Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/323830343a366538343a633030303a3a2f33342d3334203d3e20323730363032.roa
File:                     323830343a366538343a633030303a3a2f33342d3334203d3e20323730363032.roa (raw, json)
Hash identifier:          tG22rF0hn4w/54AxonXl1iztmdulXf+6fgXiMq/2hwM=
Subject key identifier:   C8:6E:24:7A:68:75:CB:EB:9B:A5:F1:06:F7:0D:DB:07:A5:4A:9C:AB
Certificate issuer:       /CN=EA8978EA326E0C135B17DA6DCA463EFC4F313FD7
Certificate serial:       74040023F44940436228FBA1FB81C667EA16FEBE
Authority key identifier: EA:89:78:EA:32:6E:0C:13:5B:17:DA:6D:CA:46:3E:FC:4F:31:3F:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/323830343a366538343a633030303a3a2f33342d3334203d3e20323730363032.roa
Signing time:             Wed 27 May 2026 13:01:21 +0000
ROA not before:           Wed 27 May 2026 12:56:21 +0000
ROA not after:            Wed 26 May 2027 13:01:21 +0000
asID:                     270602
IP address blocks:        2804:6e84:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.crl
                          rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 00:05:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:04:00:23:f4:49:40:43:62:28:fb:a1:fb:81:c6:67:ea:16:fe:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA8978EA326E0C135B17DA6DCA463EFC4F313FD7
        Validity
            Not Before: May 27 12:56:21 2026 GMT
            Not After : May 26 13:01:21 2027 GMT
        Subject: CN=C86E247A6875CBEB9BA5F106F70DDB07A54A9CAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c9:39:e9:14:1c:26:0c:09:af:c1:25:87:ff:
                    b1:6f:6a:e7:69:92:d7:96:78:ed:56:61:d7:3f:6a:
                    4d:51:c2:c1:70:e8:2c:08:d1:ea:9f:8a:ae:2f:86:
                    23:6f:03:a7:30:cd:1f:0b:93:be:2e:bd:84:3e:21:
                    95:44:b0:f6:65:3f:4b:3c:b2:a5:45:53:4f:27:0f:
                    b9:5a:7f:26:7c:65:42:d1:87:d5:07:66:b3:9d:ba:
                    0c:b8:c3:e5:81:d5:33:04:7e:22:86:bb:77:57:cf:
                    a4:ba:d8:93:18:58:17:e3:45:8b:58:51:29:cf:75:
                    17:1a:1d:1e:ff:bb:2f:11:4d:6e:44:f7:37:55:71:
                    bd:bc:c1:80:7f:97:e0:a1:8e:de:49:a1:e1:d8:26:
                    94:e2:7c:92:3a:88:31:bc:f8:75:e8:57:fb:61:cb:
                    38:8b:3a:f1:ec:fd:ab:34:06:07:6e:31:65:0d:00:
                    79:2b:86:b0:7c:58:2f:eb:6e:07:0b:47:02:d2:9f:
                    61:b5:cb:e8:81:3d:9b:00:fa:73:1a:15:e8:90:d0:
                    39:97:47:b1:20:60:3c:da:14:b4:ff:99:d8:5a:11:
                    ed:af:fa:98:0e:6f:54:bb:7b:41:85:d9:d7:0e:f8:
                    64:d2:8e:03:8a:81:30:d3:dc:f2:af:47:1b:e2:5e:
                    8f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:6E:24:7A:68:75:CB:EB:9B:A5:F1:06:F7:0D:DB:07:A5:4A:9C:AB
            X509v3 Authority Key Identifier:
                keyid:EA:89:78:EA:32:6E:0C:13:5B:17:DA:6D:CA:46:3E:FC:4F:31:3F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/323830343a366538343a633030303a3a2f33342d3334203d3e20323730363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e84:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         cd:20:51:88:12:1d:98:68:30:4f:33:33:a3:bf:24:92:bb:13:
         2e:f4:eb:39:83:43:c6:f8:ac:3e:f0:e6:5c:7c:8c:71:63:67:
         84:4a:44:4f:bb:21:70:be:15:44:04:55:b5:ec:ce:92:e2:04:
         c7:b4:09:f8:3d:97:f6:d5:69:ed:a7:2a:42:81:19:53:28:7f:
         84:da:8d:a1:a3:db:8e:92:1b:37:a7:c2:aa:69:29:15:2a:e0:
         a6:db:7e:17:f5:c2:f8:32:42:a6:d6:2d:a4:d5:b3:6d:8b:88:
         11:26:ee:f9:fd:77:c6:9c:91:45:83:4a:82:81:1f:56:e0:8e:
         e5:e1:38:7f:29:52:b8:5c:fd:4f:99:11:39:6a:68:4c:b1:9d:
         d2:47:62:cf:99:38:13:e7:40:35:f2:5b:bc:e8:a3:ca:0f:3c:
         be:c7:40:da:6c:65:cb:81:49:0b:0a:7f:6e:01:e7:9f:64:11:
         ca:ea:e5:10:bc:ae:b4:cb:16:da:10:6f:5e:9d:74:d5:ef:d6:
         20:d3:d7:08:57:40:7f:c5:0d:10:ad:2a:03:e4:fe:5d:84:22:
         03:0a:4b:cb:ba:aa:ad:23:2e:15:50:c2:fe:3f:59:b8:ef:2f:
         35:d2:12:f7:3d:f2:26:29:25:8a:7a:c8:29:e2:f8:77:97:85:
         33:67:4e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:38:49 2026 by rpki-client