Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/323830343a313162343a3a2f33342d3334203d3e20323633343333.roa
File:                     323830343a313162343a3a2f33342d3334203d3e20323633343333.roa (raw, json)
Hash identifier:          tItsSQROshw1Lce3PS7QDQM+6fFVxaduRPuY5ufGNxY=
Subject key identifier:   6E:C4:AB:8E:B0:A9:5D:25:86:5A:50:88:13:E9:56:A1:D4:EC:93:FC
Certificate issuer:       /CN=E4B55D0394EBCE78FC73953C3CE5357A5D391082
Certificate serial:       32A4E72E6FA80A3AC53EF3F89E9C41768EC1EED5
Authority key identifier: E4:B5:5D:03:94:EB:CE:78:FC:73:95:3C:3C:E5:35:7A:5D:39:10:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B55D0394EBCE78FC73953C3CE5357A5D391082.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/323830343a313162343a3a2f33342d3334203d3e20323633343333.roa
Signing time:             Wed 10 Jun 2026 11:40:54 +0000
ROA not before:           Wed 10 Jun 2026 11:35:54 +0000
ROA not after:            Wed 09 Jun 2027 11:40:54 +0000
asID:                     263433
IP address blocks:        2804:11b4::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/E4B55D0394EBCE78FC73953C3CE5357A5D391082.crl
                          rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/E4B55D0394EBCE78FC73953C3CE5357A5D391082.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B55D0394EBCE78FC73953C3CE5357A5D391082.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 10:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a4:e7:2e:6f:a8:0a:3a:c5:3e:f3:f8:9e:9c:41:76:8e:c1:ee:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4B55D0394EBCE78FC73953C3CE5357A5D391082
        Validity
            Not Before: Jun 10 11:35:54 2026 GMT
            Not After : Jun  9 11:40:54 2027 GMT
        Subject: CN=6EC4AB8EB0A95D25865A508813E956A1D4EC93FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d0:98:35:5f:f3:0e:1d:3f:d8:a7:e1:a0:70:
                    e2:f1:1d:fb:19:7d:62:6c:5f:c4:48:59:85:9d:05:
                    b1:53:b5:39:b8:23:b1:5a:34:27:af:93:a3:c5:9a:
                    7b:1a:7d:be:e5:32:3e:be:89:64:02:8b:6f:69:2e:
                    a0:a5:fb:d9:77:80:76:ad:e4:17:9c:b1:34:a3:93:
                    01:f1:c7:28:6c:d4:36:a9:26:9d:b2:f7:27:d5:63:
                    9b:09:c3:8b:70:d0:8a:98:ae:c1:36:39:fe:33:11:
                    3d:6f:b8:da:3d:22:a7:3a:26:17:fe:a6:fa:3c:d3:
                    a8:c1:49:21:93:80:5c:d9:24:14:68:d7:cc:a1:34:
                    8e:16:97:56:58:ec:59:df:52:4d:cc:e3:48:28:bd:
                    f2:db:f5:f4:3b:3b:11:94:1c:cf:c7:78:3e:7a:1e:
                    49:24:09:46:73:41:96:0f:9a:5f:8f:1e:9d:14:09:
                    bd:1c:cc:89:ac:3e:ca:92:93:24:3c:71:88:ae:5a:
                    7e:a0:17:e7:5b:d7:23:59:a2:51:09:8c:2d:20:19:
                    64:ae:09:f4:35:ec:50:45:bf:3a:26:3e:fc:67:6a:
                    24:c6:8e:ec:d7:bb:34:a7:7a:64:f1:7a:a8:9e:90:
                    2b:d7:4f:eb:05:a7:bf:6a:7d:28:d2:44:1f:08:33:
                    c8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C4:AB:8E:B0:A9:5D:25:86:5A:50:88:13:E9:56:A1:D4:EC:93:FC
            X509v3 Authority Key Identifier:
                keyid:E4:B5:5D:03:94:EB:CE:78:FC:73:95:3C:3C:E5:35:7A:5D:39:10:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/E4B55D0394EBCE78FC73953C3CE5357A5D391082.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B55D0394EBCE78FC73953C3CE5357A5D391082.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/323830343a313162343a3a2f33342d3334203d3e20323633343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:11b4::/34

    Signature Algorithm: sha256WithRSAEncryption
         36:04:7d:c3:0e:44:05:15:e6:d3:8f:27:e1:7e:68:af:15:5c:
         e9:8d:cb:ed:63:1d:67:eb:12:7e:bb:e4:51:2a:23:19:56:25:
         b8:d8:41:95:ab:6a:b2:48:49:3a:35:39:ca:61:24:3b:d1:fd:
         f1:c2:e5:7a:18:e5:38:bc:9f:b7:0a:38:44:d0:16:57:2b:7a:
         12:97:6e:37:0a:98:4f:ee:23:9e:fa:67:f0:0a:33:35:0c:83:
         cf:30:e0:c1:8e:03:30:be:c8:de:e0:3d:1a:16:75:45:8f:3b:
         ed:87:b0:0e:df:63:61:26:21:39:42:93:82:1e:44:1b:f8:fe:
         67:54:ba:92:a2:cb:c1:8a:b9:90:27:e3:d7:e8:70:a2:1f:5f:
         ff:a9:07:ac:50:39:bc:34:0a:a0:5e:a8:b7:44:81:70:0f:78:
         13:ce:c6:05:e2:0b:59:af:2f:15:ea:47:8d:75:80:b9:82:26:
         95:7e:7c:1a:02:9a:aa:3a:cc:5f:fe:13:4f:d3:74:28:60:71:
         30:ec:9b:a8:45:7c:c0:5f:1b:29:99:9f:f3:1a:d2:c4:2c:fb:
         41:8f:d8:cb:e2:a1:5e:6e:9c:c9:6f:48:b4:fd:ef:26:47:80:
         02:c8:8b:43:f5:16:e2:bc:39:d8:1c:e2:c5:ed:89:92:bb:c9:
         be:e0:41:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:53:18 2026 by rpki-client