Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/323830343a313864383a3a2f33322d3430203d3e203631353833.roa
File:                     323830343a313864383a3a2f33322d3430203d3e203631353833.roa (raw, json)
Hash identifier:          Nq5jHcoiKaSJAfdi9vWz8scRSxDktf/MlWIgqI6K9a0=
Subject key identifier:   A2:18:98:6E:BE:CA:E9:9C:23:47:83:2D:6D:E9:A6:D5:40:52:79:DB
Certificate issuer:       /CN=344B5B409F263685E6336A621A4D2BB33F3578CE
Certificate serial:       4A058003FBF6A28EE566506D785F6E881CD60810
Authority key identifier: 34:4B:5B:40:9F:26:36:85:E6:33:6A:62:1A:4D:2B:B3:3F:35:78:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/344B5B409F263685E6336A621A4D2BB33F3578CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/323830343a313864383a3a2f33322d3430203d3e203631353833.roa
Signing time:             Mon 08 Jun 2026 13:16:42 +0000
ROA not before:           Mon 08 Jun 2026 13:11:42 +0000
ROA not after:            Mon 07 Jun 2027 13:16:42 +0000
asID:                     61583
IP address blocks:        2804:18d8::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/344B5B409F263685E6336A621A4D2BB33F3578CE.crl
                          rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/344B5B409F263685E6336A621A4D2BB33F3578CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/344B5B409F263685E6336A621A4D2BB33F3578CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 19:17:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:05:80:03:fb:f6:a2:8e:e5:66:50:6d:78:5f:6e:88:1c:d6:08:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=344B5B409F263685E6336A621A4D2BB33F3578CE
        Validity
            Not Before: Jun  8 13:11:42 2026 GMT
            Not After : Jun  7 13:16:42 2027 GMT
        Subject: CN=A218986EBECAE99C2347832D6DE9A6D5405279DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:aa:88:e9:aa:17:dc:78:5e:b8:cc:fa:50:93:
                    2b:eb:43:9f:33:54:cd:11:dc:7f:c5:f0:da:f8:a5:
                    53:be:fb:07:61:9a:d7:5d:67:0b:7e:90:0b:b0:2e:
                    08:07:91:71:b0:68:85:3b:c3:7e:59:73:63:df:7c:
                    d6:db:3d:ba:8f:67:1a:3c:31:34:16:e9:20:51:59:
                    38:af:cf:b2:a5:ef:92:80:11:20:20:3f:d9:b7:2c:
                    15:c3:3f:d9:c5:de:b3:90:dc:22:6e:18:18:08:cf:
                    26:67:a2:51:1b:aa:53:ee:05:56:69:5b:44:0a:f1:
                    ba:e5:ad:8f:82:43:56:e9:1c:f0:25:00:5a:94:d6:
                    38:83:4c:7e:29:02:8d:5f:c3:dc:b7:b2:94:1b:df:
                    91:19:ca:9e:cf:86:c3:25:be:19:57:61:1a:d8:01:
                    95:77:55:28:74:5a:1f:3c:d1:d8:2d:8e:7f:38:c6:
                    10:60:be:be:14:d1:ee:22:d5:cd:8a:5c:da:ac:ae:
                    20:ed:6d:fc:9c:12:ff:24:35:94:ca:95:97:fd:86:
                    62:f4:98:af:ca:1f:c7:14:79:02:8e:e2:97:f6:ed:
                    bc:df:e8:3a:33:70:f0:d5:9d:62:98:43:39:9c:8e:
                    d6:52:49:2e:f7:af:f5:1a:3d:eb:b8:90:6b:db:12:
                    a1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:18:98:6E:BE:CA:E9:9C:23:47:83:2D:6D:E9:A6:D5:40:52:79:DB
            X509v3 Authority Key Identifier:
