Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/323830343a316562633a3a2f33322d3332203d3e20323634343436.roa
File:                     323830343a316562633a3a2f33322d3332203d3e20323634343436.roa (raw, json)
Hash identifier:          bu8pUAoTdX1+vyjbx30CdZHSwt9Znk9xVnzpCaTmglY=
Subject key identifier:   A6:0F:1C:8E:6E:FD:D5:70:85:4C:FB:DD:28:94:99:2C:E4:7D:2A:DE
Certificate issuer:       /CN=51C3861EB5DE6985DCA79CB6A24D19032DC727E2
Certificate serial:       533B5DE8D0D180A9B79079BE317373E094BE0E3A
Authority key identifier: 51:C3:86:1E:B5:DE:69:85:DC:A7:9C:B6:A2:4D:19:03:2D:C7:27:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51C3861EB5DE6985DCA79CB6A24D19032DC727E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/323830343a316562633a3a2f33322d3332203d3e20323634343436.roa
Signing time:             Tue 09 Jun 2026 12:40:31 +0000
ROA not before:           Tue 09 Jun 2026 12:35:31 +0000
ROA not after:            Tue 08 Jun 2027 12:40:31 +0000
asID:                     264446
IP address blocks:        2804:1ebc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/51C3861EB5DE6985DCA79CB6A24D19032DC727E2.crl
                          rsync://rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/51C3861EB5DE6985DCA79CB6A24D19032DC727E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51C3861EB5DE6985DCA79CB6A24D19032DC727E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:33:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:3b:5d:e8:d0:d1:80:a9:b7:90:79:be:31:73:73:e0:94:be:0e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51C3861EB5DE6985DCA79CB6A24D19032DC727E2
        Validity
            Not Before: Jun  9 12:35:31 2026 GMT
            Not After : Jun  8 12:40:31 2027 GMT
        Subject: CN=A60F1C8E6EFDD570854CFBDD2894992CE47D2ADE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:da:e0:bd:7d:a3:6f:76:eb:15:20:c5:c7:17:
                    c5:6c:40:df:d4:38:5d:23:99:4d:20:51:7a:65:ff:
                    50:43:7e:74:5f:ae:32:e8:b2:52:66:b2:9f:21:f5:
                    b0:ed:47:27:e6:bb:42:1b:fc:44:67:9a:ea:72:69:
                    44:ac:78:5c:7c:cf:47:37:61:4c:e3:9b:d8:4b:6c:
                    80:83:7e:d3:c9:e3:44:50:52:d7:c9:74:9b:ea:83:
                    41:66:2c:94:8e:36:95:f8:fe:57:c0:9c:f3:79:e2:
                    15:6e:63:4b:2a:c3:54:bb:b0:10:d7:fe:bc:57:c7:
                    99:eb:49:fa:9f:9a:ee:12:c0:75:6f:e3:c4:cb:b8:
                    76:40:96:55:db:b3:7f:24:57:4b:84:98:29:e1:aa:
                    0e:bc:65:6a:df:a9:c1:d2:a4:5f:f3:88:c0:e9:26:
                    ff:91:18:aa:46:f9:93:47:5c:46:19:ef:1a:55:4c:
                    60:d0:45:fc:3d:db:39:84:2b:89:25:fc:99:b5:ed:
                    9b:25:65:6b:65:a2:51:de:46:4d:35:1c:48:0a:30:
                    9b:8d:d5:30:fd:20:61:2d:f7:c0:3e:05:64:73:12:
                    c6:14:0e:5c:e4:6a:ee:82:50:44:94:32:24:97:88:
                    4c:2c:6a:cd:03:ce:0c:c3:41:ca:ca:f7:cd:2d:71:
                    3a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0F:1C:8E:6E:FD:D5:70:85:4C:FB:DD:28:94:99:2C:E4:7D:2A:DE
            X509v3 Authority Key Identifier:
                keyid:51:C3:86:1E:B5:DE:69:85:DC:A7:9C:B6:A2:4D:19:03:2D:C7:27:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/51C3861EB5DE6985DCA79CB6A24D19032DC727E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51C3861EB5DE6985DCA79CB6A24D19032DC727E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/323830343a316562633a3a2f33322d3332203d3e20323634343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ebc::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:e3:e0:b7:a5:1e:c1:13:62:a3:e2:ec:3f:65:94:91:e9:18:
         3e:a6:73:4c:d3:90:0e:96:cf:ae:d5:7e:a4:8d:71:00:e0:a6:
         95:81:3e:27:10:5e:fe:68:31:cd:02:16:bd:19:3b:77:ec:9c:
         8d:83:fc:7f:b0:90:13:f8:10:04:9c:ca:77:fe:b2:cb:e3:dd:
         82:8d:b2:15:04:e7:09:b3:2b:d5:ef:c4:fc:2d:84:1e:21:f4:
         53:6d:83:13:a9:51:b5:84:23:0f:14:8f:96:d9:d1:4d:08:a0:
         bc:91:76:67:2a:c5:ae:d1:e3:fa:62:0a:56:c8:54:91:03:28:
         47:72:99:1c:98:39:f1:22:6f:34:75:56:fc:33:6f:8a:1e:5a:
         b4:6c:6a:9f:a6:87:29:ec:32:ee:e9:1a:a5:60:0a:9b:02:1e:
         2b:68:fa:42:a7:01:cb:5c:1f:dc:1e:f2:f8:d0:cc:aa:2a:15:
         5e:f3:6d:46:cd:ef:a2:16:83:a9:f3:41:2d:a4:63:62:0d:3e:
         30:4a:40:48:e6:75:e6:87:03:61:11:2a:08:1b:04:05:5b:7c:
         33:d7:d2:b7:88:0c:c0:5f:d2:53:94:fc:8a:0c:58:51:be:33:
         29:b1:06:8c:77:3a:bd:3e:da:b7:71:23:ce:a1:1b:f1:d4:cb:
         40:3a:a3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:48:56 2026 by rpki-client