Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G5uiV34ZV5dGgtHkAt1mKqKhhCfpbRUcG7wzAeJcuuz3/0/323830343a363035303a3a2f33322d313238203d3e20323639313539.roa
File:                     323830343a363035303a3a2f33322d313238203d3e20323639313539.roa (raw, json)
Hash identifier:          2Y18+qqcEqsN8ERlkChhIXiPUNeMWOPYXdD/N+Vcak0=
Subject key identifier:   FF:02:5B:C7:98:0C:AF:4C:28:26:1E:61:E2:D7:9C:CA:01:35:54:90
Certificate issuer:       /CN=74618328DE6625DFEC2887D568FAF82ACF674F4D
Certificate serial:       40B6EAC692E30DFBB8144D23B655D309F2FFBAF6
Authority key identifier: 74:61:83:28:DE:66:25:DF:EC:28:87:D5:68:FA:F8:2A:CF:67:4F:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74618328DE6625DFEC2887D568FAF82ACF674F4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5uiV34ZV5dGgtHkAt1mKqKhhCfpbRUcG7wzAeJcuuz3/0/323830343a363035303a3a2f33322d313238203d3e20323639313539.roa
Signing time:             Mon 01 Jun 2026 15:02:06 +0000
ROA not before:           Mon 01 Jun 2026 14:57:06 +0000
ROA not after:            Mon 31 May 2027 15:02:06 +0000
asID:                     269159
IP address blocks:        2804:6050::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G5uiV34ZV5dGgtHkAt1mKqKhhCfpbRUcG7wzAeJcuuz3/0/74618328DE6625DFEC2887D568FAF82ACF674F4D.crl
                          rsync://rpki-repo.registro.br/repo/G5uiV34ZV5dGgtHkAt1mKqKhhCfpbRUcG7wzAeJcuuz3/0/74618328DE6625DFEC2887D568FAF82ACF674F4D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74618328DE6625DFEC2887D568FAF82ACF674F4D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 17:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b6:ea:c6:92:e3:0d:fb:b8:14:4d:23:b6:55:d3:09:f2:ff:ba:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74618328DE6625DFEC2887D568FAF82ACF674F4D
        Validity
            Not Before: Jun  1 14:57:06 2026 GMT
            Not After : May 31 15:02:06 2027 GMT
        Subject: CN=FF025BC7980CAF4C28261E61E2D79CCA01355490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:0d:db:96:39:3d:ec:d1:b9:2d:86:85:81:6b:
                    7e:b4:01:01:05:20:62:12:0e:b1:ba:07:4e:b4:73:
                    9d:75:fe:c6:3e:e7:2a:66:a6:73:fd:e1:31:c8:a0:
                    2b:d6:76:c6:33:42:96:bf:e0:2a:e9:38:2e:1d:9c:
                    e7:1e:f7:67:ac:4e:80:cf:cb:28:99:9c:a1:12:a2:
                    84:a0:d3:2e:d7:86:d5:7c:16:64:9e:38:3d:77:bf:
                    ec:c7:78:5d:a0:03:cf:3d:3e:97:73:af:31:4f:d6:
                    7d:f0:12:43:5f:e4:10:0d:e3:a5:f3:6c:a5:35:fc:
                    36:49:d4:2e:5c:a0:6a:06:71:dc:a9:82:57:d1:1d:
                    ba:b8:bf:74:2d:f2:e9:3e:9b:5f:19:2e:e2:4a:07:
                    38:ff:63:ac:f2:da:7c:0f:e0:80:57:da:47:bd:08:
                    f2:c8:e5:95:63:fe:94:4d:4e:6c:96:9f:c2:b8:6f:
                    b1:76:f7:9e:bc:3e:55:fd:79:cb:f0:10:a4:9a:31:
                    ab:62:30:40:17:4a:db:93:d3:52:66:0d:8c:fe:0f:
                    52:d4:81:cf:bc:4b:cb:7b:61:2e:64:8e:97:b5:ce:
                    d8:7a:79:31:37:0d:a1:1b:f6:39:a5:4a:e5:c6:4b:
                    7d:c4:61:bf:98:c5:a3:04:a0:69:b0:01:3d:05:3f:
                    9f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:02:5B:C7:98:0C:AF:4C:28:26:1E:61:E2:D7:9C:CA:01:35:54:90
            X509v3 Authority Key Identifier:
                keyid:74:61:83:28:DE:66:25:DF:EC:28:87:D5:68:FA:F8:2A:CF:67:4F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5uiV34ZV5dGgtHkAt1mKqKhhCfpbRUcG7wzAeJcuuz3/0/74618328DE6625DFEC2887D568FAF82ACF674F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74618328DE6625DFEC2887D568FAF82ACF674F4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5uiV34ZV5dGgtHkAt1mKqKhhCfpbRUcG7wzAeJcuuz3/0/323830343a363035303a3a2f33322d313238203d3e20323639313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6050::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:26:70:3d:74:26:ec:9f:11:76:18:40:ab:04:a6:46:f6:c0:
         d5:5f:96:26:63:52:fa:99:76:7f:70:57:e5:8e:98:ea:ce:07:
         4e:10:f3:22:5c:fd:ae:0a:fa:0a:c8:e5:9f:57:29:30:9d:d2:
         08:29:d5:5c:9e:70:14:f9:41:8c:c0:e2:39:bb:98:83:e6:1f:
         1a:8a:72:c3:c1:08:b6:c0:e9:3d:f6:40:a2:7e:ef:9c:71:b2:
         91:be:15:c5:5c:da:cf:d1:92:89:06:c0:8e:a1:ed:f9:d6:c1:
         b3:5a:b0:98:ef:a4:6b:ca:65:94:77:1e:91:d4:7b:a5:69:2b:
         d6:55:00:f3:ad:fd:dc:02:f0:19:b9:75:34:0b:8a:94:ce:fb:
         38:52:34:d9:e4:bd:9b:0d:a9:cb:d0:d0:79:f6:0f:f3:43:9a:
         e6:09:ed:f8:39:ab:a5:6c:1d:84:74:c9:70:32:eb:85:2f:63:
         07:40:98:62:33:3f:3f:b0:bd:5a:1a:50:eb:13:96:a0:1a:f7:
         dc:eb:47:06:62:1e:3e:2e:bc:40:82:9d:b6:4e:03:b1:d3:8f:
         22:26:4d:b4:02:25:ac:ca:da:97:db:68:53:4d:6a:aa:d8:c1:
         a9:50:cf:8d:5e:ec:ca:e6:04:7b:a7:a5:03:83:2f:ff:40:44:
         2a:ee:e5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:48:44 2026 by rpki-client