Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/323830343a393834343a3a2f33342d3334203d3e203532393836.roa
File:                     323830343a393834343a3a2f33342d3334203d3e203532393836.roa (raw, json)
Hash identifier:          CDmRwIb2Xkgl5VYsN1us2rkOKZfzMRAqgy4KJTtnnPU=
Subject key identifier:   64:2A:23:02:8F:2A:39:C9:FC:B9:07:95:EA:87:20:EE:95:92:CD:43
Certificate issuer:       /CN=AE66FA9D553C702EC907E7167C265671D18C3133
Certificate serial:       70DD1A73B3D8BFC24FE3A6DBD3CB5CD98381AAE0
Authority key identifier: AE:66:FA:9D:55:3C:70:2E:C9:07:E7:16:7C:26:56:71:D1:8C:31:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE66FA9D553C702EC907E7167C265671D18C3133.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/323830343a393834343a3a2f33342d3334203d3e203532393836.roa
Signing time:             Tue 19 May 2026 13:42:00 +0000
ROA not before:           Tue 19 May 2026 13:37:00 +0000
ROA not after:            Tue 18 May 2027 13:42:00 +0000
asID:                     52986
IP address blocks:        2804:9844::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/AE66FA9D553C702EC907E7167C265671D18C3133.crl
                          rsync://rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/AE66FA9D553C702EC907E7167C265671D18C3133.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE66FA9D553C702EC907E7167C265671D18C3133.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 23:04:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:dd:1a:73:b3:d8:bf:c2:4f:e3:a6:db:d3:cb:5c:d9:83:81:aa:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE66FA9D553C702EC907E7167C265671D18C3133
        Validity
            Not Before: May 19 13:37:00 2026 GMT
            Not After : May 18 13:42:00 2027 GMT
        Subject: CN=642A23028F2A39C9FCB90795EA8720EE9592CD43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:44:2b:b8:25:ea:77:c7:f6:7e:fe:3e:8c:49:
                    6a:90:71:e6:5a:b6:df:6b:aa:19:bb:00:96:fa:63:
                    1a:99:f4:0e:12:55:43:a4:30:9e:65:a2:7f:61:c7:
                    5b:bc:46:92:a1:be:85:48:84:c3:12:19:b9:b9:d0:
                    d3:6e:f4:6d:3d:26:dc:e5:6a:55:a9:e3:04:a1:fe:
                    79:ce:ae:52:85:7c:c5:dd:e9:02:5b:7b:33:62:ae:
                    fe:48:22:a7:5a:64:0b:b3:49:0e:4e:60:f6:3e:ab:
                    20:80:a6:c3:f8:cc:c5:19:a9:47:6f:a8:67:c5:82:
                    98:72:3f:09:d6:be:78:4e:64:2b:d3:96:8d:d1:3d:
                    7a:ca:d8:b4:3a:a5:5f:53:07:04:0d:ea:51:8e:33:
                    d1:2b:91:f4:9d:58:f0:38:7c:ac:ba:fe:74:60:a5:
                    59:97:f0:81:a4:d1:e8:d0:b1:17:eb:5a:fa:03:76:
                    7f:84:8e:15:d4:e7:01:2e:49:e0:20:fd:95:5c:28:
                    3f:ea:15:d6:a1:3c:c9:9d:b3:9d:61:ba:b0:0d:c4:
                    a2:a6:8f:2e:ec:2c:be:b1:76:6b:c8:e9:92:5a:98:
                    57:65:c4:27:4f:2b:ce:70:8e:77:10:d0:f8:f3:19:
                    a0:f0:d8:da:b6:7a:57:f6:f6:c5:d3:af:85:80:08:
                    5d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:2A:23:02:8F:2A:39:C9:FC:B9:07:95:EA:87:20:EE:95:92:CD:43
            X509v3 Authority Key Identifier:
                keyid:AE:66:FA:9D:55:3C:70:2E:C9:07:E7:16:7C:26:56:71:D1:8C:31:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/AE66FA9D553C702EC907E7167C265671D18C3133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE66FA9D553C702EC907E7167C265671D18C3133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/323830343a393834343a3a2f33342d3334203d3e203532393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9844::/34

    Signature Algorithm: sha256WithRSAEncryption
         40:42:41:d7:dc:7e:64:bc:77:01:78:43:6f:31:f1:00:47:d5:
         94:e4:df:81:0c:4c:c7:e4:f5:ff:d0:2f:87:25:5c:40:f5:ce:
         b2:e9:78:48:eb:5e:6e:4a:63:02:4a:3a:80:0a:f4:43:06:aa:
         d2:28:5a:e4:18:4a:51:71:10:fd:d6:0b:01:15:b7:c5:19:76:
         9f:0c:11:45:8c:ae:73:57:17:46:2b:00:35:02:e4:6e:e7:42:
         3c:4c:34:f5:ea:c4:f0:f2:b1:e0:6c:70:be:64:13:93:a8:41:
         ce:22:a2:5f:6b:4c:69:f6:19:75:f1:a2:d3:86:43:0d:3c:7d:
         71:f4:b3:56:99:8b:66:fb:ba:d9:9a:80:39:99:90:9e:25:9a:
         53:b2:0c:f9:bc:bc:78:b7:89:b6:c1:8a:ba:fd:f3:27:c7:f9:
         0d:a8:0f:f1:48:91:33:48:4d:61:b0:f3:c2:d5:4e:40:3c:d9:
         41:cd:eb:77:3f:04:e1:ef:18:b4:d8:ce:1c:b5:e1:2e:3b:50:
         12:39:fd:7f:12:36:37:b3:a2:a6:e3:e6:0b:a3:79:1a:2a:90:
         66:23:ca:b1:de:33:2d:a4:42:89:a2:42:03:49:ed:ac:a8:79:
         2c:63:64:75:ab:31:5b:c9:c8:e5:32:b3:7b:bb:c1:74:09:7e:
         d6:8f:df:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:47:21 2026 by rpki-client