Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/323830343a393834343a343030303a3a2f33342d3334203d3e203532393836.roa
File:                     323830343a393834343a343030303a3a2f33342d3334203d3e203532393836.roa (raw, json)
Hash identifier:          tkPD1kZ2zMl+/DOsrtD+6xqT8V3JIhRmL8UZf+Mj5Wo=
Subject key identifier:   3E:F7:91:9A:5D:56:7B:ED:D5:DC:F3:A9:A4:1A:3D:64:9E:27:78:BC
Certificate issuer:       /CN=AE66FA9D553C702EC907E7167C265671D18C3133
Certificate serial:       450E1E1EA6B0D899C99FC0C7D84B8466CFBE2463
Authority key identifier: AE:66:FA:9D:55:3C:70:2E:C9:07:E7:16:7C:26:56:71:D1:8C:31:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE66FA9D553C702EC907E7167C265671D18C3133.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/323830343a393834343a343030303a3a2f33342d3334203d3e203532393836.roa
Signing time:             Tue 19 May 2026 13:42:01 +0000
ROA not before:           Tue 19 May 2026 13:37:01 +0000
ROA not after:            Tue 18 May 2027 13:42:01 +0000
asID:                     52986
IP address blocks:        2804:9844:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/AE66FA9D553C702EC907E7167C265671D18C3133.crl
                          rsync://rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/AE66FA9D553C702EC907E7167C265671D18C3133.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE66FA9D553C702EC907E7167C265671D18C3133.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 23:04:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:0e:1e:1e:a6:b0:d8:99:c9:9f:c0:c7:d8:4b:84:66:cf:be:24:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE66FA9D553C702EC907E7167C265671D18C3133
        Validity
            Not Before: May 19 13:37:01 2026 GMT
            Not After : May 18 13:42:01 2027 GMT
        Subject: CN=3EF7919A5D567BEDD5DCF3A9A41A3D649E2778BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:09:d8:2f:9e:19:0e:fe:e5:03:35:c7:6c:d8:
                    f8:06:e9:ac:94:bd:84:e6:0a:bb:b5:d6:cb:c1:4e:
                    64:65:0a:5c:20:b6:99:df:25:71:16:10:2a:f8:c8:
                    0b:2a:4b:da:00:c0:2d:86:e8:49:95:1c:6c:c6:94:
                    03:39:13:64:69:46:19:ac:ac:62:14:f0:d5:86:44:
                    0d:e3:67:7c:29:b2:09:5d:d1:f6:fc:a3:70:c4:b2:
                    1c:c3:be:ae:a9:98:a3:fd:38:12:97:38:f7:e5:f8:
                    aa:31:c2:c2:42:50:5b:bf:50:bb:84:a1:c8:99:ac:
                    95:47:a0:6b:d6:9b:29:73:af:18:b1:5f:d9:53:4f:
                    93:b3:b8:14:1d:1a:56:27:6c:8e:97:9f:fa:27:3c:
                    01:ac:37:a3:29:8d:08:86:a3:74:cf:bf:e5:95:a5:
                    ad:0d:43:dd:02:01:1a:4a:41:e9:84:8f:27:c4:73:
                    60:be:9a:4f:63:76:aa:53:72:ab:f6:fa:e8:f0:bc:
                    cf:73:96:1f:41:de:14:a7:bf:f1:8f:9e:8d:be:96:
                    ad:9a:b2:39:7f:c8:1d:07:dc:07:10:67:5e:4d:6b:
                    28:d3:9a:c5:aa:a0:b8:cb:d4:5a:27:5a:fb:b0:12:
                    73:b3:ce:17:95:3d:11:d8:55:94:f6:0e:35:2a:7d:
                    8c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F7:91:9A:5D:56:7B:ED:D5:DC:F3:A9:A4:1A:3D:64:9E:27:78:BC
            X509v3 Authority Key Identifier:
