Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a3a2f33362d3336203d3e203631373736.roa
File:                     323830343a313932633a3a2f33362d3336203d3e203631373736.roa (raw, json)
Hash identifier:          ZmkZ0CiCSdzxXmpcAKhcIpbS7thlLSZmedv7LnSSgHo=
Subject key identifier:   D4:41:51:CD:92:E5:6C:A0:C0:7B:5A:EB:02:8F:16:13:CE:18:43:A5
Certificate issuer:       /CN=F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF
Certificate serial:       462004E14FB17D12142015A2E2E1C996D85C1FB3
Authority key identifier: F1:13:E4:BF:5F:24:27:FB:9B:04:FC:6A:FA:D7:3C:3C:C3:CF:99:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a3a2f33362d3336203d3e203631373736.roa
Signing time:             Sat 13 Jun 2026 02:28:12 +0000
ROA not before:           Sat 13 Jun 2026 02:23:12 +0000
ROA not after:            Sat 12 Jun 2027 02:28:12 +0000
asID:                     61776
IP address blocks:        2804:192c::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.crl
                          rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 03:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:20:04:e1:4f:b1:7d:12:14:20:15:a2:e2:e1:c9:96:d8:5c:1f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF
        Validity
            Not Before: Jun 13 02:23:12 2026 GMT
            Not After : Jun 12 02:28:12 2027 GMT
        Subject: CN=D44151CD92E56CA0C07B5AEB028F1613CE1843A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e5:45:17:fe:37:f1:36:16:1a:57:6c:4c:85:
                    a5:8a:d5:cf:6d:90:5c:e2:ee:38:3d:1f:21:ad:c8:
                    fd:98:4d:71:73:18:32:bf:0e:af:59:e4:08:59:b1:
                    97:2a:ad:08:c9:d1:63:cc:13:1d:39:cb:c3:f4:9d:
                    61:f3:91:e2:04:99:2c:16:7a:bc:b3:85:5e:ac:bd:
                    16:31:13:4b:ec:9b:78:9b:7b:88:5f:e9:b7:fa:39:
                    8f:eb:63:ec:0c:d7:50:0c:a3:45:38:9b:e0:14:42:
                    84:4b:dc:66:5e:45:94:c1:74:20:0b:c6:fb:a5:8d:
                    97:31:ff:29:10:2d:7f:d6:f9:60:bd:7c:69:c7:9e:
                    e6:32:f5:fd:57:64:12:13:95:95:57:df:0e:1f:1f:
                    9f:30:e1:9e:ba:03:26:d1:ac:bb:07:c8:b8:9b:b1:
                    76:90:f4:2f:95:54:c0:d7:ac:79:ab:bd:6c:c9:4f:
                    6e:d7:3f:a6:54:42:02:d2:6e:77:8e:b0:aa:54:c3:
                    0e:ea:62:ff:31:6f:32:7a:25:e4:39:5a:34:a6:cd:
                    16:10:c0:22:da:e0:aa:44:33:b4:8b:1e:f3:2a:2f:
                    f4:17:45:22:4f:f1:8e:57:c6:53:5b:70:96:44:7a:
                    02:b8:ab:98:2b:a1:fb:3f:3e:ce:2f:59:5b:95:5b:
                    7e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:41:51:CD:92:E5:6C:A0:C0:7B:5A:EB:02:8F:16:13:CE:18:43:A5
            X509v3 Authority Key Identifier:
                keyid:F1:13:E4:BF:5F:24:27:FB:9B:04:FC:6A:FA:D7:3C:3C:C3:CF:99:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a3a2f33362d3336203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:192c::/36

    Signature Algorithm: sha256WithRSAEncryption
         61:1c:5a:97:cf:da:f7:e3:04:c8:b7:77:51:0c:90:e8:10:3f:
         33:ad:67:0e:84:ba:ea:a2:c1:21:04:bd:89:3a:89:94:27:37:
         0a:9e:9e:4a:1e:c4:96:b4:60:1e:28:71:ca:61:33:11:dd:ef:
         e0:0e:77:0c:53:3a:1e:dc:44:b2:f7:50:43:89:3f:f8:99:9e:
         4f:22:e9:b4:f0:2b:da:7d:98:bd:97:99:75:42:a0:5b:81:3e:
         c6:fe:5f:1a:ca:c7:e4:c9:49:ec:a1:f6:df:3e:69:45:8a:cb:
         03:ae:1a:4e:d2:11:db:c2:36:54:2d:06:57:d3:f4:0f:6d:f0:
         75:06:75:f9:68:a3:15:fd:da:77:c4:e0:4c:af:66:7d:0a:73:
         87:e3:1e:fa:69:c1:74:29:50:dd:01:df:7d:d1:8f:70:53:33:
         81:38:ea:56:3a:a6:5e:39:0a:6d:73:0a:a4:9c:de:ed:81:a6:
         f9:49:48:29:7c:cd:57:b0:73:24:fc:7f:bf:a4:b3:ef:0c:7d:
         28:70:2b:d4:82:a7:51:cc:be:12:56:a6:32:a2:f0:fc:59:67:
         75:65:57:1d:80:4b:78:44:1c:b2:00:4e:6f:56:3d:36:ce:2a:
         79:40:f5:d0:2c:95:4e:81:1b:82:f0:b4:32:f1:54:01:96:4d:
         c3:86:63:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:38:11 2026 by rpki-client