Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/323830343a6538633a3a2f33322d313238203d3e203532353631.roa
File:                     323830343a6538633a3a2f33322d313238203d3e203532353631.roa (raw, json)
Hash identifier:          XSjjM6exSHeW0Cz/zAPsZp002Gh7dJEcJpRo77gXaY8=
Subject key identifier:   52:18:96:90:D1:E6:18:3B:D1:9A:67:63:C9:B2:FF:89:24:C6:C3:B0
Certificate issuer:       /CN=4B9D71384EB8CCDB232D031F652F5DD81A47DC24
Certificate serial:       606C0DD650221E2C92525C713EF3C2FC3322FAC9
Authority key identifier: 4B:9D:71:38:4E:B8:CC:DB:23:2D:03:1F:65:2F:5D:D8:1A:47:DC:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9D71384EB8CCDB232D031F652F5DD81A47DC24.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/323830343a6538633a3a2f33322d313238203d3e203532353631.roa
Signing time:             Wed 10 Jun 2026 12:35:25 +0000
ROA not before:           Wed 10 Jun 2026 12:30:25 +0000
ROA not after:            Wed 09 Jun 2027 12:35:25 +0000
asID:                     52561
IP address blocks:        2804:e8c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/4B9D71384EB8CCDB232D031F652F5DD81A47DC24.crl
                          rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/4B9D71384EB8CCDB232D031F652F5DD81A47DC24.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9D71384EB8CCDB232D031F652F5DD81A47DC24.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 13:59:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:6c:0d:d6:50:22:1e:2c:92:52:5c:71:3e:f3:c2:fc:33:22:fa:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B9D71384EB8CCDB232D031F652F5DD81A47DC24
        Validity
            Not Before: Jun 10 12:30:25 2026 GMT
            Not After : Jun  9 12:35:25 2027 GMT
        Subject: CN=52189690D1E6183BD19A6763C9B2FF8924C6C3B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:28:fa:9a:40:54:a5:c4:a4:fe:18:60:96:f6:
                    2f:93:dd:1e:c0:39:2e:a8:1d:0d:cb:b1:ab:45:7f:
                    68:cf:15:79:d3:88:af:98:b5:df:cc:a1:39:1e:db:
                    bb:e1:14:53:d2:81:3a:52:8b:0b:cd:a1:78:03:05:
                    8a:04:a3:7f:ab:1f:32:42:5d:71:41:28:b8:07:d9:
                    b4:e8:d1:bd:ed:0a:64:ed:67:0d:cd:7a:24:8d:f4:
                    81:75:d6:9d:ba:29:84:59:9d:a3:3f:02:d7:fd:bf:
                    0e:5d:1d:f0:91:e5:32:12:f2:b1:02:cc:aa:d0:d0:
                    e4:62:2f:20:92:dc:74:5a:c0:fd:9b:ff:25:a2:b2:
                    20:f9:a4:1f:77:13:39:98:0b:da:ec:da:37:dc:08:
                    6a:85:a2:ab:e7:26:cd:99:32:33:7c:ac:8d:e4:98:
                    5c:9a:18:9d:93:cf:1f:7c:9e:bb:f4:a3:8e:60:ab:
                    c2:0f:da:28:57:ee:91:34:e7:41:8d:ca:9d:33:f4:
                    61:53:5c:9c:51:e9:ed:9c:d9:5b:aa:ca:f2:69:e5:
                    0f:fa:33:72:7e:9e:2b:92:8a:94:3b:d0:73:cc:bd:
                    7c:4e:0d:5c:96:a2:f4:29:80:a7:5c:2e:bd:03:40:
                    03:2d:d4:a7:2b:36:66:ba:0f:41:5b:a5:24:95:2f:
                    3a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:18:96:90:D1:E6:18:3B:D1:9A:67:63:C9:B2:FF:89:24:C6:C3:B0
            X509v3 Authority Key Identifier:
                keyid:4B:9D:71:38:4E:B8:CC:DB:23:2D:03:1F:65:2F:5D:D8:1A:47:DC:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/4B9D71384EB8CCDB232D031F652F5DD81A47DC24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9D71384EB8CCDB232D031F652F5DD81A47DC24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/323830343a6538633a3a2f33322d313238203d3e203532353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:c2:b1:1e:7c:45:47:4b:75:52:12:9c:e3:29:d0:73:12:30:
         5a:6c:9b:9f:89:a1:2b:dd:97:f9:14:46:63:29:6a:7f:fb:a6:
         45:c7:cf:dc:4d:65:e5:95:82:1a:a3:8b:76:70:f0:30:02:c9:
         fb:91:62:97:14:d1:42:4a:63:5a:0b:11:d5:9c:db:66:ba:46:
         03:82:e5:11:6b:fe:f1:a9:f4:07:32:30:60:cb:a2:79:3d:a3:
         3f:9c:89:b5:fb:4c:ad:7a:0d:6c:8f:67:6c:52:e2:b9:81:b2:
         fa:5a:ca:31:4a:1c:cd:d6:0f:a6:37:9c:fe:30:f0:12:d2:d7:
         d4:03:8b:f3:64:87:cd:ac:1c:57:ab:fe:bb:ea:66:6c:d2:98:
         8e:a1:38:a3:91:f0:03:5b:2a:ec:91:71:51:31:2d:b2:9c:d2:
         ef:b7:71:dc:31:22:b0:74:b7:4b:76:89:f3:b7:b3:99:24:6d:
         a2:4b:94:10:3c:5a:06:58:35:af:7f:ea:0a:5f:d4:45:b7:08:
         87:16:94:db:e8:70:f6:aa:bf:2c:1f:5b:57:b1:b6:f9:20:64:
         95:46:5d:41:04:83:fe:0d:52:a8:12:53:3c:b3:21:6d:4e:30:
         1d:c2:5c:dc:66:be:37:50:30:ed:7d:e7:6a:1a:be:d0:90:47:
         b0:bb:01:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:21:36 2026 by rpki-client