Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a3a2f33322d313238203d3e20323732353639.roa
File:                     323830343a383534383a3a2f33322d313238203d3e20323732353639.roa (raw, json)
Hash identifier:          h1DoazNri5z2Q/Jp4SLRhOOCBWnklRzUMwThYd5YIEk=
Subject key identifier:   04:81:F6:42:A5:97:29:A3:4A:BD:8E:7F:E4:16:23:D7:C4:1F:31:8F
Certificate issuer:       /CN=C6B7CB9E97DF304117B0657EDA49C05DB91C6DF4
Certificate serial:       977FCBC2BBC935C15B018532A4CA8B5DA398A7
Authority key identifier: C6:B7:CB:9E:97:DF:30:41:17:B0:65:7E:DA:49:C0:5D:B9:1C:6D:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6B7CB9E97DF304117B0657EDA49C05DB91C6DF4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a3a2f33322d313238203d3e20323732353639.roa
Signing time:             Thu 28 May 2026 14:47:28 +0000
ROA not before:           Thu 28 May 2026 14:42:28 +0000
ROA not after:            Thu 27 May 2027 14:47:28 +0000
asID:                     272569
IP address blocks:        2804:8548::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/C6B7CB9E97DF304117B0657EDA49C05DB91C6DF4.crl
                          rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/C6B7CB9E97DF304117B0657EDA49C05DB91C6DF4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6B7CB9E97DF304117B0657EDA49C05DB91C6DF4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 14:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            97:7f:cb:c2:bb:c9:35:c1:5b:01:85:32:a4:ca:8b:5d:a3:98:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6B7CB9E97DF304117B0657EDA49C05DB91C6DF4
        Validity
            Not Before: May 28 14:42:28 2026 GMT
            Not After : May 27 14:47:28 2027 GMT
        Subject: CN=0481F642A59729A34ABD8E7FE41623D7C41F318F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7a:af:27:50:75:97:d2:cb:13:d5:fb:cf:c3:
                    94:01:af:13:45:26:8b:19:55:70:f3:2b:c2:5c:f0:
                    9c:59:b4:9b:1e:43:f2:0b:59:8d:56:42:19:18:99:
                    ab:8c:ce:c8:b7:93:59:51:9a:8f:ab:62:38:b0:4f:
                    74:d5:3b:61:c8:53:e5:b1:c7:11:cf:56:29:61:91:
                    51:b2:bc:62:a3:bb:45:44:3f:b7:65:1a:3f:dd:2e:
                    4c:40:e2:b7:9a:ac:5c:d8:ae:38:2c:da:13:b4:6f:
                    a4:2c:22:ff:02:de:0c:06:98:a4:ce:79:9d:57:35:
                    d4:97:bd:e5:c5:12:8c:b6:14:61:bb:20:26:15:e7:
                    ec:d4:8f:67:a6:bc:b6:2f:31:06:a7:c5:3e:37:52:
                    ae:88:be:e9:c9:9d:3e:d0:91:4d:94:73:02:72:01:
                    ca:79:ea:b0:eb:10:47:33:6a:fc:b8:72:99:86:92:
                    0f:16:8c:15:34:31:c1:8a:65:d0:9c:0e:40:3a:e9:
                    39:dd:2b:37:5e:2a:1d:3b:34:92:71:d3:18:f7:b2:
                    90:20:0b:15:a7:02:81:00:48:10:86:19:4c:e3:75:
                    47:17:85:f5:45:45:54:64:18:f7:8a:c1:d0:56:00:
                    a2:43:41:cc:f5:1d:9a:f7:85:f4:55:e0:aa:36:95:
                    6a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:81:F6:42:A5:97:29:A3:4A:BD:8E:7F:E4:16:23:D7:C4:1F:31:8F
            X509v3 Authority Key Identifier:
                keyid:C6:B7:CB:9E:97:DF:30:41:17:B0:65:7E:DA:49:C0:5D:B9:1C:6D:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/C6B7CB9E97DF304117B0657EDA49C05DB91C6DF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6B7CB9E97DF304117B0657EDA49C05DB91C6DF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a3a2f33322d313238203d3e20323732353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8548::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:24:2e:26:a8:b9:f4:31:98:9c:a4:29:60:d9:0c:73:83:4c:
         1b:1d:68:60:f1:b0:57:ba:59:8d:a0:ed:21:e2:df:81:28:27:
         fe:2b:d2:4d:78:37:60:2f:23:47:16:bf:6c:5a:76:eb:11:7a:
         50:3c:ca:00:2a:2f:80:aa:9c:78:78:dc:b5:a3:08:86:1f:4d:
         60:eb:46:64:a7:6e:92:b0:04:82:6d:0e:8e:7c:8d:a9:31:bc:
         9a:42:17:cc:06:1c:fe:c8:17:2d:d0:f8:d4:10:7d:7e:d6:b0:
         ef:b4:1b:83:4c:59:32:7d:63:19:d9:09:66:b8:eb:fc:21:37:
         b9:09:d7:d5:b7:81:d6:84:de:4e:dd:b5:b8:7e:cd:ed:41:29:
         dd:a0:be:20:f0:aa:06:5d:87:d5:8c:cb:c5:8c:0b:4d:88:46:
         0a:36:f9:04:af:f3:f2:81:ca:b0:13:8d:d3:46:c8:26:10:8e:
         82:c8:19:4d:f9:93:f4:22:5e:9e:4d:84:2f:1e:e6:f2:9e:c9:
         2e:dc:c0:14:7d:6d:b9:ce:32:e7:fd:38:90:32:b7:73:8e:88:
         e3:b4:2a:e3:ad:73:e0:77:db:ff:f4:42:9b:a4:04:32:98:cc:
         97:9f:63:c2:3e:c1:d3:50:00:2c:9b:cb:fd:fe:ce:ae:2a:d0:
         db:41:58:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:05:41 2026 by rpki-client