Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/323830343a353665303a3a2f33322d3430203d3e20323638303239.roa
File:                     323830343a353665303a3a2f33322d3430203d3e20323638303239.roa (raw, json)
Hash identifier:          IGzyDvIqfd9weu8PYSPOgOCQKcFEsvpwBIQq9Ay6pFw=
Subject key identifier:   8F:17:79:B8:B6:D0:A9:33:41:74:BB:43:AE:07:DB:BE:DB:1D:0C:DE
Certificate issuer:       /CN=4C754589EB8CD9171C812BC04CC781FCF43209CE
Certificate serial:       4F5781457AAC01120A091ED040FB8CA3855C7745
Authority key identifier: 4C:75:45:89:EB:8C:D9:17:1C:81:2B:C0:4C:C7:81:FC:F4:32:09:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C754589EB8CD9171C812BC04CC781FCF43209CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/323830343a353665303a3a2f33322d3430203d3e20323638303239.roa
Signing time:             Fri 12 Jun 2026 13:46:22 +0000
ROA not before:           Fri 12 Jun 2026 13:41:22 +0000
ROA not after:            Fri 11 Jun 2027 13:46:22 +0000
asID:                     268029
IP address blocks:        2804:56e0::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/4C754589EB8CD9171C812BC04CC781FCF43209CE.crl
                          rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/4C754589EB8CD9171C812BC04CC781FCF43209CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C754589EB8CD9171C812BC04CC781FCF43209CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 00:52:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:57:81:45:7a:ac:01:12:0a:09:1e:d0:40:fb:8c:a3:85:5c:77:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C754589EB8CD9171C812BC04CC781FCF43209CE
        Validity
            Not Before: Jun 12 13:41:22 2026 GMT
            Not After : Jun 11 13:46:22 2027 GMT
        Subject: CN=8F1779B8B6D0A9334174BB43AE07DBBEDB1D0CDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:1e:10:37:49:28:93:99:95:68:b1:47:9b:c7:
                    41:b2:83:6a:5e:02:f5:9f:c3:08:b6:82:5e:af:74:
                    f9:37:c1:b0:da:84:14:32:fe:b8:9c:3f:ed:f3:02:
                    1f:32:c7:a2:73:e2:54:5a:c9:70:f8:2a:50:2b:3a:
                    f3:54:91:2f:b2:1c:61:9b:35:2c:8b:93:28:9e:50:
                    ca:62:7f:7d:35:e1:73:77:3b:af:91:61:d3:85:7f:
                    25:15:53:d3:60:72:85:33:31:c6:a6:40:de:f0:75:
                    d4:68:d0:7c:0b:5c:69:de:2a:84:27:d8:4f:8b:d6:
                    db:e1:96:17:d3:1e:cb:36:e7:55:27:76:0c:04:9e:
                    f0:19:39:e3:de:af:2d:9a:6b:4a:13:e0:e8:99:59:
                    96:3e:32:39:9d:d4:66:d9:1a:15:74:97:58:1d:44:
                    cc:e1:ab:b5:38:98:ec:17:98:73:7e:b6:02:24:89:
                    21:6d:b5:29:db:0b:f6:d4:4f:0e:d2:55:4d:dd:61:
                    19:dc:94:c4:0c:91:a5:66:c5:2d:1b:ed:1e:8d:93:
                    c8:23:1c:5e:32:04:70:9b:1c:29:31:7b:8e:2c:02:
                    10:02:b9:cd:00:be:ae:84:ef:38:19:2a:a6:da:fc:
                    3a:6d:97:f2:71:8e:c1:37:3b:90:72:ae:fa:1c:a2:
                    19:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:17:79:B8:B6:D0:A9:33:41:74:BB:43:AE:07:DB:BE:DB:1D:0C:DE
            X509v3 Authority Key Identifier:
                keyid:4C:75:45:89:EB:8C:D9:17:1C:81:2B:C0:4C:C7:81:FC:F4:32:09:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/4C754589EB8CD9171C812BC04CC781FCF43209CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C754589EB8CD9171C812BC04CC781FCF43209CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/323830343a353665303a3a2f33322d3430203d3e20323638303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:d5:db:7e:35:b9:de:e2:38:74:69:ba:5a:53:c1:28:75:92:
         89:d9:4f:21:ef:e2:3c:6c:b1:b0:a7:c9:37:87:2b:fc:aa:43:
         b2:81:20:f2:a7:a5:e4:09:e4:ff:cc:b2:ba:e5:97:07:82:81:
         10:04:d9:8d:a7:37:14:51:27:58:f9:04:5c:36:34:4e:76:2d:
         1e:02:f8:2c:14:76:c2:92:0f:81:c8:d7:e0:02:de:5d:81:8d:
         b2:1f:9a:b3:41:38:95:49:0b:68:ab:2d:3d:4c:b3:70:d0:5c:
         2e:c6:a5:0a:8d:97:a7:d7:1c:72:54:33:79:37:e2:58:84:f5:
         0e:1a:c0:c1:02:7a:8c:08:37:d3:5a:77:2b:9c:2d:77:28:97:
         79:50:63:4f:6a:4f:68:4a:3d:6c:73:47:34:5a:53:93:87:9a:
         82:ca:77:14:8c:73:97:82:ab:5d:78:fe:3b:15:e8:3a:47:9f:
         45:ea:9c:a4:a1:d9:2e:21:36:32:69:3b:76:44:d0:fe:41:30:
         d3:97:50:2b:ed:1c:a6:72:0a:9a:9f:fb:74:62:a0:e8:8d:2c:
         b5:18:36:d3:2d:91:b7:2c:28:5e:28:44:0f:04:27:91:07:15:
         53:44:94:89:0d:28:4a:fa:75:6c:14:1f:98:38:32:80:08:74:
         c0:e2:cf:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:39:14 2026 by rpki-client