Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/323830343a366538343a383030303a3a2f33342d3334203d3e20323730363032.roa
File:                     323830343a366538343a383030303a3a2f33342d3334203d3e20323730363032.roa (raw, json)
Hash identifier:          d0pD5QGIA6YGKIZCPUv4YOvo2Q1MgNeUkbxC0JBVccY=
Subject key identifier:   6B:07:9B:5A:44:A8:0F:74:E3:8F:8B:98:46:67:E2:21:83:CC:C9:E0
Certificate issuer:       /CN=EA8978EA326E0C135B17DA6DCA463EFC4F313FD7
Certificate serial:       55AF80F3B4606DC8A10A7399265A0A930D0A192A
Authority key identifier: EA:89:78:EA:32:6E:0C:13:5B:17:DA:6D:CA:46:3E:FC:4F:31:3F:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/323830343a366538343a383030303a3a2f33342d3334203d3e20323730363032.roa
Signing time:             Wed 27 May 2026 13:01:22 +0000
ROA not before:           Wed 27 May 2026 12:56:22 +0000
ROA not after:            Wed 26 May 2027 13:01:22 +0000
asID:                     270602
IP address blocks:        2804:6e84:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.crl
                          rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 00:05:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:af:80:f3:b4:60:6d:c8:a1:0a:73:99:26:5a:0a:93:0d:0a:19:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA8978EA326E0C135B17DA6DCA463EFC4F313FD7
        Validity
            Not Before: May 27 12:56:22 2026 GMT
            Not After : May 26 13:01:22 2027 GMT
        Subject: CN=6B079B5A44A80F74E38F8B984667E22183CCC9E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:fb:80:76:1e:77:9e:38:7a:dd:2f:35:30:a4:
                    17:66:46:74:47:ae:9b:07:3d:e3:28:ff:24:fb:6c:
                    26:4d:ab:4a:1e:53:77:00:58:bb:dc:55:bb:7c:8f:
                    7e:08:e5:a1:be:6d:80:00:d8:ff:4e:47:25:3b:42:
                    da:87:55:2d:31:6f:5a:74:6f:e0:e6:0c:cf:88:24:
                    95:cf:fc:fe:d1:33:e3:31:a2:0b:55:71:c1:40:55:
                    96:b1:50:67:3c:3e:7b:c1:55:3f:73:a2:9d:51:76:
                    45:f8:57:16:05:82:79:8c:64:34:b8:3a:bf:73:3f:
                    af:f1:ee:c9:2d:80:2b:b6:d3:76:fd:03:18:59:6f:
                    57:54:c9:98:b5:10:0c:66:98:b4:d3:87:1a:47:a0:
                    82:af:ad:e1:0f:73:71:e4:7a:1d:78:44:a9:d0:93:
                    04:0a:43:da:6a:04:ef:34:a9:73:48:55:5e:70:67:
                    2e:bd:8d:33:6c:ac:fb:b5:b2:88:04:f0:c5:d3:a8:
                    64:63:e2:0b:fc:ef:8f:c8:7a:71:b2:b1:e5:99:23:
                    0e:01:28:4e:35:ac:61:57:3f:da:6f:ad:c9:67:73:
                    7f:5c:90:b0:3e:d8:7b:40:2e:9f:68:3d:74:3d:62:
                    0b:74:40:bb:cb:19:eb:2a:5d:a2:bd:2f:1e:a1:32:
                    07:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:07:9B:5A:44:A8:0F:74:E3:8F:8B:98:46:67:E2:21:83:CC:C9:E0
            X509v3 Authority Key Identifier:
