Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/323830343a343363303a343030303a3a2f33342d3334203d3e20323637353838.roa
File:                     323830343a343363303a343030303a3a2f33342d3334203d3e20323637353838.roa (raw, json)
Hash identifier:          JbJOvcUBbS6HVAxg+ByWEU1zeiY79t0lsbdxXPr5ijE=
Subject key identifier:   30:50:27:95:E4:63:6D:2F:B9:C7:65:5A:A2:7E:9F:86:3E:61:78:E8
Certificate issuer:       /CN=EB27E991207232DB9C6D847F06224E25D3606469
Certificate serial:       26078391E65A09392C1A1A7C9029CF341E242B9E
Authority key identifier: EB:27:E9:91:20:72:32:DB:9C:6D:84:7F:06:22:4E:25:D3:60:64:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB27E991207232DB9C6D847F06224E25D3606469.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/323830343a343363303a343030303a3a2f33342d3334203d3e20323637353838.roa
Signing time:             Fri 15 May 2026 15:16:00 +0000
ROA not before:           Fri 15 May 2026 15:11:00 +0000
ROA not after:            Fri 14 May 2027 15:16:00 +0000
asID:                     267588
IP address blocks:        2804:43c0:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/EB27E991207232DB9C6D847F06224E25D3606469.crl
                          rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/EB27E991207232DB9C6D847F06224E25D3606469.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB27E991207232DB9C6D847F06224E25D3606469.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 00:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:07:83:91:e6:5a:09:39:2c:1a:1a:7c:90:29:cf:34:1e:24:2b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB27E991207232DB9C6D847F06224E25D3606469
        Validity
            Not Before: May 15 15:11:00 2026 GMT
            Not After : May 14 15:16:00 2027 GMT
        Subject: CN=3082010A0282010100D8542F7A4BA103DC55DB123EB54DD568896ED0BFC949A7CA97636973810BB7B9EE371E1057AB17A55B601F76FC0451DB8125F247760B09F5AFCC5801C18241A8A2AEA9ECA50D0748D1E28DF49C5976CD55494B0A95112DF60FAF0C290B5EFC98A8206F01780C8EA7244C1F55C65C8C8AF928FB5B8D7BEFDB16D433FFD640FEFAD597A068A9FDB29FFE5832C0F4BEF3FD50D300DF1620BA8637086A12D9DF6292319CB602AA7ABDD6A766426822A3C68CC89638B8A393F6274CDB38139B3D15A9010E57A78F1C922D6CBF2BA1E5945854E8CB11176AA8A7C74336A7485EE4617E9F80EB2C665FB061FCEE4C00BDBF5A1A2FFCDFADEDF3F67EF333E93BD30C25A90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:54:2f:7a:4b:a1:03:dc:55:db:12:3e:b5:4d:
                    d5:68:89:6e:d0:bf:c9:49:a7:ca:97:63:69:73:81:
                    0b:b7:b9:ee:37:1e:10:57:ab:17:a5:5b:60:1f:76:
                    fc:04:51:db:81:25:f2:47:76:0b:09:f5:af:cc:58:
                    01:c1:82:41:a8:a2:ae:a9:ec:a5:0d:07:48:d1:e2:
                    8d:f4:9c:59:76:cd:55:49:4b:0a:95:11:2d:f6:0f:
                    af:0c:29:0b:5e:fc:98:a8:20:6f:01:78:0c:8e:a7:
                    24:4c:1f:55:c6:5c:8c:8a:f9:28:fb:5b:8d:7b:ef:
                    db:16:d4:33:ff:d6:40:fe:fa:d5:97:a0:68:a9:fd:
                    b2:9f:fe:58:32:c0:f4:be:f3:fd:50:d3:00:df:16:
                    20:ba:86:37:08:6a:12:d9:df:62:92:31:9c:b6:02:
                    aa:7a:bd:d6:a7:66:42:68:22:a3:c6:8c:c8:96:38:
                    b8:a3:93:f6:27:4c:db:38:13:9b:3d:15:a9:01:0e:
                    57:a7:8f:1c:92:2d:6c:bf:2b:a1:e5:94:58:54:e8:
                    cb:11:17:6a:a8:a7:c7:43:36:a7:48:5e:e4:61:7e:
                    9f:80:eb:2c:66:5f:b0:61:fc:ee:4c:00:bd:bf:5a:
                    1a:2f:fc:df:ad:ed:f3:f6:7e:f3:33:e9:3b:d3:0c:
                    25:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:50:27:95:E4:63:6D:2F:B9:C7:65:5A:A2:7E:9F:86:3E:61:78:E8
            X509v3 Authority Key Identifier:
                keyid:EB:27:E9:91:20:72:32:DB:9C:6D:84:7F:06:22:4E:25:D3:60:64:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/EB27E991207232DB9C6D847F06224E25D3606469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB27E991207232DB9C6D847F06224E25D3606469.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6DwXVz19mk5YcwDaiZqQntiUVm9WgMfaZnBoYtP6gCmR/0/323830343a343363303a343030303a3a2f33342d3334203d3e20323637353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43c0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         83:96:14:f3:45:a4:06:14:ed:9d:7e:3f:02:b4:b1:0f:e3:ad:
         ef:52:96:6e:28:b9:c7:48:3f:d9:a6:05:fa:52:86:28:d7:50:
         df:21:ad:79:6c:a1:a6:de:d7:78:70:94:aa:75:02:a7:7c:09:
         ce:7d:c8:ef:39:82:66:73:92:23:a2:48:80:19:2b:d5:79:b4:
         d7:10:46:8f:2c:ed:99:67:6c:35:8f:af:1f:22:28:d5:dc:5b:
         3b:43:68:b9:fe:34:8e:d8:27:ba:be:a3:78:6d:58:37:b1:36:
         47:3e:d2:48:ad:dc:74:72:f5:be:08:8e:41:f3:0a:be:1c:10:
         68:fd:c3:e5:55:bb:ea:1a:b3:a0:8c:43:fa:1f:96:d6:ba:61:
         d2:59:18:aa:2f:e1:1e:f3:41:2d:6a:52:7b:68:36:1c:4d:7e:
         f4:e0:ff:d7:71:55:0a:a2:d1:92:71:6b:72:8c:53:b6:c2:1e:
         50:77:51:c6:90:09:a4:52:39:85:88:b8:07:c9:3a:27:cc:41:
         5d:ef:ef:87:96:de:46:dd:d7:73:37:1b:3d:66:ff:e3:07:ff:
         bb:e2:d3:06:77:8c:2a:05:c1:a1:8f:99:5c:23:bf:24:f8:cc:
         a1:4a:ae:3d:65:be:6e:c3:0c:09:22:dd:6c:eb:11:09:22:46:
         d4:f2:a3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:06:57 2026 by rpki-client