Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/323830343a393834343a3a2f33332d3333203d3e203532393836.roa
File:                     323830343a393834343a3a2f33332d3333203d3e203532393836.roa (raw, json)
Hash identifier:          Qo6MBH+EnkYr3yvSWDU4Cc4NdCql31F6Gsj7KA7N8IM=
Subject key identifier:   91:D6:77:A5:56:79:DF:0F:58:5A:6B:AE:BB:46:22:F9:AE:6A:65:F6
Certificate issuer:       /CN=AE66FA9D553C702EC907E7167C265671D18C3133
Certificate serial:       2EB7A15DEA41D35CF015809CA4836FBCA1305723
Authority key identifier: AE:66:FA:9D:55:3C:70:2E:C9:07:E7:16:7C:26:56:71:D1:8C:31:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE66FA9D553C702EC907E7167C265671D18C3133.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/323830343a393834343a3a2f33332d3333203d3e203532393836.roa
Signing time:             Tue 19 May 2026 13:42:02 +0000
ROA not before:           Tue 19 May 2026 13:37:02 +0000
ROA not after:            Tue 18 May 2027 13:42:02 +0000
asID:                     52986
IP address blocks:        2804:9844::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/AE66FA9D553C702EC907E7167C265671D18C3133.crl
                          rsync://rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/AE66FA9D553C702EC907E7167C265671D18C3133.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE66FA9D553C702EC907E7167C265671D18C3133.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 23:04:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b7:a1:5d:ea:41:d3:5c:f0:15:80:9c:a4:83:6f:bc:a1:30:57:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE66FA9D553C702EC907E7167C265671D18C3133
        Validity
            Not Before: May 19 13:37:02 2026 GMT
            Not After : May 18 13:42:02 2027 GMT
        Subject: CN=91D677A55679DF0F585A6BAEBB4622F9AE6A65F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:aa:7f:4f:fb:50:03:07:19:91:67:4a:ef:2c:
                    61:16:24:40:10:4e:12:7d:61:15:f6:61:ed:a5:7f:
                    e0:70:6d:ee:7f:74:cd:c1:9d:af:c8:b1:e9:1a:25:
                    38:dc:53:96:21:81:de:9d:fa:eb:0b:65:df:09:00:
                    7b:25:fa:4c:1c:95:3d:83:40:33:db:3e:97:d4:b2:
                    69:8c:1e:de:02:af:c4:e8:12:14:4e:8a:17:61:7c:
                    1c:f6:bf:c4:09:c8:3a:1b:7f:4a:0e:44:04:11:c7:
                    81:a8:77:73:be:64:63:d9:d9:e8:34:75:63:08:ee:
                    0f:34:ed:2c:bd:b2:6f:81:b8:34:91:e8:75:8d:b6:
                    be:2c:11:ca:cb:eb:be:56:b2:aa:98:85:79:a9:d3:
                    35:03:c7:b8:75:1c:db:8d:44:d3:6c:c9:7f:1f:3c:
                    35:98:2b:1c:cd:5b:a4:7a:c2:d3:14:5b:91:a0:da:
                    db:53:bc:ec:72:96:e3:21:7e:e6:f8:99:67:02:93:
                    67:64:d1:6f:32:bc:6a:d5:71:ad:e5:75:1b:eb:b3:
                    26:46:5b:0f:32:f2:6e:36:b9:e0:e8:8a:6b:22:14:
                    29:64:dd:76:25:d5:f3:d5:f3:06:2b:e1:d6:b2:bf:
                    a7:db:f6:0f:e7:dc:e8:6d:e4:08:57:90:1e:81:b1:
                    2a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D6:77:A5:56:79:DF:0F:58:5A:6B:AE:BB:46:22:F9:AE:6A:65:F6
            X509v3 Authority Key Identifier:
                keyid:AE:66:FA:9D:55:3C:70:2E:C9:07:E7:16:7C:26:56:71:D1:8C:31:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/AE66FA9D553C702EC907E7167C265671D18C3133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE66FA9D553C702EC907E7167C265671D18C3133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/323830343a393834343a3a2f33332d3333203d3e203532393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9844::/33

    Signature Algorithm: sha256WithRSAEncryption
         03:a1:df:6d:2a:f4:4d:4d:a4:a0:ad:ef:c7:6e:f1:92:a1:fa:
         a3:ce:ea:60:a2:3a:33:45:81:77:5c:cd:34:be:85:6d:8c:f7:
         41:d8:62:4b:e7:01:c5:e9:c9:4e:b5:ed:c9:5e:1d:34:97:b6:
         60:94:bd:45:6d:06:ac:be:9a:b5:32:d4:54:9d:55:62:5c:3c:
         07:b6:c9:91:0a:b2:9d:25:99:7a:d5:76:cd:24:40:01:25:32:
         ba:ea:49:79:74:51:96:8e:b2:cd:59:4b:2a:56:e4:34:2b:24:
         03:a9:6f:25:a5:56:b6:cb:9b:26:0e:bf:87:41:02:38:cf:87:
         4e:a4:02:3f:bc:14:fa:ab:35:0d:bb:45:0d:46:47:fe:38:60:
         e5:b4:14:1b:ea:4e:d1:cf:17:0a:74:9f:3a:0f:c9:6d:ae:40:
         da:9f:81:a0:21:dd:6d:63:2f:51:79:5c:12:e4:83:72:dc:7f:
         d2:28:34:9d:14:82:9e:c0:7c:72:36:19:f3:ba:b8:70:40:58:
         3d:6c:e7:11:5c:c9:73:61:a9:ab:57:88:72:8b:44:db:ab:c5:
         7d:34:3e:bd:63:df:0e:c0:45:30:ea:9e:17:30:a1:1e:ce:9d:
         d9:1a:85:84:74:0e:39:42:3b:66:3c:2b:fb:d7:33:28:04:f9:
         15:6e:92:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:47:34 2026 by rpki-client