Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a3a2f33322d3634203d3e20323636323638.roa
File:                     323830343a336435343a3a2f33322d3634203d3e20323636323638.roa (raw, json)
Hash identifier:          PudlQcwycyQGOiCCqT1Onu3IQjU/6DsJyUhjlr9SetQ=
Subject key identifier:   A8:D6:7D:C3:49:CB:1D:3C:A7:F8:EE:7E:39:B1:7F:45:35:4D:75:B1
Certificate issuer:       /CN=65B1F9973AFB6EFFA9031919C1DD54079AAB8F75
Certificate serial:       69136F8DD555AFBE9EFC7EBF2382BEEF8585086A
Authority key identifier: 65:B1:F9:97:3A:FB:6E:FF:A9:03:19:19:C1:DD:54:07:9A:AB:8F:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65B1F9973AFB6EFFA9031919C1DD54079AAB8F75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a3a2f33322d3634203d3e20323636323638.roa
Signing time:             Fri 05 Jun 2026 23:22:34 +0000
ROA not before:           Fri 05 Jun 2026 23:17:34 +0000
ROA not after:            Fri 04 Jun 2027 23:22:34 +0000
asID:                     266268
IP address blocks:        2804:3d54::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/65B1F9973AFB6EFFA9031919C1DD54079AAB8F75.crl
                          rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/65B1F9973AFB6EFFA9031919C1DD54079AAB8F75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65B1F9973AFB6EFFA9031919C1DD54079AAB8F75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 22:13:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:13:6f:8d:d5:55:af:be:9e:fc:7e:bf:23:82:be:ef:85:85:08:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65B1F9973AFB6EFFA9031919C1DD54079AAB8F75
        Validity
            Not Before: Jun  5 23:17:34 2026 GMT
            Not After : Jun  4 23:22:34 2027 GMT
        Subject: CN=A8D67DC349CB1D3CA7F8EE7E39B17F45354D75B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f3:e7:80:15:47:21:6b:66:ba:75:06:c8:e3:
                    27:d4:7b:c9:1e:ec:15:0f:08:12:b5:a3:8c:dc:e9:
                    45:83:7d:fa:51:bb:6f:1c:b5:a1:8f:06:90:1c:fb:
                    db:0b:78:45:77:29:4c:be:c7:6a:f6:be:6f:ba:2a:
                    8c:30:1d:47:1e:f7:96:93:ab:e1:07:50:28:04:8c:
                    c9:a8:3e:4a:e0:b2:c9:2b:14:21:37:b3:7f:98:6e:
                    8a:59:7b:7a:f3:bc:8c:e5:d0:b2:4e:65:47:3c:81:
                    3c:ff:e6:b4:61:e1:6c:3d:0a:e9:33:c0:1c:c0:d9:
                    7c:a4:98:dc:2e:46:6a:c6:af:be:dc:4f:32:f2:ba:
                    17:87:f6:61:70:59:b7:b5:58:6e:8d:1d:8a:38:5e:
                    23:6d:29:a5:7e:0e:4c:66:c2:00:6e:c5:d8:9e:6e:
                    a0:b4:c9:f1:41:b5:a5:68:ac:64:eb:73:ee:8a:bd:
                    fb:a9:69:16:84:d8:f3:34:ed:fa:19:87:91:0f:14:
                    0d:71:e5:e1:56:2a:b2:20:78:a6:e3:86:ff:e1:37:
                    e2:60:0a:11:2f:fa:09:5a:8e:40:d1:dd:64:d2:b7:
                    64:e3:87:26:40:04:2e:bb:6f:0d:ec:02:01:dd:d9:
                    7f:9a:1f:b2:1d:35:c5:50:c4:fd:77:59:9b:8b:69:
                    ee:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D6:7D:C3:49:CB:1D:3C:A7:F8:EE:7E:39:B1:7F:45:35:4D:75:B1
            X509v3 Authority Key Identifier:
                keyid:65:B1:F9:97:3A:FB:6E:FF:A9:03:19:19:C1:DD:54:07:9A:AB:8F:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/65B1F9973AFB6EFFA9031919C1DD54079AAB8F75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65B1F9973AFB6EFFA9031919C1DD54079AAB8F75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a3a2f33322d3634203d3e20323636323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d54::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:9f:16:9e:40:b5:af:22:4d:4f:80:d7:54:a3:86:ef:79:e6:
         df:18:8e:cf:99:8d:73:59:96:ea:80:ea:5b:51:66:0a:b6:aa:
         57:df:22:f8:65:70:08:b2:2f:99:26:03:09:fd:84:42:d9:fa:
         24:c3:79:e0:41:61:17:1c:d4:aa:cc:23:86:f4:6e:24:a4:ab:
         4b:c0:43:43:46:62:c6:ea:7e:47:fb:5f:2f:43:ce:98:40:fc:
         f0:e5:19:a6:fb:d6:7c:31:0a:c7:4a:63:62:43:ea:ad:4f:75:
         12:5f:3e:ad:df:a9:58:c4:67:8c:8b:bd:29:98:ca:3f:f1:3d:
         2c:12:0b:ba:14:7f:d0:73:d1:48:6c:76:0e:f1:1a:94:03:68:
         61:5c:a9:b0:6e:bc:34:7e:a8:ec:66:38:14:20:ec:0e:10:33:
         8f:6e:46:ca:1d:93:14:11:9c:7a:05:01:53:16:6c:90:84:a3:
         76:ac:80:1c:63:8b:5c:d0:ab:7c:4c:01:56:9e:7c:ba:26:04:
         7c:7f:a0:7d:f0:86:61:5f:41:1c:41:83:32:c1:a1:15:2a:ef:
         e6:28:bb:ad:6f:f8:c3:5a:ce:f3:51:e3:10:db:d6:5e:60:75:
         80:1a:11:71:36:f7:c8:58:6a:28:63:e8:cb:03:5f:df:2c:dc:
         f2:fb:7e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:57:07 2026 by rpki-client