Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/323830343a393834343a633030303a3a2f33342d3334203d3e203532393836.roa
File:                     323830343a393834343a633030303a3a2f33342d3334203d3e203532393836.roa (raw, json)
Hash identifier:          tYYH0MlBi0zmzd1xb4lACok2s7S7NakjQ/auTrBWYVo=
Subject key identifier:   32:45:68:4B:F6:30:11:27:A7:A0:7B:F7:88:44:28:E9:4E:20:C2:F7
Certificate issuer:       /CN=AE66FA9D553C702EC907E7167C265671D18C3133
Certificate serial:       610A10112ACD62B245359ABD671CFF02B0A0E13F
Authority key identifier: AE:66:FA:9D:55:3C:70:2E:C9:07:E7:16:7C:26:56:71:D1:8C:31:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE66FA9D553C702EC907E7167C265671D18C3133.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/323830343a393834343a633030303a3a2f33342d3334203d3e203532393836.roa
Signing time:             Tue 19 May 2026 13:42:00 +0000
ROA not before:           Tue 19 May 2026 13:37:00 +0000
ROA not after:            Tue 18 May 2027 13:42:00 +0000
asID:                     52986
IP address blocks:        2804:9844:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/AE66FA9D553C702EC907E7167C265671D18C3133.crl
                          rsync://rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/AE66FA9D553C702EC907E7167C265671D18C3133.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE66FA9D553C702EC907E7167C265671D18C3133.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 23:04:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0a:10:11:2a:cd:62:b2:45:35:9a:bd:67:1c:ff:02:b0:a0:e1:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE66FA9D553C702EC907E7167C265671D18C3133
        Validity
            Not Before: May 19 13:37:00 2026 GMT
            Not After : May 18 13:42:00 2027 GMT
        Subject: CN=3245684BF6301127A7A07BF7884428E94E20C2F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:2f:64:b7:b9:1b:66:04:5a:b1:6f:fe:70:95:
                    6a:f9:53:f8:73:56:af:02:03:dd:42:b6:0d:d4:0a:
                    00:8d:0c:93:a2:30:9c:8d:5f:41:48:2b:c0:1a:44:
                    7f:b7:43:a7:5d:33:dd:23:9b:aa:f6:a8:d6:0b:90:
                    bf:b5:b0:3e:b7:43:d5:ce:d1:28:53:41:70:10:33:
                    9c:09:ce:16:f6:5b:e5:1c:7e:fd:26:40:e9:92:46:
                    44:f2:a1:70:5f:86:6b:82:c0:56:10:44:85:e9:7a:
                    80:b0:69:b2:78:a6:de:8e:0e:a7:de:76:84:82:0a:
                    22:cd:2a:7f:bc:2b:76:67:74:8c:e8:77:47:15:05:
                    46:50:b7:6a:c5:f8:57:7a:bd:41:a8:c1:96:18:1c:
                    84:42:78:30:1d:81:02:7c:f9:7c:06:0f:8e:9c:4e:
                    54:60:c4:4f:e5:5a:ba:89:46:2f:db:2b:ae:b2:fa:
                    63:97:bd:8b:d2:ab:4d:16:e7:7a:2c:25:b4:2f:41:
                    1c:2f:5a:22:6c:6e:ee:83:86:22:d7:68:e4:8e:4e:
                    72:83:9e:8d:1c:88:50:6f:92:1f:e4:c8:51:b2:d0:
                    a5:68:0c:67:ce:dd:63:d1:82:c4:65:bf:4b:6c:65:
                    cb:88:9f:b2:df:d4:13:1b:4a:35:7a:ab:57:00:22:
                    33:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:45:68:4B:F6:30:11:27:A7:A0:7B:F7:88:44:28:E9:4E:20:C2:F7
            X509v3 Authority Key Identifier:
                keyid:AE:66:FA:9D:55:3C:70:2E:C9:07:E7:16:7C:26:56:71:D1:8C:31:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/AE66FA9D553C702EC907E7167C265671D18C3133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE66FA9D553C702EC907E7167C265671D18C3133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/323830343a393834343a633030303a3a2f33342d3334203d3e203532393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9844:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         19:f9:5c:02:31:6e:dc:90:61:59:9a:58:89:20:01:a9:8f:a7:
         32:86:16:ed:94:4f:d1:88:b1:7d:d5:72:99:c4:e3:d6:6d:93:
         48:56:6d:88:59:b0:ca:c6:a8:02:97:f1:4f:a8:b2:08:48:4a:
         40:4d:d9:01:1d:5d:3f:68:8d:d6:34:94:99:6c:47:14:a1:5e:
         6e:3a:b4:44:b7:b2:5d:09:f7:a6:94:0d:16:d0:02:df:e2:91:
         79:ee:79:87:c8:a5:77:1d:2f:62:b9:6a:fb:70:19:b3:4c:de:
         f4:25:31:c3:4d:fb:20:d3:27:05:61:0b:f4:cd:95:74:6c:0b:
         5f:95:70:bb:8b:d3:b0:b3:3c:88:23:d1:bd:0f:d0:e8:bc:fe:
         24:a0:cc:06:8e:37:de:29:f3:64:58:3b:26:1c:77:d6:c9:4f:
         90:b5:32:af:b0:47:4b:05:8f:35:3b:51:c8:1a:f7:d4:06:f5:
         e8:f3:bc:01:52:5b:46:19:3e:b2:65:d8:21:6b:1c:19:dd:8c:
         23:72:40:e7:13:59:d4:e5:13:96:ad:33:c8:6c:59:8c:6a:6e:
         72:54:c1:7a:78:37:8f:92:76:19:57:ef:12:c3:68:25:3c:bd:
         8c:34:a4:53:e1:17:0d:2b:5e:24:6a:04:81:33:74:bd:32:3c:
         4f:91:53:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:47:33 2026 by rpki-client