Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/323830343a386437633a3a2f33322d3438203d3e20323733333630.roa
File:                     323830343a386437633a3a2f33322d3438203d3e20323733333630.roa (raw, json)
Hash identifier:          oPFtk2MJP3Ob584vAfxwH6qEUBVwpS9hkJSv68/3FF8=
Subject key identifier:   71:42:DC:E5:B5:F5:34:E7:38:AD:8F:82:C2:87:C9:1E:D7:A0:B2:51
Certificate issuer:       /CN=D27C5AC64083707E0C652196F2CF39E2C1C0C58D
Certificate serial:       3C7C0A3C6C11D9DA87E0398CF04E667719F2C9F6
Authority key identifier: D2:7C:5A:C6:40:83:70:7E:0C:65:21:96:F2:CF:39:E2:C1:C0:C5:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27C5AC64083707E0C652196F2CF39E2C1C0C58D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/323830343a386437633a3a2f33322d3438203d3e20323733333630.roa
Signing time:             Tue 19 May 2026 11:46:00 +0000
ROA not before:           Tue 19 May 2026 11:41:00 +0000
ROA not after:            Tue 18 May 2027 11:46:00 +0000
asID:                     273360
IP address blocks:        2804:8d7c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/D27C5AC64083707E0C652196F2CF39E2C1C0C58D.crl
                          rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/D27C5AC64083707E0C652196F2CF39E2C1C0C58D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27C5AC64083707E0C652196F2CF39E2C1C0C58D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:7c:0a:3c:6c:11:d9:da:87:e0:39:8c:f0:4e:66:77:19:f2:c9:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D27C5AC64083707E0C652196F2CF39E2C1C0C58D
        Validity
            Not Before: May 19 11:41:00 2026 GMT
            Not After : May 18 11:46:00 2027 GMT
        Subject: CN=7142DCE5B5F534E738AD8F82C287C91ED7A0B251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:62:ac:65:b7:89:5f:f5:b2:08:9b:4a:31:b5:
                    c2:fe:e7:54:ae:d3:af:ef:9d:9a:76:fc:25:9c:80:
                    94:fc:a3:74:98:72:58:b3:e8:dd:24:ca:0b:a0:64:
                    56:08:18:c2:64:21:a9:85:a4:56:ff:b0:63:34:30:
                    7c:14:3d:68:5c:3d:b4:e5:a5:26:19:a0:31:fe:4b:
                    39:e3:c0:f5:6f:ce:2d:0c:a4:5a:74:72:53:34:7f:
                    d7:d2:af:3a:57:5e:6c:80:fa:61:d7:d6:e6:e0:26:
                    72:94:e6:a6:3c:d3:87:fc:9e:20:5f:6f:6e:d2:8e:
                    a6:bb:31:f8:3a:2e:a0:cc:6b:a5:78:9f:63:9d:17:
                    0c:05:8f:dd:46:96:da:4a:55:c9:d5:56:99:5d:ce:
                    ba:57:8d:ad:99:1b:48:b4:a3:de:3b:a7:33:53:ad:
                    7c:da:19:72:15:eb:64:9a:88:37:6e:e7:0e:ba:43:
                    2b:71:3f:28:61:68:f3:ed:77:b3:bf:5e:f9:a6:20:
                    93:47:87:8e:83:3e:7e:7b:2d:fe:28:d7:07:ba:55:
                    38:b1:83:9f:b3:a0:34:74:9d:95:e2:37:23:58:a1:
                    d6:75:2b:d8:ff:c4:ff:99:f0:c8:68:05:28:be:de:
                    b8:0d:43:20:87:57:fc:e6:a4:17:ea:34:79:92:b5:
                    5c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:42:DC:E5:B5:F5:34:E7:38:AD:8F:82:C2:87:C9:1E:D7:A0:B2:51
            X509v3 Authority Key Identifier:
                keyid:D2:7C:5A:C6:40:83:70:7E:0C:65:21:96:F2:CF:39:E2:C1:C0:C5:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/D27C5AC64083707E0C652196F2CF39E2C1C0C58D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27C5AC64083707E0C652196F2CF39E2C1C0C58D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/323830343a386437633a3a2f33322d3438203d3e20323733333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:05:93:d1:6b:39:65:c0:d7:6b:a9:89:6b:36:e1:c5:95:fe:
         4e:b7:61:ae:ae:66:d8:b3:f6:77:7f:35:3c:3e:82:2b:84:37:
         40:5e:bb:d6:97:bb:fa:ed:b3:4e:37:46:70:46:d1:bf:cd:2e:
         36:b7:7e:f6:c8:ad:83:36:cc:11:e4:9d:ad:4d:68:84:0b:50:
         24:bc:5d:fb:3a:b7:48:92:2a:5a:ee:8c:5d:d3:be:e9:43:64:
         3d:c7:a7:9c:d5:1e:e4:8f:91:44:3e:a3:71:5c:2d:f8:63:23:
         f3:e9:64:9e:2b:c5:e7:5b:17:1b:36:5e:45:c5:39:ca:77:20:
         fc:f5:d8:e4:d1:be:61:32:2c:13:d1:a5:65:7b:ac:2f:5d:57:
         5f:c6:64:09:ed:e3:a7:36:bf:c7:f2:cd:4d:f8:b9:ac:c9:df:
         fa:c8:73:43:d7:0a:0e:e0:19:65:08:bd:34:7c:7c:43:a2:3f:
         c0:81:e6:25:80:1e:46:e1:d2:d9:c7:45:6c:c1:1d:82:5c:15:
         ae:70:1b:f0:fc:b7:b1:20:5f:a5:73:d1:98:f2:3f:14:54:11:
         68:43:ef:6c:7e:8c:5c:fd:66:5c:23:89:16:91:21:dc:4d:39:
         11:f3:8d:02:dd:62:f0:36:bd:dd:26:86:78:58:ae:62:de:73:
         79:70:85:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:46:12 2026 by rpki-client