Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/1/323830343a6131343a3a2f33322d3438203d3e20323632333432.roa
File:                     323830343a6131343a3a2f33322d3438203d3e20323632333432.roa (raw, json)
Hash identifier:          ZsDX/JVVJzF78LH1ET0fLiD8sQkMpaijlG1KV808nxY=
Subject key identifier:   CD:95:A3:3F:05:08:52:F3:C2:74:77:78:02:EF:8F:A0:2F:5A:BB:D9
Certificate issuer:       /CN=80F95120380D97B8617C6C767FCF3931BDE7880D
Certificate serial:       0DB1C1C586086AAC57F37197A72707A77AC28BE3
Authority key identifier: 80:F9:51:20:38:0D:97:B8:61:7C:6C:76:7F:CF:39:31:BD:E7:88:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80F95120380D97B8617C6C767FCF3931BDE7880D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/1/323830343a6131343a3a2f33322d3438203d3e20323632333432.roa
Signing time:             Wed 27 May 2026 14:49:53 +0000
ROA not before:           Wed 27 May 2026 14:44:53 +0000
ROA not after:            Wed 26 May 2027 14:49:53 +0000
asID:                     262342
IP address blocks:        2804:a14::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/1/80F95120380D97B8617C6C767FCF3931BDE7880D.crl
                          rsync://rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/1/80F95120380D97B8617C6C767FCF3931BDE7880D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80F95120380D97B8617C6C767FCF3931BDE7880D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 04:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b1:c1:c5:86:08:6a:ac:57:f3:71:97:a7:27:07:a7:7a:c2:8b:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80F95120380D97B8617C6C767FCF3931BDE7880D
        Validity
            Not Before: May 27 14:44:53 2026 GMT
            Not After : May 26 14:49:53 2027 GMT
        Subject: CN=CD95A33F050852F3C274777802EF8FA02F5ABBD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:47:d7:1a:bb:ff:d4:7a:d4:2b:0c:41:88:85:
                    f4:e7:07:5a:71:b8:c8:b6:3c:91:f4:16:7d:f4:ed:
                    2c:69:18:5b:b5:0c:c1:5a:46:de:b6:c9:12:12:0a:
                    20:9c:85:9a:1f:8a:19:9a:4b:47:7c:b6:4d:52:f7:
                    8f:e5:3d:e2:b0:20:b6:f4:1a:c4:1c:ef:bc:d7:13:
                    a7:3f:7f:2d:a6:69:9e:f6:50:25:9b:15:c1:b3:8a:
                    93:df:e2:f7:b6:80:a2:9f:1a:80:04:ff:3b:e1:da:
                    d1:b9:63:ce:87:c0:bd:4c:bd:b1:4f:ae:88:9c:5d:
                    6c:fa:56:5f:b9:fc:75:18:87:43:71:01:25:2f:6a:
                    a9:32:03:d2:92:4d:67:5b:fa:11:8b:38:92:a3:4c:
                    66:34:cf:21:59:92:15:82:4a:f6:ca:c0:43:c5:b8:
                    e9:b7:f4:44:6b:42:4c:7d:bd:ac:da:5b:38:b3:2f:
                    96:93:5e:6f:79:5a:49:cd:76:72:d1:c9:ea:71:be:
                    d6:d4:d6:0a:4f:fc:c9:44:94:8c:e7:c6:05:0e:f7:
                    9a:03:62:26:e7:04:70:57:1e:b5:b6:bc:ca:d7:0a:
                    7d:e1:47:38:e9:5b:af:10:f6:a8:5a:14:82:a1:08:
                    74:d5:22:d7:12:c6:b8:ca:49:b8:60:32:ac:e3:1d:
                    1d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:95:A3:3F:05:08:52:F3:C2:74:77:78:02:EF:8F:A0:2F:5A:BB:D9
            X509v3 Authority Key Identifier:
                keyid:80:F9:51:20:38:0D:97:B8:61:7C:6C:76:7F:CF:39:31:BD:E7:88:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/1/80F95120380D97B8617C6C767FCF3931BDE7880D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80F95120380D97B8617C6C767FCF3931BDE7880D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/1/323830343a6131343a3a2f33322d3438203d3e20323632333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a14::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:f0:01:94:91:66:01:ea:37:6d:c0:b9:ed:b7:54:c7:c2:89:
         7b:74:81:68:53:31:b8:f4:71:d3:2d:ee:e4:c7:6f:cc:7a:ab:
         b1:e5:a9:d9:86:25:67:82:51:8e:8c:ca:55:cc:19:e3:11:1e:
         8e:cd:78:fc:66:21:7c:ba:d8:e7:ea:f1:25:79:df:5c:91:ac:
         1d:b2:e6:c1:32:5f:58:26:d7:39:eb:ab:7c:6b:1e:9a:cd:40:
         6a:50:5b:de:05:06:2e:e0:86:67:9e:34:b2:df:9e:64:f0:7a:
         fe:54:92:d4:5b:b0:a8:f3:a4:7d:99:fb:b6:ed:58:c0:ed:7a:
         b0:f4:de:aa:39:a5:b8:dd:a8:57:e3:5a:9d:d9:25:dd:ec:23:
         bc:ff:1a:c3:a0:ad:73:ef:90:1f:14:75:e4:28:cb:fd:53:97:
         55:27:cc:ee:eb:dd:e3:b8:8b:06:27:e6:99:93:06:14:cb:ce:
         79:e0:1d:be:25:a6:f8:8a:5b:90:89:39:91:df:a7:05:79:98:
         6f:6e:59:55:dd:f8:93:3d:08:f5:23:f4:74:b7:d2:02:2b:19:
         ae:80:30:1a:c5:d6:39:73:b3:2d:e9:1d:d3:20:f7:c6:2a:fd:
         7c:b3:5c:0b:e3:8e:a6:6a:95:27:08:96:c1:c0:3a:c2:5f:5f:
         70:d0:aa:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:45:42 2026 by rpki-client