Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/323830343a333264343a34313a3a2f34382d3438203d3e20323635313030.roa
File:                     323830343a333264343a34313a3a2f34382d3438203d3e20323635313030.roa (raw, json)
Hash identifier:          Cp3dbohJVcqt37sfTUoMJ3E+bdUhg84eKNROBpdrawk=
Subject key identifier:   3E:FA:08:91:90:51:50:97:9F:CC:A4:31:A5:ED:D7:28:63:93:24:F0
Certificate issuer:       /CN=B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819
Certificate serial:       592427B27798543A1DB695604546927324EB6442
Authority key identifier: B5:FC:5F:08:B8:C4:86:40:13:DC:3A:4C:A4:7C:22:00:B3:C2:B8:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/323830343a333264343a34313a3a2f34382d3438203d3e20323635313030.roa
Signing time:             Wed 03 Jun 2026 18:11:17 +0000
ROA not before:           Wed 03 Jun 2026 18:06:17 +0000
ROA not after:            Wed 02 Jun 2027 18:11:17 +0000
asID:                     265100
IP address blocks:        2804:32d4:41::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl
                          rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 22:08:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:24:27:b2:77:98:54:3a:1d:b6:95:60:45:46:92:73:24:eb:64:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819
        Validity
            Not Before: Jun  3 18:06:17 2026 GMT
            Not After : Jun  2 18:11:17 2027 GMT
        Subject: CN=3EFA0891905150979FCCA431A5EDD728639324F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fc:75:cc:ff:7d:1f:2f:67:98:a8:57:51:a1:
                    23:42:9f:78:97:8f:88:9d:fe:d3:15:f2:41:bf:b5:
                    51:90:ac:ea:8a:50:ea:bd:4c:09:37:2e:06:ff:39:
                    b1:68:a0:24:b9:e8:a2:02:14:d0:ba:ab:a7:3e:8e:
                    8d:9b:69:44:a5:bc:57:60:9d:86:9c:be:96:f3:ff:
                    02:ee:44:7c:27:83:1b:61:2c:ab:e0:84:16:cd:c9:
                    ae:2e:1f:ba:4b:de:46:3e:dd:d0:2c:d4:c6:30:1f:
                    25:d3:32:23:98:91:b2:59:43:51:34:60:75:31:df:
                    d6:03:55:2c:79:d7:7e:f1:92:01:cd:76:20:a8:f8:
                    86:5a:42:02:7c:fd:70:db:91:9b:2e:70:bc:86:bc:
                    72:a9:13:d6:fd:1f:09:b4:94:99:ca:cb:72:2e:9a:
                    a8:a5:04:b5:5f:8f:d1:d6:54:e9:8a:55:d9:83:2e:
                    4c:d3:29:79:75:10:b3:fc:7f:5f:a2:61:da:fd:e7:
                    8d:05:9a:f4:7b:d3:c9:c2:03:3f:ce:5f:e0:8c:d6:
                    88:e9:9b:94:e6:2a:66:0b:87:3a:27:d0:4b:f5:34:
                    40:94:96:15:c9:10:c2:7c:fc:ab:05:63:71:96:2c:
                    e7:41:a2:79:0e:09:ca:f0:b4:f7:55:58:0b:29:88:
                    18:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FA:08:91:90:51:50:97:9F:CC:A4:31:A5:ED:D7:28:63:93:24:F0
            X509v3 Authority Key Identifier:
                keyid:B5:FC:5F:08:B8:C4:86:40:13:DC:3A:4C:A4:7C:22:00:B3:C2:B8:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/323830343a333264343a34313a3a2f34382d3438203d3e20323635313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:32d4:41::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:c3:7a:92:e4:91:54:cb:ec:3e:6f:fe:e1:5b:3c:2d:fb:37:
         0f:47:18:29:1f:f1:31:ea:8c:ec:be:7d:43:5b:a6:15:21:f2:
         27:72:bb:03:16:f1:e7:5f:dc:f3:49:3e:71:92:7d:20:e7:ce:
         c8:e3:4a:e5:b1:3a:51:a5:1c:c4:27:62:e9:9a:dc:42:d9:d9:
         34:27:2e:9d:ae:df:d2:bd:9a:4f:0d:ab:d2:4e:7c:e7:ac:aa:
         3d:4a:36:a8:c2:af:5e:d1:07:e6:a7:bd:7b:19:0d:80:ff:62:
         9c:94:2e:ef:d5:79:e8:07:b8:16:25:ab:55:05:ff:ec:0b:5d:
         d9:37:8f:8f:0b:c7:23:6b:7d:42:3b:74:c4:97:3e:d7:5e:a5:
         5f:79:bc:c8:f7:bf:fc:0f:37:1d:4c:37:b5:75:8c:c4:52:54:
         a9:06:96:fb:21:50:00:19:b0:c6:d6:b7:eb:bc:c0:12:06:9d:
         12:f0:ff:20:f9:88:d5:97:24:89:48:58:b5:9c:e0:58:89:aa:
         7c:d6:c7:b4:3b:a0:0c:47:b2:1d:ce:af:49:41:a6:b9:84:78:
         29:7c:aa:4b:96:cc:5d:75:37:36:b0:ef:a8:3b:2f:9d:47:33:
         f9:97:88:ad:5c:53:63:ca:0c:3c:e1:84:52:07:54:4f:58:aa:
         ed:ae:21:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:07:07 2026 by rpki-client