Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/323830343a343534633a3a2f33322d3332203d3e20323636393137.roa
File:                     323830343a343534633a3a2f33322d3332203d3e20323636393137.roa (raw, json)
Hash identifier:          23lQ/yeAmaEK9ahkyVZa0ERp9YRwFsX182I+mMoqmB4=
Subject key identifier:   BC:9F:4B:3B:CE:C3:A5:36:C6:35:09:5B:6D:39:7B:15:CA:77:DB:B5
Certificate issuer:       /CN=D2F572ACB12354BDA22E38D3A999DE5A4EE48792
Certificate serial:       20B663B4F176B48414C145883555786D338EA0D2
Authority key identifier: D2:F5:72:AC:B1:23:54:BD:A2:2E:38:D3:A9:99:DE:5A:4E:E4:87:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/323830343a343534633a3a2f33322d3332203d3e20323636393137.roa
Signing time:             Tue 09 Jun 2026 16:12:07 +0000
ROA not before:           Tue 09 Jun 2026 16:07:07 +0000
ROA not after:            Tue 08 Jun 2027 16:12:07 +0000
asID:                     266917
IP address blocks:        2804:454c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.crl
                          rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 01:52:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:b6:63:b4:f1:76:b4:84:14:c1:45:88:35:55:78:6d:33:8e:a0:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2F572ACB12354BDA22E38D3A999DE5A4EE48792
        Validity
            Not Before: Jun  9 16:07:07 2026 GMT
            Not After : Jun  8 16:12:07 2027 GMT
        Subject: CN=BC9F4B3BCEC3A536C635095B6D397B15CA77DBB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:59:54:52:7d:f9:c1:e6:3e:2c:54:be:74:24:
                    66:08:ed:7d:7b:58:63:79:d8:c2:3c:35:2f:5c:4b:
                    45:ef:38:31:2e:36:17:c4:5b:3a:ee:6b:b8:c6:ff:
                    e0:cc:34:ce:95:13:bf:b5:51:f9:bd:46:ed:55:cc:
                    1e:6e:fe:1b:27:4d:99:e6:2e:3a:f5:ac:d7:9a:5e:
                    13:cc:d1:67:29:70:ea:e2:04:a0:55:44:5e:cf:93:
                    33:09:85:ec:2a:b4:40:ce:a3:4d:ad:ba:09:a6:6a:
                    ca:41:ae:96:e7:ff:4c:a1:6e:eb:6e:c0:a6:a7:1a:
                    6a:e2:21:bc:f5:28:c6:ba:7a:44:db:32:5e:41:4d:
                    ca:db:52:84:33:7f:5c:e3:6d:1c:a5:30:6a:7a:13:
                    98:14:0f:a6:9b:c8:d5:52:ea:e0:f2:49:1b:0e:f3:
                    b2:a2:0f:de:56:17:8d:1b:2b:71:b2:4b:c2:9b:2d:
                    8c:9e:b8:85:37:67:cb:e8:b1:e8:31:09:d7:80:01:
                    0b:89:c3:e9:e4:b5:00:18:7d:f7:c6:f3:45:8d:49:
                    22:ac:e4:61:39:7b:87:60:01:34:ff:e4:12:8b:d8:
                    50:2e:8e:fc:03:9b:76:e7:9a:d0:d6:51:52:58:b4:
                    9d:de:9e:8c:15:3c:4c:a9:f3:4b:2b:72:40:1e:f7:
                    14:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:9F:4B:3B:CE:C3:A5:36:C6:35:09:5B:6D:39:7B:15:CA:77:DB:B5
            X509v3 Authority Key Identifier:
                keyid:D2:F5:72:AC:B1:23:54:BD:A2:2E:38:D3:A9:99:DE:5A:4E:E4:87:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/323830343a343534633a3a2f33322d3332203d3e20323636393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:454c::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:15:83:ac:0f:0d:c7:48:4a:1b:38:cf:44:09:9d:78:d1:2a:
         5f:84:51:77:67:f5:88:29:99:12:47:99:19:7c:2a:ea:ea:0b:
         44:22:be:9e:40:11:c2:47:2f:6c:31:e4:45:99:6d:ae:5c:13:
         35:ab:f8:d8:19:ab:17:f0:ba:5e:57:ac:ef:5f:98:4f:73:6d:
         69:ed:c0:2f:76:c1:25:e1:1e:bd:df:06:87:09:e2:4d:34:46:
         6b:4b:38:cc:e3:77:b6:46:93:58:d6:d0:cb:66:8d:2a:00:b4:
         0e:e9:80:7b:4a:d9:96:d1:f5:4a:74:6e:ee:da:75:b5:f2:e3:
         2c:1c:e2:0b:8d:37:2b:40:39:5d:41:12:a7:70:ca:39:71:55:
         0e:a6:54:ee:3e:56:06:5f:90:c9:22:4b:e9:4b:a9:7e:a5:60:
         07:8e:1b:09:95:d9:7c:8c:79:de:63:2e:74:f4:17:92:f7:8a:
         b6:b7:85:89:0a:94:1f:37:52:31:4e:25:9d:59:cf:62:11:e0:
         e6:94:03:61:f5:cc:e6:50:5f:e8:26:10:df:8c:03:79:09:66:
         e6:96:eb:2f:63:e6:23:3e:46:f3:bb:86:4e:53:30:d1:f1:1e:
         fc:02:4a:ad:ac:68:ce:0c:ee:b4:a3:d8:c7:1e:df:e1:e6:c3:
         25:52:1c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:30:01 2026 by rpki-client