Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8h334Zm2BCT5NrdMWsu4uDXCErAdMZ6oWkhhiCE9Anfz/0/323830343a323233383a6530303a3a2f34302d3430203d3e20323634353938.roa
File:                     323830343a323233383a6530303a3a2f34302d3430203d3e20323634353938.roa (raw, json)
Hash identifier:          aAma+xW+ZKSFRJEjK23KDSaBEBxhb406j94KoAaMBfI=
Subject key identifier:   57:B3:2D:B8:A9:C5:98:BB:21:79:F9:FB:69:C9:01:1B:7A:B9:CA:6E
Certificate issuer:       /CN=68DCF9CE56E6B22F6D39A5FE19C4843DFA725EC1
Certificate serial:       675956747304D098477833A2FE9C8802C8D2D63E
Authority key identifier: 68:DC:F9:CE:56:E6:B2:2F:6D:39:A5:FE:19:C4:84:3D:FA:72:5E:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DCF9CE56E6B22F6D39A5FE19C4843DFA725EC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8h334Zm2BCT5NrdMWsu4uDXCErAdMZ6oWkhhiCE9Anfz/0/323830343a323233383a6530303a3a2f34302d3430203d3e20323634353938.roa
Signing time:             Wed 10 Jun 2026 11:22:22 +0000
ROA not before:           Wed 10 Jun 2026 11:17:22 +0000
ROA not after:            Wed 09 Jun 2027 11:22:22 +0000
asID:                     264598
IP address blocks:        2804:2238:e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8h334Zm2BCT5NrdMWsu4uDXCErAdMZ6oWkhhiCE9Anfz/0/68DCF9CE56E6B22F6D39A5FE19C4843DFA725EC1.crl
                          rsync://rpki-repo.registro.br/repo/8h334Zm2BCT5NrdMWsu4uDXCErAdMZ6oWkhhiCE9Anfz/0/68DCF9CE56E6B22F6D39A5FE19C4843DFA725EC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DCF9CE56E6B22F6D39A5FE19C4843DFA725EC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 08:28:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:59:56:74:73:04:d0:98:47:78:33:a2:fe:9c:88:02:c8:d2:d6:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68DCF9CE56E6B22F6D39A5FE19C4843DFA725EC1
        Validity
            Not Before: Jun 10 11:17:22 2026 GMT
            Not After : Jun  9 11:22:22 2027 GMT
        Subject: CN=57B32DB8A9C598BB2179F9FB69C9011B7AB9CA6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:35:2d:8f:32:bc:61:0f:73:fd:fd:e7:65:df:
                    83:1b:4b:7e:7e:9b:88:b0:87:2d:28:fc:5d:9f:8e:
                    c3:b0:52:c8:d3:53:13:fd:52:11:bb:68:88:1a:c8:
                    a9:4d:7d:1a:63:ed:2c:a4:7e:1b:74:b1:12:1f:34:
                    a8:d8:6d:83:9a:c0:37:39:c2:48:35:99:1b:09:84:
                    27:60:5b:2b:43:62:0d:7b:c1:51:de:66:24:7e:f1:
                    94:70:f6:1e:c7:ea:5b:3c:6f:f7:3b:54:2e:99:88:
                    e2:a4:93:4e:7e:52:dc:36:86:2e:fd:20:99:80:36:
                    1b:df:ee:a0:94:53:98:d5:7d:3e:a2:16:d2:01:b6:
                    5f:9f:be:d0:a1:8a:98:de:45:31:8d:1b:02:18:3c:
                    10:ea:f0:f5:6c:1b:be:c1:ca:83:b7:21:60:01:f3:
                    7f:b4:6d:e9:50:ff:4f:74:a9:60:15:02:16:fc:f1:
                    66:89:87:2a:19:32:82:a9:b6:cb:2d:83:5b:4a:52:
                    04:b2:0b:76:12:62:a5:a7:27:36:50:d7:4c:1d:fe:
                    f5:2b:b5:10:74:08:b7:de:2b:09:22:92:db:15:3f:
                    0c:49:47:06:68:98:1e:cc:e8:26:7c:5f:23:5a:18:
                    c4:27:fa:95:e3:f2:90:dd:25:1a:52:69:d3:53:67:
                    29:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B3:2D:B8:A9:C5:98:BB:21:79:F9:FB:69:C9:01:1B:7A:B9:CA:6E
            X509v3 Authority Key Identifier:
                keyid:68:DC:F9:CE:56:E6:B2:2F:6D:39:A5:FE:19:C4:84:3D:FA:72:5E:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8h334Zm2BCT5NrdMWsu4uDXCErAdMZ6oWkhhiCE9Anfz/0/68DCF9CE56E6B22F6D39A5FE19C4843DFA725EC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DCF9CE56E6B22F6D39A5FE19C4843DFA725EC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8h334Zm2BCT5NrdMWsu4uDXCErAdMZ6oWkhhiCE9Anfz/0/323830343a323233383a6530303a3a2f34302d3430203d3e20323634353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2238:e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         22:88:93:b2:a7:d0:0c:8a:f5:09:22:86:03:63:c5:2f:1f:c4:
         50:3c:d4:ed:4e:50:08:b7:3a:e5:14:81:02:aa:74:02:58:13:
         a1:58:8c:eb:f9:7c:66:64:66:c4:2e:01:3e:c5:51:da:86:e9:
         2c:95:59:97:fe:6f:9d:3a:18:4c:43:f1:71:6b:5f:c8:16:b4:
         e1:08:fb:60:8e:3e:2e:93:b3:c8:a6:1d:41:eb:94:bf:5a:df:
         cc:ab:60:2f:ae:3b:6b:0f:48:87:69:a1:c9:10:1e:a6:cd:a3:
         2f:b3:71:cb:a0:10:d4:3a:a9:8d:22:11:d4:60:47:e4:14:3e:
         a7:ff:94:a8:49:ef:61:d5:a3:26:f7:d4:89:d3:1a:3e:e9:32:
         c6:d9:87:3c:7c:3e:a0:eb:12:f5:8c:a0:8b:29:a2:d7:c3:15:
         5b:8f:db:39:57:ab:9b:c3:d2:69:c1:7a:30:5f:8a:8d:09:8d:
         01:b9:31:8b:5a:b4:65:7c:d6:e8:9e:e7:3a:43:ca:b1:07:c5:
         41:f6:87:65:7e:01:4a:3f:fc:53:c5:52:8e:42:6d:3c:f0:73:
         a3:64:26:48:97:fd:ec:0c:88:74:64:2a:28:7d:84:2b:9f:50:
         96:d1:4e:cf:a2:23:29:54:05:2d:88:62:07:6e:3e:a0:0e:b4:
         b0:81:4c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:23:08 2026 by rpki-client