                keyid:EA:89:78:EA:32:6E:0C:13:5B:17:DA:6D:CA:46:3E:FC:4F:31:3F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/323830343a366538343a383030303a3a2f33342d3334203d3e20323730363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e84:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         dd:b6:0c:af:36:9d:d1:9a:6e:38:de:90:0f:42:99:aa:50:44:
         19:3a:3c:1a:7e:7a:1d:39:59:33:a7:ee:97:42:71:1f:8f:76:
         e7:03:d9:e3:05:35:5f:67:6c:15:72:8e:5a:65:17:37:8d:14:
         42:75:8c:fa:e8:f4:1d:69:27:11:7f:cc:07:bb:f5:1f:9d:62:
         a4:13:fe:13:6d:5f:4f:b7:62:a1:0f:67:bf:a2:45:c5:be:38:
         c7:83:42:7b:06:0f:be:8b:11:51:6e:42:ff:38:09:7f:3d:1d:
         87:2d:75:63:9b:4c:88:ef:32:59:0a:6a:80:9e:33:c4:6e:cc:
         ff:0e:06:16:f0:f7:33:03:94:09:6f:c2:c4:45:cd:92:70:98:
         4f:97:a0:ca:d9:c4:47:0f:81:db:27:a3:1a:6c:c2:05:50:d3:
         c8:44:5b:e8:49:4c:4e:97:47:56:96:a8:4f:67:53:f0:7a:b4:
         b3:70:76:49:d9:23:56:e0:4b:98:b0:3e:0b:b3:ad:21:60:92:
         65:eb:9b:0a:9c:ad:64:7b:3b:37:64:54:e0:4f:da:65:38:c7:
         4b:2f:f6:61:37:4c:5c:84:89:a7:1a:a2:40:d9:8a:67:86:e1:
         60:c7:29:a0:04:74:5f:f9:32:67:b0:a2:7d:5c:91:b7:92:b1:
         53:2a:90:93
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUVa+A87RgbcihCnOZJloKkw0KGSowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUE4OTc4RUEzMjZFMEMxMzVCMTdEQTZEQ0E0NjNFRkM0
RjMxM0ZENzAeFw0yNjA1MjcxMjU2MjJaFw0yNzA1MjYxMzAxMjJaMDMxMTAvBgNV
BAMTKDZCMDc5QjVBNDRBODBGNzRFMzhGOEI5ODQ2NjdFMjIxODNDQ0M5RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0+4B2HneeOHrdLzUwpBdmRnRH
rpsHPeMo/yT7bCZNq0oeU3cAWLvcVbt8j34I5aG+bYAA2P9ORyU7QtqHVS0xb1p0
b+DmDM+IJJXP/P7RM+MxogtVccFAVZaxUGc8PnvBVT9zop1RdkX4VxYFgnmMZDS4
Or9zP6/x7sktgCu203b9AxhZb1dUyZi1EAxmmLTThxpHoIKvreEPc3Hkeh14RKnQ
kwQKQ9pqBO80qXNIVV5wZy69jTNsrPu1sogE8MXTqGRj4gv874/IenGyseWZIw4B
KE41rGFXP9pvrclnc39ckLA+2HtALp9oPXQ9Ygt0QLvLGesqXaK9Lx6hMgdTAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUawebWkSoD3Tjj4uYRmfiIYPMyeAwHwYDVR0j
BBgwFoAU6ol46jJuDBNbF9ptykY+/E8xP9cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM29hOGNUa3Riek1jc1ZvcFphMXNLamlDZ0hia1g1bjM4eGpabnFvTWoy
eXIvMC9FQTg5NzhFQTMyNkUwQzEzNUIxN0RBNkRDQTQ2M0VGQzRGMzEzRkQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBODk3OEVBMzI2RTBDMTM1
QjE3REE2RENBNDYzRUZDNEYzMTNGRDcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNvYThjVGt0YnpNY3NWb3BaYTFzS2ppQ2dIYmtYNW4zOHhqWm5xb01qMnlyLzAv
MzIzODMwMzQzYTM2NjUzODM0M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMDM2MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEboSAMA0GCSqGSIb3DQEBCwUA
A4IBAQDdtgyvNp3Rmm443pAPQpmqUEQZOjwafnodOVkzp+6XQnEfj3bnA9njBTVf
Z2wVco5aZRc3jRRCdYz66PQdaScRf8wHu/UfnWKkE/4TbV9Pt2KhD2e/okXFvjjH
g0J7Bg++ixFRbkL/OAl/PR2HLXVjm0yI7zJZCmqAnjPEbsz/DgYW8PczA5QJb8LE
Rc2ScJhPl6DK2cRHD4HbJ6MabMIFUNPIRFvoSUxOl0dWlqhPZ1PwerSzcHZJ2SNW
4EuYsD4Ls60hYJJl65sKnK1kezs3ZFTgT9plOMdLL/ZhN0xchImnGqJA2YpnhuFg
xymgBHRf+TJnsKJ9XJG3krFTKpCT
-----END CERTIFICATE-----
Generated at Sun Jun 14 07:40:08 2026 by rpki-client