Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/323830343a386165303a3a2f33322d3335203d3e203631363130.roa
File:                     323830343a386165303a3a2f33322d3335203d3e203631363130.roa (raw, json)
Hash identifier:          Lq/M7HyDrQmzxkTrgCJloswHG80yJe4W8wxfKyuxsX0=
Subject key identifier:   C6:E7:60:37:20:66:DD:0F:68:DF:D2:EB:E0:F2:7E:DB:18:E8:2A:8A
Certificate issuer:       /CN=4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD
Certificate serial:       0D3265D851385892736755F37C58368B87DA2332
Authority key identifier: 4B:3F:BC:1F:37:21:B6:D1:1E:11:B1:D8:79:FC:6A:C8:99:4D:7D:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/323830343a386165303a3a2f33322d3335203d3e203631363130.roa
Signing time:             Sun 24 May 2026 22:06:32 +0000
ROA not before:           Sun 24 May 2026 22:01:32 +0000
ROA not after:            Sun 23 May 2027 22:06:32 +0000
asID:                     61610
IP address blocks:        2804:8ae0::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.crl
                          rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:32:65:d8:51:38:58:92:73:67:55:f3:7c:58:36:8b:87:da:23:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD
        Validity
            Not Before: May 24 22:01:32 2026 GMT
            Not After : May 23 22:06:32 2027 GMT
        Subject: CN=C6E760372066DD0F68DFD2EBE0F27EDB18E82A8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:02:96:7f:d3:e5:8e:96:76:48:e3:d7:5a:ef:
                    34:8d:d4:c7:9d:e9:84:e6:6b:f8:bb:88:6d:a0:b7:
                    05:76:01:db:ad:7d:fa:04:ed:1b:06:a5:8d:d4:54:
                    3d:18:35:5b:f0:e8:db:ac:f9:73:0a:ab:cf:a9:94:
                    d7:e5:7e:0f:a6:51:16:1d:d9:16:12:08:28:a9:58:
                    3d:93:60:01:a7:38:9e:93:28:5f:74:c5:b6:0b:6e:
                    c4:d2:9c:f2:2c:37:b0:50:b7:05:e3:a4:9e:18:39:
                    10:d0:00:33:0c:d9:14:4b:a6:2c:d3:36:33:b3:78:
                    b8:8c:31:8e:f5:34:d9:28:18:33:4b:c8:5b:2e:2e:
                    f2:6d:fb:39:1b:1e:d2:22:7d:f3:3f:ec:be:c5:23:
                    d3:ca:d2:32:9f:9d:09:26:9f:17:93:b9:bc:7f:b7:
                    3e:9e:80:8f:b5:f2:3f:fd:a9:b7:b8:c8:99:10:43:
                    f7:83:92:2d:64:f4:57:85:9f:a2:62:59:48:88:78:
                    8a:3c:c9:3b:b1:a5:c1:37:65:d9:3e:3d:eb:e2:0c:
                    fb:3b:0d:50:b5:06:7b:62:0e:b2:94:b7:22:b1:89:
                    31:a4:1a:4f:03:1a:e2:53:27:46:cb:19:f6:25:eb:
                    83:ac:65:0b:7b:3b:29:75:60:4e:25:3c:57:13:d6:
                    b7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E7:60:37:20:66:DD:0F:68:DF:D2:EB:E0:F2:7E:DB:18:E8:2A:8A
            X509v3 Authority Key Identifier:
                keyid:4B:3F:BC:1F:37:21:B6:D1:1E:11:B1:D8:79:FC:6A:C8:99:4D:7D:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/323830343a386165303a3a2f33322d3335203d3e203631363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:7a:3b:22:46:de:de:98:90:5a:53:8d:15:da:3d:5c:53:f5:
         24:a8:43:b3:83:40:8b:d4:ef:05:b8:8d:37:30:6c:6e:29:27:
         cc:eb:e8:17:8a:01:b6:07:3e:37:93:03:72:02:89:41:72:b1:
         bc:c6:af:79:04:ce:15:10:9a:50:d5:99:39:01:c4:17:dd:f4:
         c8:62:ae:b2:2a:7e:2b:a1:64:ea:e4:83:7a:32:a1:bb:1c:12:
         3d:65:d6:6f:73:2d:d6:63:70:33:de:02:9d:ea:a9:85:4a:c0:
         45:f3:82:28:2a:67:d9:21:57:ef:56:46:90:cf:3d:7e:d1:32:
         ae:96:82:61:e7:f5:75:37:4e:88:ab:0a:6d:7b:4d:76:c3:e9:
         91:d9:47:a3:b6:03:a4:56:b6:d9:50:05:dc:29:f2:5b:13:7e:
         0b:bc:b7:59:66:59:86:94:2b:4e:8b:d7:e1:82:0e:da:0c:e2:
         7c:7a:2b:46:73:c1:02:5d:78:9d:98:2e:0a:0d:53:5a:cd:4c:
         29:6a:fe:a8:4d:92:f9:45:1a:34:03:ae:38:b5:a0:8d:74:64:
         4f:17:38:3a:63:39:6f:1b:06:ca:9a:50:24:49:b9:ae:85:a2:
         91:d4:68:21:81:bf:fc:f8:9f:e4:59:04:1d:ad:38:58:07:69:
         0e:fe:2a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:06:54 2026 by rpki-client