Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/323830343a383030633a3a2f33322d3332203d3e20323731373236.roa
File:                     323830343a383030633a3a2f33322d3332203d3e20323731373236.roa (raw, json)
Hash identifier:          v5huIVzwJf1JBa5qkFeOcVf0xlyfj6P01I9mFi9DYGI=
Subject key identifier:   2D:22:4A:5E:53:3C:0A:00:9D:94:FB:84:8A:30:62:6C:83:7C:4C:D6
Certificate issuer:       /CN=E4A60880B8D4EC0024322D87A27CBCBDC2192A65
Certificate serial:       130C4D17CE76C675AD6418D6D3CFC1AC1A432379
Authority key identifier: E4:A6:08:80:B8:D4:EC:00:24:32:2D:87:A2:7C:BC:BD:C2:19:2A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/323830343a383030633a3a2f33322d3332203d3e20323731373236.roa
Signing time:             Fri 29 May 2026 18:00:00 +0000
ROA not before:           Fri 29 May 2026 17:55:00 +0000
ROA not after:            Fri 28 May 2027 18:00:00 +0000
asID:                     271726
IP address blocks:        2804:800c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl
                          rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 16:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:0c:4d:17:ce:76:c6:75:ad:64:18:d6:d3:cf:c1:ac:1a:43:23:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4A60880B8D4EC0024322D87A27CBCBDC2192A65
        Validity
            Not Before: May 29 17:55:00 2026 GMT
            Not After : May 28 18:00:00 2027 GMT
        Subject: CN=2D224A5E533C0A009D94FB848A30626C837C4CD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e7:3b:52:41:cb:11:eb:6d:0c:a7:f9:cc:b0:
                    c3:93:97:5a:df:58:6e:64:18:e1:6d:45:c8:e2:86:
                    ef:9c:f2:7d:f4:27:db:0b:c2:19:c3:d6:d5:f5:55:
                    79:2e:ed:53:14:4d:53:a4:f7:66:f6:73:be:37:1a:
                    d1:83:51:ee:26:28:5d:f7:31:18:4e:1d:6d:dc:96:
                    9e:3a:e6:62:e3:da:cf:cc:d2:01:bb:c8:87:b3:7d:
                    08:ea:ed:fb:7a:a0:42:f3:df:05:1e:b4:c0:02:e2:
                    0a:55:88:c4:01:23:76:1b:3a:da:b2:24:82:eb:e1:
                    40:30:99:8e:69:e8:1c:d5:5c:0d:b7:e8:0a:16:69:
                    44:c4:73:ae:1d:a3:85:68:87:60:bb:8a:a0:6e:a5:
                    f6:1b:38:56:19:95:48:d4:22:30:45:e7:eb:a0:5d:
                    c4:16:e7:de:e0:37:86:39:a4:ab:b8:78:f7:c0:db:
                    64:d6:4e:e5:4e:59:1c:86:20:e5:4e:73:d6:5a:bf:
                    b8:4a:06:5f:fe:e1:57:68:75:6f:69:9a:7c:18:b5:
                    fb:43:ed:bd:07:ad:b9:25:12:6b:14:1c:dd:48:2d:
                    5b:94:03:cd:13:d8:ff:f0:74:11:55:c4:5a:66:b3:
                    91:08:01:c9:66:fe:41:d7:2f:fa:a8:82:74:d7:4d:
                    a4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:22:4A:5E:53:3C:0A:00:9D:94:FB:84:8A:30:62:6C:83:7C:4C:D6
            X509v3 Authority Key Identifier:
                keyid:E4:A6:08:80:B8:D4:EC:00:24:32:2D:87:A2:7C:BC:BD:C2:19:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/323830343a383030633a3a2f33322d3332203d3e20323731373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:800c::/32

    Signature Algorithm: sha256WithRSAEncryption
         d6:cc:b9:4a:ef:56:28:03:5c:2b:63:21:e7:21:2d:08:78:18:
         a1:92:f4:58:bc:0d:9d:29:65:fe:76:0e:5a:38:05:61:92:4c:
         fb:52:4d:5c:95:2f:6e:57:6a:e7:61:1d:97:67:9e:55:b3:d3:
         5a:32:b3:f7:f6:54:5a:ed:cc:06:ef:8c:3b:00:1b:ae:37:d0:
         8a:c1:63:33:c6:c6:1b:0a:73:cb:db:50:0a:c0:99:59:1f:e3:
         3d:94:88:5d:ae:c3:cf:7e:6b:34:36:bf:b8:9b:28:d2:90:2d:
         9a:aa:3f:fa:78:06:81:e5:d6:21:bc:29:07:4e:ce:b6:31:21:
         d2:ea:8b:19:1b:45:16:8b:c5:0a:ce:e2:6e:c7:2e:54:da:d9:
         44:9e:36:24:90:b5:b0:96:91:7d:11:a3:98:eb:80:35:87:30:
         91:8e:a4:da:68:e5:b4:2a:27:df:a5:6b:ce:51:bf:07:2c:cf:
         09:20:4c:7b:ff:c5:a8:33:d6:c2:69:67:da:ef:85:9a:e4:9b:
         02:5a:65:e8:f5:25:3b:e4:c8:83:e9:b8:e3:a7:e5:02:0c:78:
         c0:1d:55:c4:e8:c9:0e:67:a5:89:7e:77:6f:b8:28:cc:2b:b6:
         ce:18:52:20:f3:79:bb:ce:3e:32:ab:66:74:de:52:76:77:6e:
         ff:c9:88:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:42:09 2026 by rpki-client