Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CJhZ4xjJMisAy9peWEGcrwwV3KPakfshLDsJaGdq61Q/0/323830343a363964343a3a2f33322d313238203d3e20323730323934.roa
File:                     323830343a363964343a3a2f33322d313238203d3e20323730323934.roa (raw, json)
Hash identifier:          emdjgvSID/Giduxv+xXOVY9vNW+CLPYAD5cOZ/HFH6k=
Subject key identifier:   E8:89:45:C6:BB:D8:D3:DF:89:94:9D:5D:52:7D:38:6D:38:F6:87:84
Certificate issuer:       /CN=6204BC9725E5D8C3C975CB5956CB8BDA954F8F72
Certificate serial:       4E262C38C9090901DA17CE10BFB735CDBD6479CB
Authority key identifier: 62:04:BC:97:25:E5:D8:C3:C9:75:CB:59:56:CB:8B:DA:95:4F:8F:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6204BC9725E5D8C3C975CB5956CB8BDA954F8F72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CJhZ4xjJMisAy9peWEGcrwwV3KPakfshLDsJaGdq61Q/0/323830343a363964343a3a2f33322d313238203d3e20323730323934.roa
Signing time:             Fri 05 Jun 2026 13:20:49 +0000
ROA not before:           Fri 05 Jun 2026 13:15:49 +0000
ROA not after:            Fri 04 Jun 2027 13:20:49 +0000
asID:                     270294
IP address blocks:        2804:69d4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3CJhZ4xjJMisAy9peWEGcrwwV3KPakfshLDsJaGdq61Q/0/6204BC9725E5D8C3C975CB5956CB8BDA954F8F72.crl
                          rsync://rpki-repo.registro.br/repo/3CJhZ4xjJMisAy9peWEGcrwwV3KPakfshLDsJaGdq61Q/0/6204BC9725E5D8C3C975CB5956CB8BDA954F8F72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6204BC9725E5D8C3C975CB5956CB8BDA954F8F72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 00:14:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:26:2c:38:c9:09:09:01:da:17:ce:10:bf:b7:35:cd:bd:64:79:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6204BC9725E5D8C3C975CB5956CB8BDA954F8F72
        Validity
            Not Before: Jun  5 13:15:49 2026 GMT
            Not After : Jun  4 13:20:49 2027 GMT
        Subject: CN=E88945C6BBD8D3DF89949D5D527D386D38F68784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1e:7c:50:bd:cd:31:d2:24:0d:e2:75:4e:04:
                    bf:28:24:0f:98:e0:b6:ee:38:23:84:ba:c5:c7:11:
                    a9:d2:76:94:08:71:8f:cb:59:3f:49:eb:97:26:c1:
                    df:15:b7:b6:b9:91:f9:d1:20:cd:f8:e5:e9:20:f9:
                    6f:18:b4:f7:32:5a:64:54:b6:2c:23:36:a5:82:8b:
                    53:9a:a2:fd:41:6e:2a:cd:fe:2c:ca:6a:96:f1:80:
                    5b:18:f7:1b:e0:54:b1:6c:24:40:01:ec:a1:74:f1:
                    cc:0e:d9:e1:a2:e9:db:19:a2:a4:ca:02:62:b1:f9:
                    24:bf:74:44:1b:2e:88:5e:e5:9e:c6:ea:92:04:04:
                    63:27:53:49:e5:46:15:92:a5:7e:66:96:09:d1:8c:
                    66:b0:89:1e:14:1b:75:a0:22:bb:e9:5c:04:d4:60:
                    9d:e4:7f:2d:4a:1a:99:91:8f:29:d4:e4:7d:32:1a:
                    b8:00:c4:0e:94:14:70:d7:11:06:6b:39:96:7c:48:
                    51:76:de:61:b9:bc:24:50:cd:33:e2:44:d1:30:f2:
                    c5:b1:ca:dd:30:6b:41:6c:eb:31:72:ec:60:f0:09:
                    e8:35:0b:be:b3:b3:ad:6e:75:eb:bb:c4:76:1c:d9:
                    0c:de:b1:4e:d7:ea:07:61:0b:40:44:b2:3c:c6:3b:
                    e4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:89:45:C6:BB:D8:D3:DF:89:94:9D:5D:52:7D:38:6D:38:F6:87:84
            X509v3 Authority Key Identifier:
                keyid:62:04:BC:97:25:E5:D8:C3:C9:75:CB:59:56:CB:8B:DA:95:4F:8F:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CJhZ4xjJMisAy9peWEGcrwwV3KPakfshLDsJaGdq61Q/0/6204BC9725E5D8C3C975CB5956CB8BDA954F8F72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6204BC9725E5D8C3C975CB5956CB8BDA954F8F72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CJhZ4xjJMisAy9peWEGcrwwV3KPakfshLDsJaGdq61Q/0/323830343a363964343a3a2f33322d313238203d3e20323730323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:69d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:c0:85:59:fb:87:e6:6f:33:4a:26:4e:68:f4:bd:11:99:d7:
         a4:f1:92:6e:5c:02:9a:a3:c9:9d:c6:bf:82:31:f1:eb:01:fa:
         b0:a0:a7:a1:c3:f9:6d:f8:12:bd:8b:78:09:61:c3:9e:9f:b3:
         81:56:e4:8f:88:c4:65:a1:10:17:3b:d4:51:9b:62:d5:8e:19:
         9b:6d:f4:ad:f0:ec:ef:cd:50:b6:a4:ef:ef:bc:9e:5f:69:33:
         af:d4:45:5f:61:bb:95:30:54:4f:f0:48:bc:6a:06:1f:c4:e6:
         c6:99:09:db:d5:f9:4b:80:aa:17:b0:df:95:f0:c5:69:77:23:
         19:b1:2b:d6:a4:28:9a:57:65:30:dd:fa:e0:b7:df:2f:44:e1:
         9c:4d:fa:22:a1:94:0f:f3:aa:48:7c:e8:50:82:b9:b6:9b:7c:
         79:ab:79:21:11:f5:7b:d0:bd:ab:13:0a:f8:80:f8:51:7c:5f:
         d9:0f:d2:35:30:a8:37:4d:a2:79:27:7c:4f:ab:a4:52:90:10:
         1f:8d:07:81:44:f9:90:01:26:2e:2d:8a:f9:e5:f4:c1:ec:52:
         ad:fa:77:b5:c4:d2:66:ee:35:50:e0:d3:b4:45:da:ed:2f:e1:
         36:7c:34:9e:e0:a9:36:d2:93:87:a2:d6:16:6f:0a:f1:6c:82:
         2e:1e:85:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:54:47 2026 by rpki-client