Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/323830343a393435633a31323a3a2f34382d3438203d3e203631363234.roa
File:                     323830343a393435633a31323a3a2f34382d3438203d3e203631363234.roa (raw, json)
Hash identifier:          GS8KHbQRI4PyamdhZl6DJVBemcQkz6Ags9WznVxqWdE=
Subject key identifier:   7D:87:57:74:75:F9:5F:5F:FE:67:B9:C8:78:7D:F5:2F:52:89:4A:AE
Certificate issuer:       /CN=3A039835A68C92594BA889BF185A560E86C0CFD1
Certificate serial:       0116840F0355F84C4F728C2216A58C15044D850F
Authority key identifier: 3A:03:98:35:A6:8C:92:59:4B:A8:89:BF:18:5A:56:0E:86:C0:CF:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A039835A68C92594BA889BF185A560E86C0CFD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/323830343a393435633a31323a3a2f34382d3438203d3e203631363234.roa
Signing time:             Wed 10 Jun 2026 02:17:40 +0000
ROA not before:           Wed 10 Jun 2026 02:12:40 +0000
ROA not after:            Wed 09 Jun 2027 02:17:40 +0000
asID:                     61624
IP address blocks:        2804:945c:12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/3A039835A68C92594BA889BF185A560E86C0CFD1.crl
                          rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/3A039835A68C92594BA889BF185A560E86C0CFD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A039835A68C92594BA889BF185A560E86C0CFD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:16:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:16:84:0f:03:55:f8:4c:4f:72:8c:22:16:a5:8c:15:04:4d:85:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A039835A68C92594BA889BF185A560E86C0CFD1
        Validity
            Not Before: Jun 10 02:12:40 2026 GMT
            Not After : Jun  9 02:17:40 2027 GMT
        Subject: CN=7D87577475F95F5FFE67B9C8787DF52F52894AAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fa:b0:7a:d7:69:b0:bb:b0:04:44:b9:e1:55:
                    a7:96:f9:fc:8c:5a:8c:0f:d6:d7:8a:40:15:2d:65:
                    09:aa:63:75:29:32:ef:a1:20:92:27:7a:df:cd:a5:
                    1b:6e:23:cb:93:6b:f7:54:20:3a:70:62:24:09:87:
                    a4:24:43:f9:73:f0:1c:8a:7b:39:87:0b:e5:f9:a7:
                    28:c6:cc:ff:43:1d:67:04:e8:8e:1f:b6:97:bb:52:
                    5c:9c:15:b2:b7:36:d2:7d:6b:64:a4:57:a9:5c:e7:
                    9e:81:e4:5f:28:2a:04:66:2c:d0:36:0e:eb:5c:ab:
                    7b:a1:91:34:37:a8:31:69:62:06:8a:5a:64:cf:49:
                    45:93:d8:70:82:15:8c:1e:e0:1a:f5:ce:3c:fe:7f:
                    a3:d4:34:07:28:d4:0a:9a:87:c0:3e:c2:41:5f:82:
                    42:6c:48:fa:b0:36:13:5b:be:50:e1:4a:4d:24:1c:
                    73:bf:14:08:31:02:05:c3:5b:71:3e:95:ae:33:9d:
                    79:42:a0:73:2f:fb:c2:66:32:a4:f9:8b:68:b1:4f:
                    7a:9e:e5:02:6f:19:e2:ef:92:92:be:01:d9:11:b9:
                    e7:2b:aa:35:fa:6d:17:2a:e1:4c:5e:87:d2:99:23:
                    64:9f:03:f8:69:ac:cc:34:43:f3:1e:f8:07:12:e3:
                    92:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:87:57:74:75:F9:5F:5F:FE:67:B9:C8:78:7D:F5:2F:52:89:4A:AE
            X509v3 Authority Key Identifier:
                keyid:3A:03:98:35:A6:8C:92:59:4B:A8:89:BF:18:5A:56:0E:86:C0:CF:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/3A039835A68C92594BA889BF185A560E86C0CFD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A039835A68C92594BA889BF185A560E86C0CFD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/323830343a393435633a31323a3a2f34382d3438203d3e203631363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:945c:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:c2:75:51:c8:22:9f:e2:29:a2:2c:b8:40:9c:0e:a5:00:66:
         e2:0a:f0:00:24:69:7c:b0:92:f5:43:4f:e1:7a:d5:8e:6b:25:
         6a:af:2e:e4:fa:f4:03:1f:59:ac:4c:a8:e4:14:ff:ff:3c:fc:
         f5:f3:4e:66:ce:4d:cc:63:a6:2f:31:64:e0:72:6d:5c:a3:c1:
         cd:46:12:ad:ac:5c:4e:af:3e:45:dd:2d:78:02:09:f8:3b:d5:
         16:ae:98:99:9a:85:66:d2:e5:4c:f1:e9:2a:54:0e:14:e2:da:
         e1:69:94:6c:56:16:50:0c:b0:8a:82:1e:93:74:c5:02:12:11:
         63:5f:5c:50:6c:5d:fa:f8:21:63:79:8d:23:69:66:04:9a:9e:
         e3:bd:e9:62:7b:c0:9c:d7:de:73:1c:3d:34:09:e5:3e:14:d0:
         ac:5e:8e:ba:c4:b9:41:f2:7a:36:13:d8:fe:46:f1:de:ec:cd:
         34:11:9b:0c:ea:de:d8:4d:51:a8:c0:3e:cf:9a:02:2e:3a:d5:
         50:87:41:0d:0f:be:2d:8c:2a:01:6c:62:d6:6d:cc:e6:55:9e:
         67:0f:8e:54:39:c4:75:d0:1f:da:9a:66:4b:1d:a5:24:43:c2:
         ed:da:3c:27:35:db:ca:c6:c5:3e:b8:88:25:1a:8f:93:2c:0c:
         b2:54:20:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:58:13 2026 by rpki-client