Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/323830343a316434633a3a2f33322d3335203d3e20323634333539.roa
File:                     323830343a316434633a3a2f33322d3335203d3e20323634333539.roa (raw, json)
Hash identifier:          Sukf73fTwkCotXW1E7wwO0+xVPSZ+scNuabD4j5E0Hg=
Subject key identifier:   40:6F:EF:7E:34:8E:B8:6E:D4:D7:DC:8E:70:8E:AB:88:1D:27:6E:5E
Certificate issuer:       /CN=FF8A5F40D9FABC2A93C53F69C09473AA3CA5FA3D
Certificate serial:       21218B2D297D3743BD9F9931302922AEA4C4B16B
Authority key identifier: FF:8A:5F:40:D9:FA:BC:2A:93:C5:3F:69:C0:94:73:AA:3C:A5:FA:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF8A5F40D9FABC2A93C53F69C09473AA3CA5FA3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/323830343a316434633a3a2f33322d3335203d3e20323634333539.roa
Signing time:             Mon 25 May 2026 15:12:28 +0000
ROA not before:           Mon 25 May 2026 15:07:28 +0000
ROA not after:            Mon 24 May 2027 15:12:28 +0000
asID:                     264359
IP address blocks:        2804:1d4c::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/FF8A5F40D9FABC2A93C53F69C09473AA3CA5FA3D.crl
                          rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/FF8A5F40D9FABC2A93C53F69C09473AA3CA5FA3D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF8A5F40D9FABC2A93C53F69C09473AA3CA5FA3D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:14:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:21:8b:2d:29:7d:37:43:bd:9f:99:31:30:29:22:ae:a4:c4:b1:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF8A5F40D9FABC2A93C53F69C09473AA3CA5FA3D
        Validity
            Not Before: May 25 15:07:28 2026 GMT
            Not After : May 24 15:12:28 2027 GMT
        Subject: CN=406FEF7E348EB86ED4D7DC8E708EAB881D276E5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:00:d9:e4:4c:b5:ef:e3:1c:96:cd:bf:57:89:
                    d3:6c:69:a7:a7:20:12:5c:2e:81:69:40:9f:d8:e9:
                    5f:c1:3e:74:28:7a:40:9c:ff:0c:e3:f7:ed:56:d1:
                    05:a1:68:24:e6:4f:b1:2f:eb:bb:f6:1d:66:d1:e2:
                    7b:c6:89:e3:b1:55:b4:58:b8:91:4d:26:82:32:c4:
                    90:b2:84:12:af:63:1a:22:61:79:92:dc:ca:74:50:
                    c8:6f:69:75:44:51:49:44:d0:8f:cf:01:5e:1f:d5:
                    e1:75:ff:92:1a:60:c1:e6:ff:2c:a8:e7:6b:17:a9:
                    d4:ae:e6:af:43:19:1b:69:3d:ff:56:29:b3:e5:11:
                    07:23:14:7b:4c:af:cf:6f:07:f8:56:0b:84:c0:b1:
                    ff:b5:d9:cf:90:47:eb:c6:ca:e8:d3:b0:66:f8:25:
                    27:03:27:e7:42:9e:8f:96:e9:65:cd:5c:e1:e7:c4:
                    b2:db:c2:bb:bf:30:41:39:9f:0d:b1:9e:33:a3:e0:
                    20:5a:25:80:a4:10:46:7c:7b:b0:6c:3b:cd:98:80:
                    8b:de:c4:e9:f3:31:60:fa:67:ef:5f:71:0f:46:2e:
                    c7:3e:d9:96:a3:d8:af:c5:a0:fd:06:4e:5b:6d:27:
                    27:07:44:ee:aa:40:63:a1:05:d3:e3:ce:c7:5e:a9:
                    21:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:6F:EF:7E:34:8E:B8:6E:D4:D7:DC:8E:70:8E:AB:88:1D:27:6E:5E
            X509v3 Authority Key Identifier:
                keyid:FF:8A:5F:40:D9:FA:BC:2A:93:C5:3F:69:C0:94:73:AA:3C:A5:FA:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/FF8A5F40D9FABC2A93C53F69C09473AA3CA5FA3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF8A5F40D9FABC2A93C53F69C09473AA3CA5FA3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/323830343a316434633a3a2f33322d3335203d3e20323634333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:f3:6d:2e:63:b4:9d:c2:c6:14:49:b6:ed:36:1f:0b:e0:cf:
         4d:5d:89:54:05:6a:72:2b:d0:ea:2a:bb:7b:98:6e:48:de:10:
         69:01:3b:66:25:34:42:9a:95:f7:47:97:9c:b4:40:1e:15:16:
         48:1e:d3:8b:49:33:aa:70:2b:94:9a:5d:58:fc:49:26:cd:14:
         ed:1e:81:ca:bb:88:b7:8e:7e:06:98:08:7d:c9:42:df:a3:7b:
         74:4a:49:01:6a:e9:ed:83:96:f0:82:16:48:d0:95:80:9d:a6:
         05:29:5c:82:d8:31:3f:21:68:e6:24:3f:94:42:0e:04:42:4a:
         77:19:2b:5d:61:e7:ed:dd:fd:cf:87:6c:62:7e:5e:c7:24:09:
         6d:94:07:7e:4a:f6:60:2c:30:49:41:73:0e:1e:21:08:70:8d:
         1b:a4:4e:d4:8d:bb:09:2b:76:7d:c4:56:b4:53:34:b7:e8:2b:
         92:e5:02:e6:ae:db:3c:4a:b5:0b:4f:cc:89:7b:8d:35:a5:e7:
         b8:68:ca:65:90:37:70:df:9e:71:d9:bf:3e:32:fe:9f:83:54:
         53:fd:46:e3:64:79:b1:b1:c4:c8:13:81:f3:e9:0b:52:4c:0d:
         5e:b3:54:6c:9a:e2:77:51:3b:9b:62:ea:9f:be:47:90:f5:82:
         2e:ac:09:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:21:07 2026 by rpki-client