Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/323830343a313162343a383030303a3a2f33342d3334203d3e20323633343333.roa
File:                     323830343a313162343a383030303a3a2f33342d3334203d3e20323633343333.roa (raw, json)
Hash identifier:          pKAXJN2coyIJdrMRbGOvGCGQJUFpCYIQ9eMcJkO0d4Y=
Subject key identifier:   22:35:55:04:F9:00:56:61:0D:60:5E:5D:29:75:98:55:9F:FF:76:C4
Certificate issuer:       /CN=E4B55D0394EBCE78FC73953C3CE5357A5D391082
Certificate serial:       1FF9353444051E44824C93EAD387F6EB7C773A99
Authority key identifier: E4:B5:5D:03:94:EB:CE:78:FC:73:95:3C:3C:E5:35:7A:5D:39:10:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B55D0394EBCE78FC73953C3CE5357A5D391082.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/323830343a313162343a383030303a3a2f33342d3334203d3e20323633343333.roa
Signing time:             Wed 10 Jun 2026 11:40:53 +0000
ROA not before:           Wed 10 Jun 2026 11:35:53 +0000
ROA not after:            Wed 09 Jun 2027 11:40:53 +0000
asID:                     263433
IP address blocks:        2804:11b4:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/E4B55D0394EBCE78FC73953C3CE5357A5D391082.crl
                          rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/E4B55D0394EBCE78FC73953C3CE5357A5D391082.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B55D0394EBCE78FC73953C3CE5357A5D391082.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 10:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f9:35:34:44:05:1e:44:82:4c:93:ea:d3:87:f6:eb:7c:77:3a:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4B55D0394EBCE78FC73953C3CE5357A5D391082
        Validity
            Not Before: Jun 10 11:35:53 2026 GMT
            Not After : Jun  9 11:40:53 2027 GMT
        Subject: CN=22355504F90056610D605E5D297598559FFF76C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f4:f1:c7:40:85:79:83:4f:ac:8e:39:6b:af:
                    3d:c3:90:8f:2b:4d:4b:82:42:c5:3a:eb:63:f6:3e:
                    25:d7:9e:38:55:62:d5:d1:bc:89:56:32:44:d2:4b:
                    d3:17:e2:42:29:79:84:ed:12:aa:db:cd:7f:eb:22:
                    6e:9c:c7:35:f5:36:2e:08:83:48:2f:bb:d3:fa:bf:
                    54:1d:52:76:6b:20:22:d3:44:5f:d4:46:c8:1c:93:
                    a4:9d:52:8f:bf:3f:cb:85:9f:39:df:b9:b9:0d:e3:
                    8e:05:dd:77:6d:33:0f:d8:8e:38:de:84:45:3b:db:
                    a2:9b:86:42:53:d7:2f:0b:3b:6f:68:4f:ea:5b:00:
                    36:50:7c:26:21:f2:c1:aa:da:5d:1d:1c:3d:ec:da:
                    85:38:38:40:f5:83:d7:61:62:fa:4d:81:63:71:e4:
                    b5:3c:98:9d:b2:a3:c4:28:61:49:f4:16:e9:98:cd:
                    98:9c:71:b8:1e:47:40:e2:31:aa:fd:00:16:d0:c4:
                    27:c2:de:3c:60:eb:b0:75:bf:4d:1d:36:d6:b4:7e:
                    6e:14:80:d2:d0:1c:6e:a9:b5:04:da:45:12:6b:47:
                    32:b3:9d:79:7f:6a:40:40:5a:2d:9a:88:3b:1f:b7:
                    ff:d5:2f:2c:e9:fc:8e:ac:67:e6:f4:c9:4c:b8:2b:
                    d0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:35:55:04:F9:00:56:61:0D:60:5E:5D:29:75:98:55:9F:FF:76:C4
            X509v3 Authority Key Identifier:
                keyid:E4:B5:5D:03:94:EB:CE:78:FC:73:95:3C:3C:E5:35:7A:5D:39:10:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/E4B55D0394EBCE78FC73953C3CE5357A5D391082.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B55D0394EBCE78FC73953C3CE5357A5D391082.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/323830343a313162343a383030303a3a2f33342d3334203d3e20323633343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:11b4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5a:83:21:2f:be:55:35:2f:e0:6b:ee:7d:95:9c:14:b0:50:44:
         52:20:0a:52:8f:f8:95:e0:c0:23:9e:75:fa:bc:8d:11:9a:d4:
         11:af:86:69:b4:66:6e:50:f4:ed:4b:58:9b:21:22:db:1a:3b:
         9c:86:4e:77:33:5a:52:ae:2e:d5:27:11:5c:81:c0:16:75:f1:
         23:2d:00:36:70:de:85:b4:95:cb:69:c9:57:8a:be:65:1d:13:
         e8:4f:9c:85:c7:74:49:cf:df:cf:44:e2:5b:11:c9:0b:bc:a5:
         65:8f:92:37:87:38:75:06:be:fe:c9:f8:5f:68:05:01:08:54:
         a8:e2:ef:a0:e5:cd:bf:07:e4:49:5b:26:ba:31:25:e2:88:80:
         4a:c0:8c:93:d4:21:d5:c7:cb:04:b7:ae:30:d8:c3:12:0d:4d:
         a8:ce:4a:3f:7e:a2:28:47:1d:ec:e0:7a:59:28:01:75:9f:f0:
         5f:74:81:16:80:ed:4c:83:51:45:78:e6:60:e5:ec:5e:ff:86:
         78:38:37:c4:1d:ff:9d:b3:10:a3:54:9b:5b:02:b9:e1:72:3d:
         8a:08:52:79:c0:66:42:87:fe:fd:d0:8b:d5:9a:cf:e6:6f:6c:
         3c:2c:5b:e6:62:39:08:97:38:4d:9c:e0:c2:cb:18:32:f8:40:
         a3:0a:51:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:56:57 2026 by rpki-client