar3gXSW8Ay8EcGGjTyZmN41Jx52/0/323830343a326339303a3a2f33322d3334203d3e20323635323237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c90::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:f0:6b:ea:f5:b5:12:77:30:2d:d6:eb:3a:81:61:e5:40:6f:
         04:ae:f7:f8:01:2c:3c:5e:c1:be:e0:cf:5b:92:bc:7b:a2:6a:
         93:02:9e:18:d1:cb:dd:fa:f8:d5:80:69:d2:d1:a7:aa:c6:6f:
         45:f2:94:3e:34:0e:b6:4e:ff:a8:43:0e:dd:02:1c:32:5d:27:
         a7:ba:41:ae:52:fd:17:dd:d0:2f:53:b2:a9:c0:8e:0c:20:b1:
         08:69:55:dd:03:51:b9:41:a8:0b:18:18:37:67:b7:89:dd:31:
         e3:37:8e:a6:15:14:da:e7:23:8e:d5:b7:ea:78:5a:08:42:50:
         c7:28:26:26:d1:51:44:09:15:a9:a7:f7:79:3f:56:36:b8:54:
         bc:e7:8e:27:33:b7:ab:40:04:61:82:35:f0:64:0c:6e:e3:ec:
         69:9a:20:0a:db:d5:dc:ac:22:5a:fd:88:8c:e1:0b:ff:b0:eb:
         fc:d2:b3:fe:54:cc:c5:1d:4c:2c:3f:72:22:2a:65:49:79:06:
         7f:4d:b6:e7:ac:17:23:a9:09:93:69:c1:b7:93:19:b6:16:55:
         4d:56:57:85:aa:8c:bd:84:29:15:28:da:8c:e0:de:72:ae:99:
         26:44:5e:45:b4:61:f7:29:13:ed:78:d0:ef:61:94:c8:d5:67:
         2c:5a:36:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:01:44 2026 by rpki-client