Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a3a2f33322d313238203d3e203631363738.roa
File:                     323830343a316364343a3a2f33322d313238203d3e203631363738.roa (raw, json)
Hash identifier:          ERXeEDdPGxuxbhWYHNqcE8ExZ8Cxyb4ER4OqtsO0Z8o=
Subject key identifier:   86:63:A6:0C:CC:A5:67:DF:30:16:34:FD:6F:EF:FD:B9:04:4D:24:A2
Certificate issuer:       /CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
Certificate serial:       33DC528978580F05A56656D60502D591C75351A8
Authority key identifier: 8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a3a2f33322d313238203d3e203631363738.roa
Signing time:             Sun 14 Jun 2026 00:53:23 +0000
ROA not before:           Sun 14 Jun 2026 00:48:23 +0000
ROA not after:            Sun 13 Jun 2027 00:53:23 +0000
asID:                     61678
IP address blocks:        2804:1cd4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl
                          rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:53:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:dc:52:89:78:58:0f:05:a5:66:56:d6:05:02:d5:91:c7:53:51:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
        Validity
            Not Before: Jun 14 00:48:23 2026 GMT
            Not After : Jun 13 00:53:23 2027 GMT
        Subject: CN=8663A60CCCA567DF301634FD6FEFFDB9044D24A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:15:9b:bb:b7:38:6b:22:86:7c:fd:82:ca:81:
                    3a:4e:2e:b7:d1:a3:90:05:87:1e:79:f1:cd:f4:19:
                    8c:60:c8:3e:8f:26:a0:d4:58:12:8d:23:ca:97:8d:
                    8e:a9:cd:cb:ed:f3:90:42:3c:24:c4:a9:a5:b4:2f:
                    be:13:81:dc:45:5e:2e:0a:b8:7b:6b:f4:2e:a3:62:
                    f1:b6:c8:da:55:61:bf:41:ea:d2:59:1a:b0:9a:9d:
                    35:78:3b:76:48:10:3d:22:4c:19:ab:1a:a0:49:31:
                    00:15:22:5c:49:af:f3:8a:c8:f0:20:a0:6e:2a:63:
                    45:b8:3e:b5:d1:30:b3:3a:0e:7d:ff:f3:d1:18:c2:
                    5d:5a:fe:e2:51:15:a6:26:d6:c2:75:73:dc:3e:32:
                    89:81:25:82:95:47:12:6a:c9:32:1c:7e:96:b4:fe:
                    a1:36:01:aa:fb:1d:5d:47:14:2d:4e:9b:b0:63:0f:
                    b7:ba:91:ed:19:a0:d9:33:23:73:d7:9c:55:92:3a:
                    17:9d:65:3d:77:a0:38:c0:16:2b:fc:98:39:c7:2b:
                    99:52:f0:e5:5c:3c:ae:bc:3a:2c:6b:8f:39:dd:f3:
                    fb:99:4b:b3:55:52:1f:c0:9f:14:1f:74:f5:2d:ce:
                    63:bb:d0:98:1d:a4:df:20:55:af:01:a1:96:f9:70:
                    18:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:63:A6:0C:CC:A5:67:DF:30:16:34:FD:6F:EF:FD:B9:04:4D:24:A2
            X509v3 Authority Key Identifier:
                keyid:8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a3a2f33322d313238203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd4::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:b6:56:63:3d:d8:7c:0a:c3:56:94:c4:40:5d:fc:34:97:12:
         27:45:96:6a:e1:65:58:b4:e7:99:2d:d5:d3:0d:bd:5c:7a:f5:
         da:bd:f9:7c:76:5a:bb:d3:7c:9c:88:78:6e:eb:ca:04:32:6e:
         40:48:e7:f3:5e:fd:ef:5a:c9:7a:da:3b:f9:be:8e:c7:ed:c2:
         0d:49:db:39:a4:16:22:7a:a9:b0:f2:91:da:86:bb:da:66:17:
         22:3f:6e:57:55:4f:93:47:dd:16:4c:55:33:e9:90:64:c9:78:
         a6:ca:44:ae:f4:57:89:5d:80:93:e4:96:f5:15:3c:e4:63:58:
         07:b2:84:83:48:64:44:ac:c0:aa:9a:64:d1:f8:3d:67:bc:8d:
         dd:5c:9b:64:16:63:82:e5:93:c1:44:0f:1f:9a:d0:d7:9a:ea:
         7e:86:6c:75:39:f7:10:95:86:2e:8a:c9:e4:72:75:f7:c4:5f:
         02:9c:20:45:c3:bc:f0:68:13:58:06:88:da:44:56:75:ce:da:
         43:e2:cf:69:e3:b9:76:79:fb:28:0e:7b:62:ac:37:75:4c:cd:
         96:f0:1e:46:6c:f1:32:eb:fc:4f:8d:07:84:1f:28:85:8d:7b:
         dc:2a:c9:61:25:14:ca:7e:37:d0:33:e7:30:db:98:c0:0a:7d:
         41:81:11:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:25:57 2026 by rpki-client