Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/gfDM52CiAxCaJaHAPJEhZGiKQM1Fif9QaDgboCE9kjx/0/323830343a326338383a3a2f33322d313238203d3e20323635323235.roa
File:                     323830343a326338383a3a2f33322d313238203d3e20323635323235.roa (raw, json)
Hash identifier:          MZGv7PVxLmPYPppdWaavhWXvWIQSDfmH8J7AEXjT26Y=
Subject key identifier:   06:DF:CF:71:23:AE:83:8D:55:40:AC:CD:8E:60:77:A1:F2:5F:23:1E
Certificate issuer:       /CN=CF5010508D7BA754C7752534936265C3847BE7D8
Certificate serial:       7AB17BE6A59F4B108293BDBB235E95ACF334981D
Authority key identifier: CF:50:10:50:8D:7B:A7:54:C7:75:25:34:93:62:65:C3:84:7B:E7:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF5010508D7BA754C7752534936265C3847BE7D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gfDM52CiAxCaJaHAPJEhZGiKQM1Fif9QaDgboCE9kjx/0/323830343a326338383a3a2f33322d313238203d3e20323635323235.roa
Signing time:             Tue 02 Jun 2026 18:56:36 +0000
ROA not before:           Tue 02 Jun 2026 18:51:36 +0000
ROA not after:            Tue 01 Jun 2027 18:56:36 +0000
asID:                     265225
IP address blocks:        2804:2c88::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/gfDM52CiAxCaJaHAPJEhZGiKQM1Fif9QaDgboCE9kjx/0/CF5010508D7BA754C7752534936265C3847BE7D8.crl
                          rsync://rpki-repo.registro.br/repo/gfDM52CiAxCaJaHAPJEhZGiKQM1Fif9QaDgboCE9kjx/0/CF5010508D7BA754C7752534936265C3847BE7D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF5010508D7BA754C7752534936265C3847BE7D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:25:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b1:7b:e6:a5:9f:4b:10:82:93:bd:bb:23:5e:95:ac:f3:34:98:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF5010508D7BA754C7752534936265C3847BE7D8
        Validity
            Not Before: Jun  2 18:51:36 2026 GMT
            Not After : Jun  1 18:56:36 2027 GMT
        Subject: CN=06DFCF7123AE838D5540ACCD8E6077A1F25F231E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:18:6b:8d:31:df:9a:aa:7d:1b:63:e6:3d:b1:
                    b7:27:33:1c:9e:ba:1f:8b:ef:12:ed:2b:00:bf:39:
                    2e:9d:80:ae:68:04:ed:39:10:41:63:4d:84:b6:97:
                    07:0e:f4:74:b4:63:f4:58:ab:1d:6e:9e:07:eb:66:
                    75:9f:d7:0e:b1:b4:37:c5:aa:1b:d7:d0:6b:4e:bb:
                    a2:a8:69:ce:11:e0:34:1b:6c:1e:49:ea:1a:0e:b7:
                    37:de:5a:a7:a7:bb:0d:c5:3a:c3:48:47:f6:96:03:
                    49:8c:7d:72:ab:55:7c:7e:05:82:4f:1f:fd:1e:bc:
                    fa:d5:27:a7:98:a2:02:37:34:2d:e5:6c:f9:e8:cc:
                    fa:8a:ac:f7:e7:33:a2:a2:30:7f:5c:dc:d6:c8:8f:
                    7f:0b:ab:93:54:3f:a2:20:c5:14:b0:f8:ad:91:06:
                    c1:ba:20:38:52:b5:af:14:15:a4:0f:b2:62:8c:15:
                    1d:1f:bb:2c:46:bc:d6:24:e5:3d:8e:08:56:6f:52:
                    df:88:b6:1f:2e:be:05:5d:bc:ac:be:88:21:35:f1:
                    7c:48:3f:3b:3f:f6:f2:f9:5e:3c:a2:05:80:d4:80:
                    e6:68:09:07:d5:00:62:b6:e1:3f:06:d7:d0:ad:17:
                    58:de:0f:46:37:21:5e:fe:46:e6:b6:c6:cb:61:92:
                    79:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DF:CF:71:23:AE:83:8D:55:40:AC:CD:8E:60:77:A1:F2:5F:23:1E
            X509v3 Authority Key Identifier:
                keyid:CF:50:10:50:8D:7B:A7:54:C7:75:25:34:93:62:65:C3:84:7B:E7:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gfDM52CiAxCaJaHAPJEhZGiKQM1Fif9QaDgboCE9kjx/0/CF5010508D7BA754C7752534936265C3847BE7D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF5010508D7BA754C7752534936265C3847BE7D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gfDM52CiAxCaJaHAPJEhZGiKQM1Fif9QaDgboCE9kjx/0/323830343a326338383a3a2f33322d313238203d3e20323635323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c88::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:83:0e:ea:4c:04:e4:7e:00:90:4f:59:22:12:68:fb:b1:9e:
         9e:6f:b0:f1:88:b9:07:b6:fb:76:63:e4:71:b6:7a:6c:21:ca:
         7f:61:f2:73:db:59:4b:55:d4:03:96:ce:d8:95:6b:1e:26:6f:
         a9:fc:97:2c:d6:6d:0b:4e:b2:a0:37:60:b5:c9:c4:82:0c:aa:
         bd:a9:b8:f6:f2:e0:91:fd:2b:51:42:aa:34:89:42:b2:d8:b3:
         42:3f:8e:01:90:af:95:22:4a:ed:a7:48:42:64:4e:1c:22:f5:
         91:46:b6:81:9c:19:5e:c2:a2:01:ed:18:f8:7c:cf:7c:88:71:
         42:ea:34:f8:a6:19:7a:5b:ea:2b:35:40:5c:2a:3e:aa:23:e8:
         b9:e4:6e:92:ff:e0:aa:39:ee:4f:c8:b8:d0:76:aa:7b:e8:08:
         4c:90:88:27:bf:d9:e0:a2:d2:96:9e:1c:61:fb:c7:f9:a5:cf:
         91:08:b3:c8:74:8f:8c:3b:37:47:8b:a2:c0:4d:d7:09:7e:4d:
         93:14:e7:ef:25:32:72:75:b6:09:e9:0c:36:81:87:3e:57:ac:
         4b:de:e5:1f:6f:6e:1e:76:7a:4a:25:98:58:65:b6:03:f2:4c:
         eb:3b:35:63:b6:4e:c3:03:34:bb:d4:c1:2c:d2:36:c7:d0:b1:
         f9:ab:66:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:15:05 2026 by rpki-client