                keyid:AE:66:FA:9D:55:3C:70:2E:C9:07:E7:16:7C:26:56:71:D1:8C:31:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/AE66FA9D553C702EC907E7167C265671D18C3133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE66FA9D553C702EC907E7167C265671D18C3133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/323830343a393834343a343030303a3a2f33342d3334203d3e203532393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9844:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         15:f7:3f:05:a0:a3:d7:af:f2:ec:86:b7:46:33:9f:13:c9:ab:
         52:d3:a4:00:39:f3:9e:eb:9b:02:09:ef:8e:fc:ad:63:27:b1:
         74:a8:f5:1a:b1:d7:9d:dc:06:e5:21:7f:1a:82:8f:a7:55:32:
         f8:3d:7d:13:4a:42:49:0e:fd:5f:13:aa:09:df:5d:9b:00:8f:
         1b:72:7c:92:a5:ae:b5:4d:0f:6b:ac:91:95:52:ff:3f:d7:5f:
         70:2f:7c:b1:bf:97:bf:b8:e7:31:52:3a:da:d3:1d:24:c8:91:
         3b:0f:f1:10:c7:be:e6:f4:7c:fd:b2:be:a9:30:f9:cf:72:d6:
         47:8e:5d:bb:8e:7c:2b:3f:43:cf:69:c9:b6:b0:54:97:52:d3:
         93:e0:4f:79:b0:f6:ba:a5:bc:be:e6:2c:14:9e:91:02:db:48:
         d0:d8:92:d9:9f:b2:fd:49:c5:2c:00:b7:0d:a5:9d:19:a3:09:
         75:be:21:e1:3b:a2:87:b9:55:83:39:ca:28:08:ea:af:7f:4d:
         13:59:73:94:de:eb:5d:de:f1:e0:58:74:5e:9d:c8:26:2b:b3:
         58:d0:1b:1c:ea:59:49:55:5a:0b:bd:ff:79:53:d7:2f:27:b8:
         06:c8:51:a7:0a:04:10:64:43:23:aa:a4:d4:26:f3:17:dc:fa:
         bd:1f:81:18
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURQ4eHqaw2JnJn8DH2EuEZs++JGMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUU2NkZBOUQ1NTNDNzAyRUM5MDdFNzE2N0MyNjU2NzFE
MThDMzEzMzAeFw0yNjA1MTkxMzM3MDFaFw0yNzA1MTgxMzQyMDFaMDMxMTAvBgNV
BAMTKDNFRjc5MTlBNUQ1NjdCRURENURDRjNBOUE0MUEzRDY0OUUyNzc4QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpCdgvnhkO/uUDNcds2PgG6ayU
vYTmCru11svBTmRlClwgtpnfJXEWECr4yAsqS9oAwC2G6EmVHGzGlAM5E2RpRhms
rGIU8NWGRA3jZ3wpsgld0fb8o3DEshzDvq6pmKP9OBKXOPfl+KoxwsJCUFu/ULuE
ociZrJVHoGvWmylzrxixX9lTT5OzuBQdGlYnbI6Xn/onPAGsN6MpjQiGo3TPv+WV
pa0NQ90CARpKQemEjyfEc2C+mk9jdqpTcqv2+ujwvM9zlh9B3hSnv/GPno2+lq2a
sjl/yB0H3AcQZ15NayjTmsWqoLjL1FonWvuwEnOzzheVPRHYVZT2DjUqfYznAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUPveRml1We+3V3POppBo9ZJ4neLwwHwYDVR0j
BBgwFoAUrmb6nVU8cC7JB+cWfCZWcdGMMTMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmNHQUN3c1FjQ0Fza2lja0JVbXdpdXBlWnBZcmVqbUZNeHYyR2Mzd1dS
WnMvMC9BRTY2RkE5RDU1M0M3MDJFQzkwN0U3MTY3QzI2NTY3MUQxOEMzMTMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFNjZGQTlENTUzQzcwMkVD
OTA3RTcxNjdDMjY1NjcxRDE4QzMxMzMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZjR0FDd3NRY0NBc2tpY2tCVW13aXVwZVpwWXJlam1GTXh2MkdjM3dXUlpzLzAv
MzIzODMwMzQzYTM5MzgzNDM0M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDM1MzIzOTM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBJhEQDANBgkqhkiG9w0BAQsFAAOC
AQEAFfc/BaCj16/y7Ia3RjOfE8mrUtOkADnznuubAgnvjvytYyexdKj1GrHXndwG
5SF/GoKPp1Uy+D19E0pCSQ79XxOqCd9dmwCPG3J8kqWutU0Pa6yRlVL/P9dfcC98
sb+Xv7jnMVI62tMdJMiROw/xEMe+5vR8/bK+qTD5z3LWR45du458Kz9Dz2nJtrBU
l1LTk+BPebD2uqW8vuYsFJ6RAttI0NiS2Z+y/UnFLAC3DaWdGaMJdb4h4Tuih7lV
gznKKAjqr39NE1lzlN7rXd7x4Fh0Xp3IJiuzWNAbHOpZSVVaC73/eVPXLye4BshR
pwoEEGRDI6qk1CbzF9z6vR+BGA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:47:33 2026 by rpki-client