Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/323830343a393834343a383030303a3a2f33342d3334203d3e203532393836.roa
File:                     323830343a393834343a383030303a3a2f33342d3334203d3e203532393836.roa (raw, json)
Hash identifier:          3a6D3wh2ldmm1G3SnzqNRDis8Nw3Hm6qSBRnfln8iXM=
Subject key identifier:   B6:C5:AB:1C:02:F9:DF:C3:22:3A:05:3C:72:30:A2:33:F4:0F:74:70
Certificate issuer:       /CN=AE66FA9D553C702EC907E7167C265671D18C3133
Certificate serial:       44355EB2871E69C437FAC666879D03203ACE62C0
Authority key identifier: AE:66:FA:9D:55:3C:70:2E:C9:07:E7:16:7C:26:56:71:D1:8C:31:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE66FA9D553C702EC907E7167C265671D18C3133.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/323830343a393834343a383030303a3a2f33342d3334203d3e203532393836.roa
Signing time:             Tue 19 May 2026 13:41:59 +0000
ROA not before:           Tue 19 May 2026 13:36:59 +0000
ROA not after:            Tue 18 May 2027 13:41:59 +0000
asID:                     52986
IP address blocks:        2804:9844:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/AE66FA9D553C702EC907E7167C265671D18C3133.crl
                          rsync://rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/AE66FA9D553C702EC907E7167C265671D18C3133.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE66FA9D553C702EC907E7167C265671D18C3133.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 23:04:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:35:5e:b2:87:1e:69:c4:37:fa:c6:66:87:9d:03:20:3a:ce:62:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE66FA9D553C702EC907E7167C265671D18C3133
        Validity
            Not Before: May 19 13:36:59 2026 GMT
            Not After : May 18 13:41:59 2027 GMT
        Subject: CN=B6C5AB1C02F9DFC3223A053C7230A233F40F7470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:49:88:56:1a:1f:97:74:00:18:00:61:ce:de:
                    9a:47:e0:3b:46:02:4e:2d:52:78:06:a0:e2:6d:1d:
                    15:fe:2a:b6:62:9e:90:d7:fb:85:35:d8:54:af:fd:
                    93:1f:c0:b9:aa:30:ed:62:14:9a:bc:c9:ba:22:75:
                    13:c8:84:2f:c4:0c:a0:ff:44:32:e8:db:10:02:b7:
                    cb:8b:c8:c7:4d:cc:51:77:50:f4:c3:08:f9:a2:b2:
                    b6:c1:68:37:6d:94:72:43:3a:fd:c5:52:79:5a:ec:
                    66:dc:bf:4a:d7:cd:dd:ed:80:6e:fa:2b:3e:54:ef:
                    ff:f0:20:0a:bc:0d:19:2d:48:c7:b1:f9:69:c3:cc:
                    8c:86:42:70:db:0b:b6:11:f1:d4:e5:d6:9f:b4:92:
                    1a:26:0b:fe:23:06:a2:28:e5:60:ac:a9:0f:3a:54:
                    3d:a6:bb:38:04:3f:be:a2:e4:ae:7f:4c:28:e6:ee:
                    5e:a1:2d:0b:41:82:8c:7c:ff:f1:b4:b0:43:62:fe:
                    58:fc:ee:2a:91:bb:8d:89:77:37:74:ab:e7:3e:e4:
                    be:6c:d5:a0:34:a9:0f:e8:58:ec:11:be:ca:a9:f5:
                    b2:7a:32:17:78:25:b2:68:01:f8:56:10:a5:41:fd:
                    9a:b6:53:24:07:d4:17:68:2b:7f:8d:56:fb:6d:69:
                    e3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C5:AB:1C:02:F9:DF:C3:22:3A:05:3C:72:30:A2:33:F4:0F:74:70
            X509v3 Authority Key Identifier:
                keyid:AE:66:FA:9D:55:3C:70:2E:C9:07:E7:16:7C:26:56:71:D1:8C:31:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/AE66FA9D553C702EC907E7167C265671D18C3133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE66FA9D553C702EC907E7167C265671D18C3133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/323830343a393834343a383030303a3a2f33342d3334203d3e203532393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9844:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         55:32:67:e5:e7:7b:e1:a2:97:5c:1f:0d:96:93:53:43:6a:98:
         f9:ba:91:e3:42:16:f2:f3:ba:b4:67:5b:40:8c:c2:4d:78:75:
         37:de:bc:aa:b5:52:fd:2f:89:fb:a4:63:aa:a1:83:0c:b2:3f:
         1d:90:3e:bc:4b:01:0b:d4:d8:50:12:b0:09:e2:63:96:d7:52:
         80:3c:ee:54:96:56:a3:d5:9c:0b:56:85:6c:4f:bb:a9:e0:6d:
         d0:86:e2:21:01:d1:7e:27:e6:39:c8:9a:f9:c0:80:cf:1a:6a:
         e2:e0:71:06:b2:d3:88:30:9c:b6:ae:19:a4:f8:51:0d:8f:bd:
         6d:ce:39:61:86:a0:e3:84:6a:3f:d2:0e:02:91:a9:1e:e6:86:
         31:14:66:49:58:53:22:0b:e7:cf:70:6c:ec:9a:41:4a:82:33:
         dd:85:54:bc:26:9d:13:06:a0:e7:8e:5f:d0:67:ac:f2:2b:99:
         56:52:39:6b:44:04:7b:af:d5:b4:f1:5f:24:7b:51:80:69:5b:
         56:cd:9a:a4:6c:09:23:cf:07:1e:05:d4:2f:24:61:6b:95:4b:
         f4:a4:71:27:14:f5:26:0a:7f:9b:75:b0:c2:8e:42:be:0d:6f:
         21:0e:30:78:54:9c:fd:b4:c3:64:e6:d7:56:79:39:1a:3a:7c:
         16:59:40:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:47:33 2026 by rpki-client