Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/323830343a366663383a3a2f33362d3438203d3e20323730363834.roa
File:                     323830343a366663383a3a2f33362d3438203d3e20323730363834.roa (raw, json)
Hash identifier:          qjzRcpdv0KJX9yg7YL88kyVIcfz5uFoaPOQ/7Fjrjmw=
Subject key identifier:   02:37:1F:48:31:BD:9B:5C:8A:22:2E:29:8F:54:9C:91:54:CF:6B:7B
Certificate issuer:       /CN=29A96793452E2B32144979041E6B16BCE919E3D7
Certificate serial:       4AFED1DF9A04F1ADA8173BF5BB61F7D9F51DB568
Authority key identifier: 29:A9:67:93:45:2E:2B:32:14:49:79:04:1E:6B:16:BC:E9:19:E3:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A96793452E2B32144979041E6B16BCE919E3D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/323830343a366663383a3a2f33362d3438203d3e20323730363834.roa
Signing time:             Sun 31 May 2026 11:26:23 +0000
ROA not before:           Sun 31 May 2026 11:21:23 +0000
ROA not after:            Sun 30 May 2027 11:26:23 +0000
asID:                     270684
IP address blocks:        2804:6fc8::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/29A96793452E2B32144979041E6B16BCE919E3D7.crl
                          rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/29A96793452E2B32144979041E6B16BCE919E3D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A96793452E2B32144979041E6B16BCE919E3D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 01:59:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:fe:d1:df:9a:04:f1:ad:a8:17:3b:f5:bb:61:f7:d9:f5:1d:b5:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29A96793452E2B32144979041E6B16BCE919E3D7
        Validity
            Not Before: May 31 11:21:23 2026 GMT
            Not After : May 30 11:26:23 2027 GMT
        Subject: CN=02371F4831BD9B5C8A222E298F549C9154CF6B7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:32:f0:5c:e4:bd:8a:ce:cb:71:2b:8e:9f:c7:
                    56:97:2c:e2:1c:24:39:c5:b2:bd:0b:90:62:94:b9:
                    6b:21:85:94:08:0c:46:7a:c8:fa:dd:82:65:d4:d2:
                    6a:15:52:dc:c0:c7:49:25:99:6f:bc:76:d2:14:1f:
                    0e:72:fb:af:78:cc:ac:fa:ae:c6:00:64:17:75:90:
                    ce:45:d6:d6:43:0b:ff:17:54:5c:51:09:c3:d9:50:
                    ee:c6:80:10:65:cb:74:80:98:0b:df:3e:75:da:1e:
                    f4:a2:1c:83:e6:9e:a2:84:36:54:e0:f7:63:0d:fc:
                    01:52:e8:8b:54:fa:ba:9b:d2:49:79:21:4e:4a:c8:
                    3c:36:75:ae:d9:c8:a9:f4:63:0a:f8:8b:c1:28:2f:
                    35:06:46:ac:c8:7c:18:32:69:4a:a6:21:10:1c:8b:
                    ab:9c:45:c8:9d:18:c0:be:a6:98:cb:11:45:f9:f2:
                    f9:80:03:80:23:cb:13:52:2e:a1:6f:e7:71:32:85:
                    cd:13:c9:14:07:38:44:c9:e0:03:80:41:c7:6b:b5:
                    1e:71:b3:b6:dc:2c:31:ae:80:64:85:9c:9c:fa:ec:
                    34:8a:7d:5e:9b:5b:71:88:ca:78:5c:fc:66:2b:24:
                    e1:86:74:f6:8b:31:e7:44:f3:ec:96:46:59:16:a6:
                    3a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:37:1F:48:31:BD:9B:5C:8A:22:2E:29:8F:54:9C:91:54:CF:6B:7B
            X509v3 Authority Key Identifier:
                keyid:29:A9:67:93:45:2E:2B:32:14:49:79:04:1E:6B:16:BC:E9:19:E3:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/29A96793452E2B32144979041E6B16BCE919E3D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A96793452E2B32144979041E6B16BCE919E3D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/323830343a366663383a3a2f33362d3438203d3e20323730363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fc8::/36

    Signature Algorithm: sha256WithRSAEncryption
         12:33:82:8f:e4:fd:c3:dc:b1:18:b2:56:e3:71:6a:a7:92:b4:
         13:e0:60:ca:69:49:9b:b9:ad:85:56:49:98:33:8b:ef:37:9b:
         c2:5f:73:1b:b7:7d:fa:b4:0b:76:b5:eb:5a:f1:e5:0e:ad:eb:
         09:31:0f:e9:69:e2:bf:37:28:5f:d0:60:ac:1e:73:c3:a4:59:
         0c:69:6c:af:34:10:d8:e4:b8:69:0a:eb:37:a4:eb:a5:70:a1:
         74:69:d7:30:d4:8b:ea:79:ee:e9:0e:c2:e3:71:02:a8:17:54:
         db:65:73:69:27:d2:d5:71:0e:0e:1f:59:81:24:94:88:cc:d8:
         69:a7:a0:2d:26:e6:03:bd:6a:cf:22:ac:1c:c5:c9:33:05:5d:
         37:36:45:78:bf:02:2c:8c:02:62:6d:25:77:5b:f0:18:fe:05:
         80:b4:ff:25:0f:38:d2:3a:a8:85:0f:56:8c:80:cf:97:cd:16:
         52:fd:c8:46:42:2d:64:53:66:ac:da:11:08:7f:0f:32:17:73:
         64:ae:65:91:82:65:47:6d:83:03:a0:4f:c8:35:e9:b8:82:8b:
         00:8a:85:b9:cf:ef:12:34:3a:82:5e:11:01:f3:99:07:c8:37:
         8a:c0:8d:a7:02:cb:36:27:2a:74:c5:94:78:91:7f:29:f6:96:
         f4:49:ac:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:19:46 2026 by rpki-client