Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a313030303a3a2f33362d3336203d3e20323638373730.roa
File:                     323830343a356136343a313030303a3a2f33362d3336203d3e20323638373730.roa (raw, json)
Hash identifier:          SI1F7ZGEhpq+VfkfWTLDWwDmf/HMrzZcqoPmpe15UsE=
Subject key identifier:   B0:BD:19:E1:DE:F7:A3:B5:8F:50:70:AB:B2:2E:29:CF:4B:ED:E1:51
Certificate issuer:       /CN=AA3B743EC7E4F08EBA8C201668D2374C737F8DA7
Certificate serial:       1EB1E055BE9879110DCCA8CE06BC4F2434AC65FC
Authority key identifier: AA:3B:74:3E:C7:E4:F0:8E:BA:8C:20:16:68:D2:37:4C:73:7F:8D:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a313030303a3a2f33362d3336203d3e20323638373730.roa
Signing time:             Thu 21 May 2026 22:41:19 +0000
ROA not before:           Thu 21 May 2026 22:36:19 +0000
ROA not after:            Thu 20 May 2027 22:41:19 +0000
asID:                     268770
IP address blocks:        2804:5a64:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.crl
                          rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 05:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b1:e0:55:be:98:79:11:0d:cc:a8:ce:06:bc:4f:24:34:ac:65:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA3B743EC7E4F08EBA8C201668D2374C737F8DA7
        Validity
            Not Before: May 21 22:36:19 2026 GMT
            Not After : May 20 22:41:19 2027 GMT
        Subject: CN=B0BD19E1DEF7A3B58F5070ABB22E29CF4BEDE151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c5:52:af:5c:f1:e5:0c:86:74:16:f8:34:52:
                    24:7e:71:80:e7:7a:b5:49:9b:0e:7f:38:e3:90:d0:
                    c3:e5:a7:83:7d:9a:fd:e7:70:4e:8d:64:52:35:a2:
                    ae:7e:e4:dc:9f:e9:59:ff:ee:6d:a0:3a:5a:57:88:
                    85:13:46:87:8e:70:9e:c2:e3:f2:ea:ff:73:4e:03:
                    cd:af:6d:57:f6:14:31:18:3d:96:8a:fd:77:98:22:
                    94:bc:bf:3c:af:2e:9e:83:78:2d:7b:31:0f:c4:05:
                    42:9f:19:95:6c:c5:12:c6:2f:25:2f:b9:bd:4c:00:
                    e8:1c:ee:8f:17:71:b0:bc:d2:0c:45:50:a1:7c:be:
                    d6:99:63:f6:3f:07:50:4b:b5:c3:74:fe:0a:23:e9:
                    a1:6c:76:d8:bb:b8:73:f7:8c:53:a2:fe:7e:52:b5:
                    fc:63:51:93:a5:97:21:1f:23:49:8e:04:d9:4a:d4:
                    fa:2e:78:0f:4f:51:72:44:64:7a:86:46:38:b7:13:
                    d6:48:fa:01:f1:57:f7:33:02:de:42:83:3e:75:64:
                    47:44:7a:f5:95:c6:79:d9:0f:48:d1:aa:f0:a7:a5:
                    58:fb:39:49:f1:33:98:10:40:eb:12:10:81:77:ea:
                    14:21:3a:a7:62:2a:c7:98:8f:3f:1c:91:1f:d6:ad:
                    44:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BD:19:E1:DE:F7:A3:B5:8F:50:70:AB:B2:2E:29:CF:4B:ED:E1:51
            X509v3 Authority Key Identifier:
                keyid:AA:3B:74:3E:C7:E4:F0:8E:BA:8C:20:16:68:D2:37:4C:73:7F:8D:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a313030303a3a2f33362d3336203d3e20323638373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a64:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         34:fa:5a:89:95:88:d4:2f:57:ef:da:d3:15:04:ed:c9:8a:fe:
         78:a5:bd:39:3b:a5:73:c3:c2:fa:42:ff:02:bf:7b:38:f9:77:
         f5:6a:f2:25:a6:d8:76:8f:ed:18:fa:63:57:80:79:57:a3:1f:
         8c:d3:e4:b0:b4:2a:46:4a:00:9f:a4:e4:b2:d1:38:d1:20:1c:
         5a:8c:c9:97:43:46:94:ee:ea:68:9b:a9:2a:b5:52:05:0a:c6:
         53:ff:9e:69:96:2a:63:7f:a0:27:df:85:2c:92:46:c0:6b:40:
         5c:b2:9d:ac:05:7d:55:fd:ca:7c:86:22:a3:3f:d3:4e:85:92:
         9b:b6:18:b2:55:a4:72:2b:12:e5:88:a7:05:9c:56:6d:0b:33:
         b1:b8:6d:8b:86:c3:da:72:38:61:95:03:b8:48:32:82:25:e3:
         79:d5:53:bf:53:e9:90:a4:a2:ef:10:78:46:79:0f:0d:75:e2:
         16:a0:cd:ca:f3:f8:43:ba:40:d5:6f:c6:e4:09:ec:98:34:2c:
         19:4d:81:29:d1:9c:44:59:21:51:52:1d:22:5c:47:a0:06:fa:
         6a:07:bd:f6:6e:13:e7:e3:b9:16:81:c6:54:10:6d:3a:c7:ed:
         e5:b6:66:80:27:77:0f:d7:9e:6a:41:e4:d1:7f:6c:a6:48:2c:
         13:53:6f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:51:03 2026 by rpki-client