Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xCoqL6ZK3Mhdb1SXrThYFnw2pyDrMGDmJpBDgdgooFt/0/323830343a363737633a3a2f33322d3438203d3e20323639363331.roa
File:                     323830343a363737633a3a2f33322d3438203d3e20323639363331.roa (raw, json)
Hash identifier:          AQkGVkAs/sGs2pFsgufK7FUIbh+gEQ+ZXALyXQFbN3A=
Subject key identifier:   0A:A9:D1:D2:AA:13:29:45:FA:16:0A:9A:34:8E:06:0D:8D:CC:21:D8
Certificate issuer:       /CN=E9E392EB9046EB1DE4097105335663977865C06D
Certificate serial:       3B941CA192D2DDC76EED5E69568909E496B30F2F
Authority key identifier: E9:E3:92:EB:90:46:EB:1D:E4:09:71:05:33:56:63:97:78:65:C0:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9E392EB9046EB1DE4097105335663977865C06D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xCoqL6ZK3Mhdb1SXrThYFnw2pyDrMGDmJpBDgdgooFt/0/323830343a363737633a3a2f33322d3438203d3e20323639363331.roa
Signing time:             Sat 16 May 2026 14:37:02 +0000
ROA not before:           Sat 16 May 2026 14:32:02 +0000
ROA not after:            Sat 15 May 2027 14:37:02 +0000
asID:                     269631
IP address blocks:        2804:677c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6xCoqL6ZK3Mhdb1SXrThYFnw2pyDrMGDmJpBDgdgooFt/0/E9E392EB9046EB1DE4097105335663977865C06D.crl
                          rsync://rpki-repo.registro.br/repo/6xCoqL6ZK3Mhdb1SXrThYFnw2pyDrMGDmJpBDgdgooFt/0/E9E392EB9046EB1DE4097105335663977865C06D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9E392EB9046EB1DE4097105335663977865C06D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 00:08:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:94:1c:a1:92:d2:dd:c7:6e:ed:5e:69:56:89:09:e4:96:b3:0f:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9E392EB9046EB1DE4097105335663977865C06D
        Validity
            Not Before: May 16 14:32:02 2026 GMT
            Not After : May 15 14:37:02 2027 GMT
        Subject: CN=0AA9D1D2AA132945FA160A9A348E060D8DCC21D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:10:2a:11:b2:35:cd:3e:61:41:ee:e1:42:b3:
                    32:5c:e0:8c:b1:34:f5:48:fc:c7:ef:93:56:a7:61:
                    47:01:0a:f0:aa:40:fd:e6:56:f9:94:06:7d:80:32:
                    dd:19:c5:e3:f4:35:68:cf:23:f2:9e:70:4e:7a:78:
                    dc:18:36:30:bf:a3:21:f7:2d:95:cc:64:30:46:ba:
                    d2:a0:6c:2e:c3:15:50:37:67:b3:53:5e:7f:0e:8d:
                    c0:11:bb:d4:80:6d:c3:2e:9d:8d:86:21:e7:a7:cb:
                    31:68:2b:c2:0f:7c:0a:05:0b:fe:91:8d:c6:13:67:
                    a2:9e:2a:b1:c2:51:47:04:27:98:98:7b:9f:ca:4c:
                    43:ae:88:22:5c:39:78:d2:fe:24:aa:e9:05:70:a2:
                    76:f8:76:e4:11:94:bf:04:33:12:af:90:91:13:dc:
                    5d:a5:b8:60:2c:86:5c:89:42:f3:4a:2e:03:89:0a:
                    52:0e:5a:30:e1:53:eb:b1:95:fd:04:dc:3d:4d:8d:
                    6d:d2:10:45:ea:00:fc:de:26:01:c4:51:52:0a:86:
                    a4:d2:e7:6a:33:13:cb:7f:56:24:7c:b2:09:26:34:
                    1e:5c:90:85:46:45:8a:62:8a:70:8d:39:ab:df:f8:
                    8e:6f:69:ba:e5:42:ef:32:fa:67:33:b4:51:41:83:
                    30:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A9:D1:D2:AA:13:29:45:FA:16:0A:9A:34:8E:06:0D:8D:CC:21:D8
            X509v3 Authority Key Identifier:
                keyid:E9:E3:92:EB:90:46:EB:1D:E4:09:71:05:33:56:63:97:78:65:C0:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xCoqL6ZK3Mhdb1SXrThYFnw2pyDrMGDmJpBDgdgooFt/0/E9E392EB9046EB1DE4097105335663977865C06D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9E392EB9046EB1DE4097105335663977865C06D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xCoqL6ZK3Mhdb1SXrThYFnw2pyDrMGDmJpBDgdgooFt/0/323830343a363737633a3a2f33322d3438203d3e20323639363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:677c::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:05:b9:46:ba:7e:93:a6:48:b2:7c:76:c4:9b:b0:97:6c:e0:
         b5:a1:ec:88:cb:ec:d5:18:42:c9:e6:07:7d:07:2e:95:ad:12:
         a6:7d:88:10:8e:2d:42:44:b5:60:6e:0c:3d:b8:e7:ad:24:4f:
         bd:0a:02:ac:11:fc:73:5f:aa:17:b4:a8:42:33:8d:88:5b:48:
         d1:95:47:3f:8b:33:1b:23:62:c1:4e:cf:65:7a:41:e6:8d:55:
         68:14:78:9a:00:38:ff:f0:b6:fa:9f:6a:b9:70:e6:53:62:62:
         f2:13:6f:0d:c7:93:e9:0c:b1:39:27:89:7c:66:15:01:3c:fb:
         e4:84:52:aa:aa:38:34:14:53:80:59:a5:92:9f:54:15:a8:42:
         b1:23:0b:24:8a:d8:2c:b6:ad:1b:82:aa:0d:38:cf:74:0a:38:
         74:b0:93:f5:22:96:a5:1e:57:f0:6a:b7:3c:66:63:bd:18:e1:
         a6:01:8c:e0:78:b0:dd:a2:e0:3a:71:15:7e:3e:e1:dd:8b:d0:
         5d:b4:c3:25:cf:0e:c0:dd:72:6e:0f:3b:d3:45:90:c4:df:58:
         4a:58:e0:48:97:95:ad:82:cb:60:d2:0b:58:87:ba:33:ee:b0:
         6f:01:51:b4:eb:95:f5:55:26:1f:07:ee:9d:15:94:4d:85:79:
         ae:28:8e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 10:29:22 2026 by rpki-client