Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8DK8UgsPLj26AvVkyDBpNrj41e8eaZn2R5rF6yfv7QaD/0/323830343a366161303a633030303a3a2f33342d3334203d3e20323730333439.roa
File:                     323830343a366161303a633030303a3a2f33342d3334203d3e20323730333439.roa (raw, json)
Hash identifier:          vk98pY0JsfFMUzzLuOfW8H4QkX46GPsyYXNGgG3CsSQ=
Subject key identifier:   A8:87:86:4E:76:00:F9:C5:D4:A5:33:12:0C:FE:B3:25:BD:48:1B:F4
Certificate issuer:       /CN=359E45D488977E1E357947C752202F441AAD185D
Certificate serial:       10C101BE53817B4D0FB5B178984AE152DF492C07
Authority key identifier: 35:9E:45:D4:88:97:7E:1E:35:79:47:C7:52:20:2F:44:1A:AD:18:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/359E45D488977E1E357947C752202F441AAD185D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8DK8UgsPLj26AvVkyDBpNrj41e8eaZn2R5rF6yfv7QaD/0/323830343a366161303a633030303a3a2f33342d3334203d3e20323730333439.roa
Signing time:             Fri 05 Jun 2026 13:28:14 +0000
ROA not before:           Fri 05 Jun 2026 13:23:14 +0000
ROA not after:            Fri 04 Jun 2027 13:28:14 +0000
asID:                     270349
IP address blocks:        2804:6aa0:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8DK8UgsPLj26AvVkyDBpNrj41e8eaZn2R5rF6yfv7QaD/0/359E45D488977E1E357947C752202F441AAD185D.crl
                          rsync://rpki-repo.registro.br/repo/8DK8UgsPLj26AvVkyDBpNrj41e8eaZn2R5rF6yfv7QaD/0/359E45D488977E1E357947C752202F441AAD185D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/359E45D488977E1E357947C752202F441AAD185D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:08:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c1:01:be:53:81:7b:4d:0f:b5:b1:78:98:4a:e1:52:df:49:2c:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359E45D488977E1E357947C752202F441AAD185D
        Validity
            Not Before: Jun  5 13:23:14 2026 GMT
            Not After : Jun  4 13:28:14 2027 GMT
        Subject: CN=A887864E7600F9C5D4A533120CFEB325BD481BF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1a:13:db:78:ce:22:3d:0e:22:56:5a:a4:4b:
                    94:50:69:07:35:3b:00:ce:87:e0:8f:35:4e:f3:f6:
                    57:4e:4e:30:53:92:23:94:8a:77:bb:4a:ec:78:02:
                    bb:e8:c8:9a:00:a1:df:c3:cf:fd:cf:cd:52:44:91:
                    a4:bc:a6:07:1b:a2:48:db:52:37:a3:2d:bb:87:50:
                    60:f3:79:fb:f4:76:18:d7:91:5b:c9:41:92:f3:8d:
                    14:b6:3c:10:a7:89:0f:1e:cb:a4:16:52:07:57:2e:
                    11:b2:78:4e:10:ff:a3:0d:49:e5:c6:1f:c5:54:43:
                    5a:00:d8:e5:37:89:83:65:5f:26:a2:84:1e:02:81:
                    34:9f:e7:a6:02:e2:48:1f:81:8d:81:55:28:14:13:
                    9f:50:8c:e0:f3:ee:e3:ba:8b:47:4c:4d:f0:b3:4b:
                    3d:2c:27:e8:64:8e:f2:c1:9e:a1:41:45:64:8f:a5:
                    78:e7:9e:d8:72:35:39:a2:b5:15:aa:64:10:40:30:
                    02:e2:ae:65:c8:a6:0e:88:28:bd:f8:63:f3:e7:5b:
                    5d:bc:68:19:a9:75:bd:51:43:68:23:54:e8:0b:d3:
                    ee:e2:fd:06:c6:35:60:3f:44:a8:60:8f:aa:bd:67:
                    84:5c:85:f2:21:13:4f:11:45:b8:d5:14:e1:59:ff:
                    a2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:87:86:4E:76:00:F9:C5:D4:A5:33:12:0C:FE:B3:25:BD:48:1B:F4
            X509v3 Authority Key Identifier:
                keyid:35:9E:45:D4:88:97:7E:1E:35:79:47:C7:52:20:2F:44:1A:AD:18:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8DK8UgsPLj26AvVkyDBpNrj41e8eaZn2R5rF6yfv7QaD/0/359E45D488977E1E357947C752202F441AAD185D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/359E45D488977E1E357947C752202F441AAD185D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8DK8UgsPLj26AvVkyDBpNrj41e8eaZn2R5rF6yfv7QaD/0/323830343a366161303a633030303a3a2f33342d3334203d3e20323730333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6aa0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5d:3b:11:91:a7:8c:cd:91:23:6a:88:66:95:d9:e8:1c:5c:cb:
         a8:61:8b:b3:92:44:18:c5:17:14:5e:a0:28:75:07:97:a1:5b:
         f6:d8:9b:73:ea:cb:bd:8e:c6:76:1a:33:3c:4e:29:2b:78:28:
         b3:58:d2:21:63:cf:7e:40:81:cd:c2:95:44:ef:44:fc:cb:6f:
         a5:de:4d:26:ef:ba:bf:05:3a:fc:d0:e6:e8:3d:f9:d2:5b:c9:
         e4:b2:e0:42:ea:58:cc:c7:92:10:fd:54:e9:82:24:c6:72:20:
         be:6d:91:18:ee:a2:e7:d2:d7:e5:08:f4:7d:a7:d9:34:ad:ca:
         73:2c:b4:04:4c:01:53:6a:f4:90:92:9b:21:10:51:27:96:a8:
         3a:2f:ff:9f:7d:a7:d9:80:ea:fc:6b:a4:7f:31:06:a2:01:ea:
         26:51:aa:a7:38:b4:bd:4e:c2:1d:83:ef:43:35:ad:11:99:74:
         ca:31:50:8c:46:f6:a4:72:ce:5c:6d:8c:ac:5b:2e:f4:c0:bc:
         6a:64:9c:21:3d:f1:01:ea:fc:c1:59:2c:f3:0e:d2:76:dd:8b:
         74:43:c6:86:20:67:fc:39:7e:02:da:67:9b:1c:0c:7b:be:d3:
         aa:95:9c:b3:4a:91:42:bf:2b:43:5c:4a:a4:a1:92:de:d5:ab:
         f9:ad:b6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:57:56 2026 by rpki-client