Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/323830343a363435303a373230303a3a2f34302d3430203d3e20323639343230.roa
File:                     323830343a363435303a373230303a3a2f34302d3430203d3e20323639343230.roa (raw, json)
Hash identifier:          Bg4H53zqh2wT4DDd8NyiKVS2S+wWM5uuEHJ9nzJb7W0=
Subject key identifier:   5E:86:D3:25:44:88:8A:2E:96:49:D1:4D:23:F2:85:2B:BF:C3:66:0A
Certificate issuer:       /CN=C3839D882A452B7AB8567F58286919DB7C73545F
Certificate serial:       337B3E7CA45594F06FE80E2BA2B22F15D03A70FE
Authority key identifier: C3:83:9D:88:2A:45:2B:7A:B8:56:7F:58:28:69:19:DB:7C:73:54:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3839D882A452B7AB8567F58286919DB7C73545F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/323830343a363435303a373230303a3a2f34302d3430203d3e20323639343230.roa
Signing time:             Mon 01 Jun 2026 19:09:31 +0000
ROA not before:           Mon 01 Jun 2026 19:04:31 +0000
ROA not after:            Mon 31 May 2027 19:09:31 +0000
asID:                     269420
IP address blocks:        2804:6450:7200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/C3839D882A452B7AB8567F58286919DB7C73545F.crl
                          rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/C3839D882A452B7AB8567F58286919DB7C73545F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3839D882A452B7AB8567F58286919DB7C73545F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 15:18:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:7b:3e:7c:a4:55:94:f0:6f:e8:0e:2b:a2:b2:2f:15:d0:3a:70:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3839D882A452B7AB8567F58286919DB7C73545F
        Validity
            Not Before: Jun  1 19:04:31 2026 GMT
            Not After : May 31 19:09:31 2027 GMT
        Subject: CN=5E86D32544888A2E9649D14D23F2852BBFC3660A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7b:54:79:1f:2a:f0:55:a3:3c:46:f6:39:f9:
                    86:8f:56:a0:86:6c:3c:a4:61:de:ac:af:92:ce:74:
                    f5:14:fb:07:11:fd:87:18:fc:fc:9d:ae:61:1d:6a:
                    a5:73:99:77:06:f8:aa:1f:4c:18:d6:0e:5b:89:7a:
                    06:f7:e6:fe:9c:08:60:d5:dc:bc:2f:3a:2d:d0:be:
                    95:c5:ad:5b:82:d3:bf:d1:35:d6:53:de:dd:da:3f:
                    67:76:b7:f8:4e:7a:19:ec:89:3e:af:ec:e8:69:dc:
                    0f:74:34:c5:34:b7:3b:80:b0:95:ae:8e:12:2f:c5:
                    d5:9b:17:04:16:56:4b:5c:88:e0:ec:8f:aa:5f:fc:
                    82:50:02:a9:14:76:be:24:4c:a9:50:04:b4:9b:dc:
                    31:80:f3:0b:9a:58:ba:89:39:35:bf:af:51:12:7f:
                    ef:7a:c8:48:5b:db:6d:79:30:dd:ba:52:e4:26:f7:
                    61:c2:69:79:82:7d:46:b3:32:96:92:ef:61:4a:ca:
                    eb:d3:f6:45:18:9f:4b:b9:ac:d4:a0:d3:ca:68:6b:
                    ef:aa:56:ff:a6:95:ad:0d:1b:21:b2:bd:74:cc:79:
                    2b:8b:c8:26:b7:68:cf:8c:28:bc:4c:3a:2a:53:ec:
                    40:e9:cc:0c:1f:09:09:da:f3:b2:c1:40:1b:1a:ac:
                    21:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:86:D3:25:44:88:8A:2E:96:49:D1:4D:23:F2:85:2B:BF:C3:66:0A
            X509v3 Authority Key Identifier:
                keyid:C3:83:9D:88:2A:45:2B:7A:B8:56:7F:58:28:69:19:DB:7C:73:54:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/C3839D882A452B7AB8567F58286919DB7C73545F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3839D882A452B7AB8567F58286919DB7C73545F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/323830343a363435303a373230303a3a2f34302d3430203d3e20323639343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6450:7200::/40

    Signature Algorithm: sha256WithRSAEncryption
         6e:83:23:00:f6:8c:05:07:bc:a4:d5:cf:0d:76:85:9f:0a:f7:
         05:76:0f:65:99:5d:db:a1:43:18:97:99:ae:55:4b:d4:9f:76:
         fb:4a:7d:bb:1a:99:81:17:0f:aa:c3:a4:49:e6:f5:b9:61:e5:
         bc:71:38:e9:dd:27:93:35:10:d6:32:b3:59:c2:d0:f5:e4:9c:
         48:f0:ee:a6:94:76:cc:30:a9:cc:71:59:2d:29:db:fb:a4:2e:
         cb:93:11:a5:f8:78:1d:8d:53:5c:e0:ce:02:e8:59:de:84:6d:
         c1:f4:fa:85:b3:ef:06:8c:6e:16:9c:5b:79:60:19:de:f8:0a:
         52:96:93:9f:1f:a8:cf:40:81:44:10:5f:8e:94:aa:f6:a1:e3:
         27:8a:32:5b:3a:aa:03:74:79:f2:bd:7a:a9:cc:10:5d:80:ea:
         51:61:06:2e:ca:8c:06:3f:76:d7:b8:e1:e2:f4:28:0c:c1:77:
         93:3d:c3:f1:98:ba:c7:92:de:d1:99:23:08:a7:b2:4d:52:d1:
         ca:42:2d:3c:11:9b:8a:78:de:eb:22:aa:7b:d9:6c:67:f5:cd:
         8e:cd:65:95:12:60:46:73:12:d6:2f:c8:6d:5d:38:b0:cd:ea:
         22:f9:f7:e0:fe:f2:74:a7:7e:8f:98:66:1d:af:6c:c0:e7:fd:
         43:bc:35:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:48:39 2026 by rpki-client