Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/323830343a363438633a3a2f33322d3332203d3e20323639343334.roa
File:                     323830343a363438633a3a2f33322d3332203d3e20323639343334.roa (raw, json)
Hash identifier:          L7gHiefiOZRG4VWn4PzhiOChR3fZjFbNfLlog7zsBHU=
Subject key identifier:   AE:C4:CC:91:2A:00:BD:09:4C:E3:88:7A:DC:5A:9F:F4:AF:43:D3:42
Certificate issuer:       /CN=F3AD919FCCA00BC383D6D6398B96B1D77AAFB476
Certificate serial:       32DB9D01BF59C3B5695DF20FFAF3F1064AFC8BAB
Authority key identifier: F3:AD:91:9F:CC:A0:0B:C3:83:D6:D6:39:8B:96:B1:D7:7A:AF:B4:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/323830343a363438633a3a2f33322d3332203d3e20323639343334.roa
Signing time:             Fri 05 Jun 2026 02:54:07 +0000
ROA not before:           Fri 05 Jun 2026 02:49:07 +0000
ROA not after:            Fri 04 Jun 2027 02:54:07 +0000
asID:                     269434
IP address blocks:        2804:648c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.crl
                          rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 12:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:db:9d:01:bf:59:c3:b5:69:5d:f2:0f:fa:f3:f1:06:4a:fc:8b:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3AD919FCCA00BC383D6D6398B96B1D77AAFB476
        Validity
            Not Before: Jun  5 02:49:07 2026 GMT
            Not After : Jun  4 02:54:07 2027 GMT
        Subject: CN=AEC4CC912A00BD094CE3887ADC5A9FF4AF43D342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:75:22:02:81:b6:4a:6f:1b:3c:13:fd:93:28:
                    a4:ed:95:a4:df:6f:b0:36:39:b5:5c:e8:86:97:32:
                    fd:63:ce:c4:2c:77:cc:08:26:48:b2:f9:9c:ce:69:
                    7d:3c:e2:14:11:c2:6e:91:e2:e4:11:d7:e0:f3:2a:
                    b6:07:77:c1:12:08:91:6c:5a:39:b0:2f:82:95:b6:
                    4c:8f:d0:17:cf:e7:bd:1a:c4:21:a4:d0:10:a6:6a:
                    a5:ac:ca:07:01:fa:15:94:96:9c:7e:66:ed:9b:30:
                    a4:83:95:25:c0:22:d2:2e:5f:3f:79:b3:a0:c8:c7:
                    10:dd:e0:ba:c2:86:70:de:63:f2:bb:55:0e:13:74:
                    46:8b:91:ec:92:0f:a3:cd:b9:72:2d:e6:b5:d1:ef:
                    2b:69:31:00:c5:8e:4c:b0:50:80:da:eb:ab:b1:c0:
                    f9:8b:f9:2c:3d:a7:91:b8:be:cd:fb:11:c5:28:23:
                    67:16:69:da:fa:c8:d1:c0:82:03:f2:56:00:1f:b9:
                    43:c7:04:fb:ba:e0:6e:41:c5:44:db:a3:e6:e4:78:
                    a0:bd:d4:d7:58:c0:9f:84:99:7c:b6:86:22:59:b8:
                    7f:21:e9:b3:7e:f4:4c:10:c1:6b:1a:54:10:76:6a:
                    ec:72:b2:86:de:63:1d:8e:85:be:eb:ef:04:1c:3f:
                    d8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C4:CC:91:2A:00:BD:09:4C:E3:88:7A:DC:5A:9F:F4:AF:43:D3:42
            X509v3 Authority Key Identifier:
                keyid:F3:AD:91:9F:CC:A0:0B:C3:83:D6:D6:39:8B:96:B1:D7:7A:AF:B4:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/323830343a363438633a3a2f33322d3332203d3e20323639343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:648c::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:66:0d:bb:80:48:8f:89:63:a5:f3:3e:0f:cc:b6:34:28:48:
         f3:cc:33:d8:e6:79:92:6c:ca:90:c1:75:c0:ee:e2:e4:7f:1c:
         47:bb:3e:cc:3f:c1:b7:ca:21:09:4e:63:85:2d:af:89:11:e4:
         ea:6c:fd:19:f5:0a:81:af:07:5e:fd:d5:71:e6:8f:75:73:5c:
         61:89:0e:56:d0:23:1f:8d:b3:f0:b9:93:ed:e0:68:56:55:88:
         1f:c6:e3:2c:32:d4:a4:2c:e1:f3:de:38:0c:ae:45:0d:0f:73:
         61:ae:5e:11:f3:9a:de:a1:59:50:ae:64:f9:75:1d:49:cd:b0:
         62:0a:4b:96:84:bf:04:3e:20:48:8c:19:8a:23:df:e1:8b:68:
         27:92:0c:af:b6:ff:50:aa:31:c2:f9:64:ab:74:e9:7c:6c:c0:
         22:04:28:88:10:ba:8b:70:0d:92:87:ce:69:7c:c5:72:3f:b2:
         bf:95:77:e9:43:7a:08:ea:ea:92:70:22:82:65:f2:d9:e1:31:
         d8:48:60:ae:5a:11:f8:0f:d8:bc:83:01:ff:1d:42:d5:8a:55:
         2f:45:bf:a0:f5:f9:e2:2d:6b:38:f2:72:f3:da:da:b9:8d:06:
         b5:a7:44:24:1a:c2:2e:c8:ea:ae:20:96:1c:26:0f:43:4f:4f:
         42:cf:6f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:28:27 2026 by rpki-client