Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/323830343a393834343a383030303a3a2f33332d3333203d3e203532393836.roa
File:                     323830343a393834343a383030303a3a2f33332d3333203d3e203532393836.roa (raw, json)
Hash identifier:          7evbclNRDNAqH+EisuqfD1eOfL6N4rzmN5D5cJKJXXA=
Subject key identifier:   11:BC:15:D9:41:8A:47:D2:54:F9:7F:1E:51:41:E7:6E:08:28:69:D9
Certificate issuer:       /CN=AE66FA9D553C702EC907E7167C265671D18C3133
Certificate serial:       3E2E7B0757DDE6C75368AD23C178C11CC3E5C445
Authority key identifier: AE:66:FA:9D:55:3C:70:2E:C9:07:E7:16:7C:26:56:71:D1:8C:31:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE66FA9D553C702EC907E7167C265671D18C3133.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/323830343a393834343a383030303a3a2f33332d3333203d3e203532393836.roa
Signing time:             Tue 19 May 2026 13:41:59 +0000
ROA not before:           Tue 19 May 2026 13:36:59 +0000
ROA not after:            Tue 18 May 2027 13:41:59 +0000
asID:                     52986
IP address blocks:        2804:9844:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/AE66FA9D553C702EC907E7167C265671D18C3133.crl
                          rsync://rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/AE66FA9D553C702EC907E7167C265671D18C3133.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE66FA9D553C702EC907E7167C265671D18C3133.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 23:04:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:2e:7b:07:57:dd:e6:c7:53:68:ad:23:c1:78:c1:1c:c3:e5:c4:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE66FA9D553C702EC907E7167C265671D18C3133
        Validity
            Not Before: May 19 13:36:59 2026 GMT
            Not After : May 18 13:41:59 2027 GMT
        Subject: CN=11BC15D9418A47D254F97F1E5141E76E082869D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:dc:72:c5:47:02:b1:b6:8e:c6:54:e1:a5:e7:
                    48:de:09:f4:49:6e:99:93:66:94:0d:f6:b5:13:f2:
                    02:16:4c:0f:44:84:e0:50:ff:8f:3f:c0:1a:55:ff:
                    ee:3d:e1:22:74:82:cf:68:f6:8a:ae:2b:ea:45:5a:
                    9e:54:61:1e:46:c3:3f:41:e1:9b:40:1e:30:8a:0e:
                    26:f0:ba:4d:b5:d2:cc:86:92:75:b9:e8:b9:50:ed:
                    9c:29:31:51:d6:bf:88:a2:4d:a8:31:76:4a:be:b8:
                    28:f0:5d:32:65:e5:33:1b:d8:b2:34:07:da:a9:fa:
                    bd:27:4b:69:55:28:03:f0:b4:d7:ab:6d:f6:2d:38:
                    fe:f0:c5:80:b3:d5:4a:db:e2:88:41:9e:05:90:8d:
                    ce:92:b6:e8:81:ff:31:d2:3b:2f:51:c4:99:db:95:
                    22:d3:08:ae:ff:3a:87:31:ce:65:a1:64:e9:a2:6c:
                    eb:04:83:de:31:df:21:bd:a3:77:58:f4:05:38:a6:
                    a4:e9:c4:58:5e:ae:e2:1f:74:8e:dc:d7:fe:78:d6:
                    93:14:13:4c:6b:aa:00:47:f4:f8:28:96:0c:c0:50:
                    e1:2b:80:16:40:26:c1:04:36:1e:a7:34:4a:89:29:
                    d0:23:47:09:7a:85:e3:bc:c2:71:1d:20:9e:b8:44:
                    fc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:BC:15:D9:41:8A:47:D2:54:F9:7F:1E:51:41:E7:6E:08:28:69:D9
            X509v3 Authority Key Identifier:
                keyid:AE:66:FA:9D:55:3C:70:2E:C9:07:E7:16:7C:26:56:71:D1:8C:31:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/AE66FA9D553C702EC907E7167C265671D18C3133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE66FA9D553C702EC907E7167C265671D18C3133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/323830343a393834343a383030303a3a2f33332d3333203d3e203532393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9844:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         1e:2d:fa:f8:52:48:29:21:10:90:84:59:82:d3:13:22:48:dd:
         7f:0c:77:6e:6c:1e:45:bd:0f:50:44:15:78:dc:14:58:3b:08:
         8e:b3:ad:fb:cf:16:1e:f1:cc:ef:81:80:96:02:ea:ff:23:e4:
         a1:e9:5b:8d:9f:c5:21:65:27:1e:b7:8c:a2:67:21:e0:75:23:
         75:01:22:73:1d:68:97:21:b3:18:8f:72:e3:a2:e1:5f:af:9a:
         64:5d:10:fb:aa:93:56:aa:45:21:7b:36:b5:72:20:fe:80:f1:
         0b:6b:21:c0:eb:ea:74:2f:d0:75:74:d5:df:4a:88:16:7f:44:
         cc:68:01:dc:19:3a:d4:ae:7a:63:67:91:67:1a:cd:9f:4f:16:
         94:56:78:f9:94:71:93:2d:99:2c:b9:d0:8d:58:f0:8c:42:56:
         1a:a8:f6:af:40:1a:93:a1:2b:5b:b5:c3:ae:9e:1d:bc:99:c3:
         67:fb:8d:11:69:2a:50:89:d1:48:51:6a:c6:a1:df:d2:2e:57:
         76:91:e8:91:51:5a:0e:01:2d:57:dc:3c:61:1b:fe:35:cc:63:
         e9:79:51:04:87:f5:c4:d9:8e:b2:a2:41:49:cc:dc:e0:43:68:
         ba:6a:7e:25:2e:53:aa:00:3a:77:69:26:37:90:02:4c:be:f5:
         4f:7d:a1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:47:32 2026 by rpki-client