Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/323830343a356335303a3a2f33322d313238203d3e20323638393031.roa
File:                     323830343a356335303a3a2f33322d313238203d3e20323638393031.roa (raw, json)
Hash identifier:          dXiLXgHjXW/3CvwypBIIbp1Z42CwfhJvuV12x5AWPD4=
Subject key identifier:   5A:A3:18:A3:83:85:DD:C8:7E:DB:72:25:77:84:99:37:90:03:53:50
Certificate issuer:       /CN=358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51
Certificate serial:       2AA67A524706A757D688B22533CCEF46A30522EA
Authority key identifier: 35:8D:0C:BA:1A:BA:22:62:A3:AF:D5:F8:2C:60:EF:92:BD:58:7C:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/323830343a356335303a3a2f33322d313238203d3e20323638393031.roa
Signing time:             Tue 26 May 2026 11:27:41 +0000
ROA not before:           Tue 26 May 2026 11:22:41 +0000
ROA not after:            Tue 25 May 2027 11:27:41 +0000
asID:                     268901
IP address blocks:        2804:5c50::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.crl
                          rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 19:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a6:7a:52:47:06:a7:57:d6:88:b2:25:33:cc:ef:46:a3:05:22:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51
        Validity
            Not Before: May 26 11:22:41 2026 GMT
            Not After : May 25 11:27:41 2027 GMT
        Subject: CN=5AA318A38385DDC87EDB72257784993790035350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0f:39:82:e5:95:29:fe:e5:c3:40:66:94:2e:
                    1d:16:3d:03:5e:c8:54:8f:96:f3:7e:12:d5:b5:e4:
                    16:f1:3d:0a:7a:67:50:c7:1a:97:48:87:6e:7e:77:
                    61:2d:c0:35:58:c4:39:d5:91:4c:3b:ff:ab:77:5b:
                    5a:67:9d:13:b5:e9:3c:38:fa:55:8f:34:98:fa:ed:
                    26:17:87:0e:16:4e:b1:14:03:e1:36:21:8d:ad:0c:
                    5a:c0:4d:29:b0:62:ba:e1:fd:17:ac:bd:4a:dd:cd:
                    e5:7c:db:04:a2:2b:1b:a8:07:34:06:4e:47:07:40:
                    ef:ea:96:67:86:6f:e3:7a:7b:13:a1:35:fd:52:f7:
                    aa:d8:07:d9:09:4c:cd:ab:80:60:66:43:4e:36:af:
                    5f:84:4c:ba:c0:e2:b7:19:03:3b:b6:54:9d:b6:70:
                    a0:aa:3d:5c:ff:9b:b6:ac:02:10:b7:21:4a:23:a7:
                    29:3d:65:33:fb:90:3a:b4:85:38:74:33:a1:34:9c:
                    c7:d6:c2:1c:ba:a5:da:30:b0:f8:4f:f9:d5:6b:c3:
                    37:93:49:1b:97:62:80:c7:9d:40:42:fa:46:93:49:
                    d9:42:c5:04:5c:c5:1e:4a:14:55:a8:e1:12:7c:ee:
                    29:02:a7:e5:3f:6f:c1:88:bc:9b:8c:82:74:60:29:
                    35:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A3:18:A3:83:85:DD:C8:7E:DB:72:25:77:84:99:37:90:03:53:50
            X509v3 Authority Key Identifier:
                keyid:35:8D:0C:BA:1A:BA:22:62:A3:AF:D5:F8:2C:60:EF:92:BD:58:7C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/323830343a356335303a3a2f33322d313238203d3e20323638393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c50::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:b9:78:ed:c4:4a:96:44:fe:2f:45:9d:88:96:97:7a:f3:c8:
         f7:19:58:ff:a8:e1:1e:fc:de:00:19:98:14:24:62:ef:ad:87:
         cc:d7:2d:ab:b9:79:f7:17:b4:ea:42:d9:1e:92:0a:31:9f:d3:
         64:63:43:1c:a6:b5:f3:68:c2:b9:29:02:25:79:3f:61:20:df:
         d9:34:f3:f1:a6:41:e5:1e:28:16:17:51:fd:e2:fd:a9:20:fc:
         12:50:fd:5d:9a:48:a6:7a:a3:b7:33:f0:75:cc:94:3e:73:18:
         8e:9a:0a:c6:ec:3d:ed:bd:ca:59:fc:ca:89:f0:69:33:71:ad:
         90:7a:f7:1a:47:87:7d:02:a7:42:1a:bb:9a:68:49:39:d3:75:
         d3:43:e4:cd:92:dc:00:ff:27:f8:14:3c:8d:bc:83:6f:f3:62:
         29:e2:62:2d:52:6c:f5:57:f1:ab:17:db:47:7f:2e:9f:1d:94:
         a6:16:0f:fc:e5:ce:4a:71:f0:6b:fa:c3:54:8f:47:1f:e1:cd:
         72:04:b6:0c:c1:8c:fa:9a:17:25:b2:bf:2f:72:34:18:c4:81:
         14:46:cd:41:b2:7e:97:7a:7a:78:45:b5:50:a7:f7:ed:6d:94:
         c2:7a:07:af:b4:e2:87:62:ad:b2:16:b3:b3:53:bd:99:d2:6f:
         2e:8a:57:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 10:15:36 2026 by rpki-client