                keyid:34:4B:5B:40:9F:26:36:85:E6:33:6A:62:1A:4D:2B:B3:3F:35:78:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/344B5B409F263685E6336A621A4D2BB33F3578CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/344B5B409F263685E6336A621A4D2BB33F3578CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/323830343a313864383a3a2f33322d3430203d3e203631353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:18d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:0a:55:8b:2e:a2:0a:9d:e9:d8:42:72:20:b6:6e:bf:ba:01:
         9a:62:5e:07:97:14:79:df:b4:b6:9d:fb:71:24:4e:d6:1c:94:
         58:4a:ac:af:96:f9:65:a6:73:53:28:c3:3f:0f:b7:4a:82:fa:
         62:2b:3d:12:ee:a2:ba:07:17:76:6b:a7:69:50:7d:b6:e6:e3:
         00:85:d9:18:3a:c7:48:56:d6:97:44:ff:70:d6:cf:a6:12:e2:
         a0:45:df:57:92:59:ba:f8:87:ad:ce:36:45:c7:5c:ee:dd:c2:
         d6:4b:b4:b6:31:02:4f:76:a0:7a:a0:3f:00:23:f1:90:78:63:
         29:35:ad:a5:bf:e4:bc:cf:bd:f1:43:21:a6:78:a3:e4:bc:0e:
         0a:79:15:b7:ab:ae:eb:16:5c:b6:94:bb:48:27:18:d6:20:65:
         0b:a3:95:6a:a4:ce:a7:5c:89:f2:50:55:1e:ef:de:e2:7a:dd:
         47:87:7d:5b:9f:1b:10:87:31:0b:38:21:36:54:b1:b0:9e:fa:
         2c:20:a3:9c:74:28:7e:5c:df:c8:3d:40:0a:f9:6f:60:80:50:
         bb:b6:ec:c8:50:81:45:71:95:a4:67:c3:e6:c7:4f:f3:d1:7a:
         cb:2f:d9:76:26:51:38:18:57:70:ce:df:57:58:26:cc:18:92:
         29:ee:16:e0
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUSgWAA/v2oo7lZlBteF9uiBzWCBAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQ0QjVCNDA5RjI2MzY4NUU2MzM2QTYyMUE0RDJCQjMz
RjM1NzhDRTAeFw0yNjA2MDgxMzExNDJaFw0yNzA2MDcxMzE2NDJaMDMxMTAvBgNV
BAMTKEEyMTg5ODZFQkVDQUU5OUMyMzQ3ODMyRDZERTlBNkQ1NDA1Mjc5REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJqojpqhfceF64zPpQkyvrQ58z
VM0R3H/F8Nr4pVO++wdhmtddZwt+kAuwLggHkXGwaIU7w35Zc2PffNbbPbqPZxo8
MTQW6SBRWTivz7Kl75KAESAgP9m3LBXDP9nF3rOQ3CJuGBgIzyZnolEbqlPuBVZp
W0QK8brlrY+CQ1bpHPAlAFqU1jiDTH4pAo1fw9y3spQb35EZyp7PhsMlvhlXYRrY
AZV3VSh0Wh880dgtjn84xhBgvr4U0e4i1c2KXNqsriDtbfycEv8kNZTKlZf9hmL0
mK/KH8cUeQKO4pf27bzf6DozcPDVnWKYQzmcjtZSSS73r/UaPeu4kGvbEqEbAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUohiYbr7K6ZwjR4Mtbemm1UBSedswHwYDVR0j
BBgwFoAUNEtbQJ8mNoXmM2piGk0rsz81eM4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFVvU2t2U1NOd29ZTkFkNlBNekFVdVVjaFc2WUJhdWd6cEhRTERTTVZF
c0ovMC8zNDRCNUI0MDlGMjYzNjg1RTYzMzZBNjIxQTREMkJCMzNGMzU3OENFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM0NEI1QjQwOUYyNjM2ODVF
NjMzNkE2MjFBNEQyQkIzM0YzNTc4Q0UuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhVb1NrdlNTTndvWU5BZDZQTXpBVXVVY2hXNllCYXVnenBIUUxEU01WRXNKLzAv
MzIzODMwMzQzYTMxMzg2NDM4M2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzYzMTM1
MzgzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEGNgwDQYJKoZIhvcNAQELBQADggEBAAkKVYsuogqd
6dhCciC2br+6AZpiXgeXFHnftLad+3EkTtYclFhKrK+W+WWmc1Mowz8Pt0qC+mIr
PRLuoroHF3Zrp2lQfbbm4wCF2Rg6x0hW1pdE/3DWz6YS4qBF31eSWbr4h63ONkXH
XO7dwtZLtLYxAk92oHqgPwAj8ZB4Yyk1raW/5LzPvfFDIaZ4o+S8Dgp5FberrusW
XLaUu0gnGNYgZQujlWqkzqdcifJQVR7v3uJ63UeHfVufGxCHMQs4ITZUsbCe+iwg
o5x0KH5c38g9QAr5b2CAULu27MhQgUVxlaRnw+bHT/PRessv2XYmUTgYV3DO31dY
JswYkinuFuA=
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:05:39 2026 by rpki-client