Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/323830343a323038383a3a2f33322d313238203d3e203533323233.roa
File:                     323830343a323038383a3a2f33322d313238203d3e203533323233.roa (raw, json)
Hash identifier:          MHxyDG49PopPYpM4wkmZ2UwSkIA0yHWiSONF6KUpAcI=
Subject key identifier:   D6:CB:E3:19:30:31:21:25:5A:92:D1:7F:B6:97:58:10:ED:9D:21:36
Certificate issuer:       /CN=3332A8C3B68FE79476953E58B1857203FA676F0F
Certificate serial:       0FBAD43B69CF56EDDD9FC133685163047154CFFA
Authority key identifier: 33:32:A8:C3:B6:8F:E7:94:76:95:3E:58:B1:85:72:03:FA:67:6F:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/323830343a323038383a3a2f33322d313238203d3e203533323233.roa
Signing time:             Mon 18 May 2026 18:01:53 +0000
ROA not before:           Mon 18 May 2026 17:56:53 +0000
ROA not after:            Mon 17 May 2027 18:01:53 +0000
asID:                     53223
IP address blocks:        2804:2088::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.crl
                          rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 15:08:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ba:d4:3b:69:cf:56:ed:dd:9f:c1:33:68:51:63:04:71:54:cf:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3332A8C3B68FE79476953E58B1857203FA676F0F
        Validity
            Not Before: May 18 17:56:53 2026 GMT
            Not After : May 17 18:01:53 2027 GMT
        Subject: CN=D6CBE319303121255A92D17FB6975810ED9D2136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:81:0e:b5:de:b9:6e:ad:10:03:ee:e5:a2:d0:
                    73:ff:dc:5a:f6:18:d0:93:a9:c1:fd:d4:e3:bb:8d:
                    ea:b9:f9:c1:8e:e6:4d:08:3f:f3:73:f9:97:ca:10:
                    bc:08:40:cc:3c:a0:48:7d:2d:8e:6f:93:bc:ab:55:
                    89:f2:5f:4a:10:ea:34:93:05:15:35:b7:75:c7:7e:
                    6c:7c:a9:cd:0a:0e:db:38:3e:e0:b2:2f:8d:61:bc:
                    43:e9:df:a6:85:ce:7d:dd:bd:38:35:5c:93:b0:f4:
                    30:4b:56:00:d8:0a:2c:16:d3:8e:97:c8:4b:89:3f:
                    3f:9b:71:02:94:50:d9:ef:b6:0c:dc:93:f1:c2:8d:
                    31:78:1b:59:bd:3d:09:2d:dd:53:8d:37:73:a8:67:
                    fa:80:ee:b9:17:d0:56:0b:07:5f:9b:a3:e9:6c:df:
                    ec:66:3e:b4:fa:27:99:ed:8d:01:9d:15:73:78:42:
                    6f:fd:38:b3:79:c2:4a:f2:b6:6b:1e:dd:23:12:a4:
                    6e:24:47:fc:dd:c6:89:d2:63:c9:8c:67:00:b8:3b:
                    3c:7a:ec:82:60:c2:e0:63:a5:41:6a:71:9f:31:80:
                    ec:17:d0:d0:ef:dc:7d:d1:89:f1:61:9c:7a:46:7c:
                    38:70:e6:ea:2e:64:4d:e0:aa:5d:b5:4c:4c:8f:a5:
                    64:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:CB:E3:19:30:31:21:25:5A:92:D1:7F:B6:97:58:10:ED:9D:21:36
            X509v3 Authority Key Identifier:
                keyid:33:32:A8:C3:B6:8F:E7:94:76:95:3E:58:B1:85:72:03:FA:67:6F:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/323830343a323038383a3a2f33322d313238203d3e203533323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2088::/32

    Signature Algorithm: sha256WithRSAEncryption
         d3:68:f2:8a:37:f2:c7:0e:64:f2:b3:a2:69:e0:ff:d8:cf:95:
         36:f8:b9:32:24:ca:94:e3:2c:c6:f0:35:a3:37:58:eb:29:3b:
         5e:83:2b:56:50:5a:71:36:f9:89:69:e1:33:f4:b2:c3:32:e6:
         ea:7e:bd:c9:93:cd:d0:a9:8a:ee:83:eb:b9:61:f5:2c:30:96:
         d5:fa:33:7c:10:91:b4:aa:90:18:15:da:07:6e:29:42:23:5d:
         6a:6e:94:e1:dd:a4:b4:72:65:4e:57:47:a8:e0:68:75:3e:0b:
         c6:eb:73:02:7a:0b:75:13:d0:27:42:73:a2:f3:09:43:67:07:
         97:38:72:e5:d6:0e:5f:96:2d:2b:e1:7a:87:06:59:39:09:e0:
         ce:63:7c:ac:76:9a:b1:7f:7b:98:0e:d2:1d:43:10:15:ee:26:
         09:ae:59:89:4d:74:2e:82:7a:31:36:22:52:09:16:8f:32:4e:
         ad:23:80:12:c3:4c:44:9a:e4:ab:78:b7:8c:96:51:1b:eb:4e:
         f3:87:75:7d:23:dd:f1:6c:ef:3a:11:54:35:d2:13:c0:a4:5b:
         a2:f4:7d:5e:8c:40:a2:a1:0d:dd:02:0e:87:4c:c4:e6:48:e1:
         23:f1:9a:8d:92:08:a0:c7:5a:e1:a6:98:0d:5d:9b:9d:0a:0b:
         5d:f6:6f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:33:58 2026 by rpki-client