Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/323830343a313362303a636330363a3a2f34382d3438203d3e20323633353436.roa
File:                     323830343a313362303a636330363a3a2f34382d3438203d3e20323633353436.roa (raw, json)
Hash identifier:          naDrNZv9XlILjPkjAFnJAfHYAcpyTKGcgh8qOG+kq+g=
Subject key identifier:   3A:F2:C9:19:05:9C:24:43:91:B7:01:BB:4E:35:40:56:AA:27:E5:F9
Certificate issuer:       /CN=FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC
Certificate serial:       523985F89E84C659730DE34851E60D447E9641BC
Authority key identifier: FF:4F:CD:2B:37:C1:47:86:21:14:DB:AB:CC:A0:0F:95:D6:BC:CD:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/323830343a313362303a636330363a3a2f34382d3438203d3e20323633353436.roa
Signing time:             Thu 11 Jun 2026 18:08:02 +0000
ROA not before:           Thu 11 Jun 2026 18:03:02 +0000
ROA not after:            Thu 10 Jun 2027 18:08:02 +0000
asID:                     263546
IP address blocks:        2804:13b0:cc06::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.crl
                          rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 22:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:39:85:f8:9e:84:c6:59:73:0d:e3:48:51:e6:0d:44:7e:96:41:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC
        Validity
            Not Before: Jun 11 18:03:02 2026 GMT
            Not After : Jun 10 18:08:02 2027 GMT
        Subject: CN=3AF2C919059C244391B701BB4E354056AA27E5F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:42:7f:d1:be:ce:3f:b5:a6:60:99:a5:d7:23:
                    a3:25:ef:4c:4a:67:10:93:47:f5:2a:c5:af:59:eb:
                    c2:ca:44:2e:e2:c3:56:fa:02:5e:ea:d7:19:d2:81:
                    aa:ee:c2:70:c7:64:85:1d:70:fb:9e:2f:77:78:12:
                    62:10:5b:48:99:c1:14:d1:b7:8b:b3:07:2d:e9:6c:
                    62:e5:71:9f:21:de:a8:cc:28:3f:25:49:05:fd:96:
                    f7:05:07:06:47:d4:79:49:df:61:3f:71:8d:c9:f5:
                    f9:9e:24:ae:57:4f:34:4b:86:4d:e2:d4:b8:7c:99:
                    ea:7c:f2:bf:48:ff:01:84:02:dd:41:94:f1:e1:9b:
                    48:8d:47:c8:75:c7:52:34:dc:c2:b2:45:bc:82:78:
                    6e:fe:f1:e1:ff:b0:61:98:4f:bf:9b:26:13:40:4e:
                    97:6a:89:2a:85:43:25:19:6f:26:a3:68:74:c6:c0:
                    52:6a:49:44:f5:a2:97:25:cc:79:2b:95:62:71:41:
                    5c:cb:72:54:04:35:5e:e7:43:8a:77:4d:aa:39:5c:
                    6f:47:b0:02:51:c8:cd:5d:1d:7c:9f:d0:63:e5:d9:
                    db:6a:34:01:61:73:4f:af:3f:ce:66:50:bf:7a:d6:
                    9d:b2:3b:41:1e:83:69:c8:27:77:bf:4d:77:53:b6:
                    5d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F2:C9:19:05:9C:24:43:91:B7:01:BB:4E:35:40:56:AA:27:E5:F9
            X509v3 Authority Key Identifier:
                keyid:FF:4F:CD:2B:37:C1:47:86:21:14:DB:AB:CC:A0:0F:95:D6:BC:CD:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/323830343a313362303a636330363a3a2f34382d3438203d3e20323633353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:13b0:cc06::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:1e:17:54:70:e1:ce:07:ab:5b:0d:ee:cc:f1:b5:8b:27:35:
         de:aa:bb:ac:b1:49:2d:5f:7b:93:2e:c7:5b:0a:7b:11:5d:38:
         80:f7:6e:23:70:65:2a:2c:d8:9d:35:cc:a2:4e:43:18:14:9b:
         74:23:dc:39:08:b8:5e:1b:89:9f:5c:71:b9:de:b4:d0:a7:cb:
         76:50:63:48:8f:44:e7:0a:de:c1:53:be:eb:ce:74:87:ea:96:
         06:8b:9c:3d:3c:3b:8b:1a:11:14:ff:a5:8f:31:33:29:de:85:
         f9:c9:93:d3:c4:ef:97:10:5c:08:62:71:a5:85:f5:30:6c:cb:
         f6:ee:da:f3:c9:8e:72:43:bd:6f:26:24:34:79:58:df:86:d1:
         fd:9d:52:f5:1a:51:d2:19:3b:f8:a6:f1:38:46:50:26:5c:e2:
         cd:18:85:89:5d:5d:d2:f8:c6:2c:6b:21:9d:58:ad:dc:de:20:
         c5:be:47:ad:07:b0:fd:10:36:b2:5e:5c:94:39:fe:c6:ef:da:
         7e:9c:12:4d:53:5f:04:a6:74:57:aa:8d:9e:87:0d:1e:34:ed:
         c7:6d:c2:96:64:57:83:25:9c:19:99:48:18:4a:23:99:c4:09:
         54:04:29:cd:1f:cc:2d:e3:24:73:ba:64:54:63:34:8d:75:bb:
         45:65:30:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:48:44 2026 by rpki-client