Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NuB2SNpmtMAjYiHbeEb7KkvktVp4Y8gaJNEe27Yhxe4/0/323830343a313434343a383030303a3a2f33332d3333203d3e20323633333232.roa
File:                     323830343a313434343a383030303a3a2f33332d3333203d3e20323633333232.roa (raw, json)
Hash identifier:          Ci2U6KPJeFlRog5ChxADG+LK44TVzYYo1+oBeqlKhcI=
Subject key identifier:   FD:A5:74:C7:30:44:13:61:AB:26:EB:B3:F8:68:D7:F9:F0:EF:18:53
Certificate issuer:       /CN=B498ECD3AAF078280F3CC4465E2E4A131EE6BBD8
Certificate serial:       06730E9205CA5A813592EB00DEF989406A844172
Authority key identifier: B4:98:EC:D3:AA:F0:78:28:0F:3C:C4:46:5E:2E:4A:13:1E:E6:BB:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B498ECD3AAF078280F3CC4465E2E4A131EE6BBD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NuB2SNpmtMAjYiHbeEb7KkvktVp4Y8gaJNEe27Yhxe4/0/323830343a313434343a383030303a3a2f33332d3333203d3e20323633333232.roa
Signing time:             Mon 25 May 2026 20:40:04 +0000
ROA not before:           Mon 25 May 2026 20:35:04 +0000
ROA not after:            Mon 24 May 2027 20:40:04 +0000
asID:                     263322
IP address blocks:        2804:1444:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NuB2SNpmtMAjYiHbeEb7KkvktVp4Y8gaJNEe27Yhxe4/0/B498ECD3AAF078280F3CC4465E2E4A131EE6BBD8.crl
                          rsync://rpki-repo.registro.br/repo/3NuB2SNpmtMAjYiHbeEb7KkvktVp4Y8gaJNEe27Yhxe4/0/B498ECD3AAF078280F3CC4465E2E4A131EE6BBD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B498ECD3AAF078280F3CC4465E2E4A131EE6BBD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 03:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:73:0e:92:05:ca:5a:81:35:92:eb:00:de:f9:89:40:6a:84:41:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B498ECD3AAF078280F3CC4465E2E4A131EE6BBD8
        Validity
            Not Before: May 25 20:35:04 2026 GMT
            Not After : May 24 20:40:04 2027 GMT
        Subject: CN=FDA574C730441361AB26EBB3F868D7F9F0EF1853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ca:f8:6b:3e:28:7f:4a:de:f8:19:32:24:69:
                    f0:4a:f5:33:a9:91:df:a6:ad:e3:46:e5:5e:9e:54:
                    1b:5f:ad:66:15:70:30:37:46:1e:be:b8:40:4a:31:
                    b0:c3:18:e5:68:17:c3:47:aa:b3:11:04:62:f9:e7:
                    c1:cc:8d:50:8a:df:74:de:cf:ef:13:cb:f7:cf:22:
                    17:e1:ac:61:eb:a4:6b:bf:d5:ac:ed:96:d6:d1:f4:
                    eb:fc:bb:32:0c:eb:3a:a2:ae:de:18:e5:65:6a:75:
                    41:fa:b3:6c:b4:fe:0f:66:6b:bb:96:5d:57:48:61:
                    e6:83:b7:d9:f8:2a:65:b0:72:2c:9d:2e:7d:c9:1c:
                    a3:02:d9:50:3e:dd:6f:c4:c0:8d:8c:17:39:39:aa:
                    ba:03:57:4b:31:38:dd:66:08:80:f5:30:de:70:6c:
                    f5:67:b9:aa:2e:83:bb:6a:38:e4:ee:6f:c3:b9:e6:
                    47:d3:c1:fd:9d:17:c0:4d:2a:27:8e:2a:ca:c6:26:
                    ef:64:e9:1d:27:0e:e8:72:3b:12:e1:08:0b:87:c6:
                    a3:c1:8f:e4:b8:d0:6c:bf:2f:97:da:1f:64:73:0d:
                    fd:b7:50:48:cc:e2:1d:9d:90:9e:5e:5e:a5:51:e6:
                    e4:56:33:0f:50:f3:f9:11:b7:3a:85:8c:d9:05:a6:
                    74:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A5:74:C7:30:44:13:61:AB:26:EB:B3:F8:68:D7:F9:F0:EF:18:53
            X509v3 Authority Key Identifier:
                keyid:B4:98:EC:D3:AA:F0:78:28:0F:3C:C4:46:5E:2E:4A:13:1E:E6:BB:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NuB2SNpmtMAjYiHbeEb7KkvktVp4Y8gaJNEe27Yhxe4/0/B498ECD3AAF078280F3CC4465E2E4A131EE6BBD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B498ECD3AAF078280F3CC4465E2E4A131EE6BBD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NuB2SNpmtMAjYiHbeEb7KkvktVp4Y8gaJNEe27Yhxe4/0/323830343a313434343a383030303a3a2f33332d3333203d3e20323633333232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1444:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         67:c3:c1:03:95:46:3c:7f:97:d2:32:63:63:83:a6:c4:c0:2b:
         02:e1:c4:12:9c:ac:e6:ad:56:06:8a:f3:f4:07:3f:67:fa:19:
         a2:90:68:0d:7e:db:8d:63:66:c2:92:51:20:19:ee:f1:57:a0:
         1a:90:8f:37:0b:d7:b8:0b:70:a0:3e:61:0d:82:88:e5:1e:7d:
         f2:da:0c:6d:06:b7:79:58:8a:fb:fa:18:21:ce:86:68:44:bb:
         5b:d6:bd:bc:00:2b:fc:f9:5b:3d:ff:7b:75:e7:24:06:c5:6b:
         1e:18:1d:ca:ee:1d:6d:e8:50:bc:81:73:34:2a:9e:42:88:f3:
         02:3e:df:96:8f:b0:cd:d2:e2:1e:5d:5e:f6:1e:b2:44:cf:5d:
         d5:e2:81:27:d6:3b:89:b4:1b:9d:54:1b:53:83:3b:b7:1f:f8:
         a7:bc:92:29:44:86:ab:fb:25:f9:88:1d:9d:a3:b3:2e:4d:9c:
         73:96:5e:6e:7a:c8:d8:0d:b3:07:f4:e2:2a:f2:c2:d5:5c:9e:
         20:fa:c0:c0:b2:1d:ef:f6:9c:a6:8a:ad:b6:c9:fa:e6:20:a9:
         36:45:0e:0f:87:99:de:16:c7:4e:c4:1c:25:3b:fd:62:17:a7:
         80:e4:b0:4f:70:ea:8b:ec:1d:09:62:9d:3a:6a:48:5d:e0:9f:
         a1:60:90:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:49:31 2026 by rpki-client