Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9h9ZmmweX2ueUNzpZ5MmFfAZTCiT24CXixoqYxH8TUiK/0/323830343a373866633a636130303a3a2f34302d3430203d3e20323731323738.roa
File:                     323830343a373866633a636130303a3a2f34302d3430203d3e20323731323738.roa (raw, json)
Hash identifier:          b1BlaEnhIbr83IAuDOmvEq9TNXYP4dqnHC4as0MPKvI=
Subject key identifier:   B8:5C:4B:0C:59:5B:A2:47:FC:04:94:B9:96:21:E0:46:97:51:3E:43
Certificate issuer:       /CN=E65390E77A729F873FA28119BCD08F1CA0204C93
Certificate serial:       7721BE632EDF0E45CDF481FA40EE9489EF920D6D
Authority key identifier: E6:53:90:E7:7A:72:9F:87:3F:A2:81:19:BC:D0:8F:1C:A0:20:4C:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E65390E77A729F873FA28119BCD08F1CA0204C93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9h9ZmmweX2ueUNzpZ5MmFfAZTCiT24CXixoqYxH8TUiK/0/323830343a373866633a636130303a3a2f34302d3430203d3e20323731323738.roa
Signing time:             Fri 29 May 2026 13:55:23 +0000
ROA not before:           Fri 29 May 2026 13:50:23 +0000
ROA not after:            Fri 28 May 2027 13:55:23 +0000
asID:                     271278
IP address blocks:        2804:78fc:ca00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9h9ZmmweX2ueUNzpZ5MmFfAZTCiT24CXixoqYxH8TUiK/0/E65390E77A729F873FA28119BCD08F1CA0204C93.crl
                          rsync://rpki-repo.registro.br/repo/9h9ZmmweX2ueUNzpZ5MmFfAZTCiT24CXixoqYxH8TUiK/0/E65390E77A729F873FA28119BCD08F1CA0204C93.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E65390E77A729F873FA28119BCD08F1CA0204C93.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 21:35:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:21:be:63:2e:df:0e:45:cd:f4:81:fa:40:ee:94:89:ef:92:0d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E65390E77A729F873FA28119BCD08F1CA0204C93
        Validity
            Not Before: May 29 13:50:23 2026 GMT
            Not After : May 28 13:55:23 2027 GMT
        Subject: CN=B85C4B0C595BA247FC0494B99621E04697513E43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5e:3f:c4:2f:9c:6d:5a:68:96:53:85:04:e2:
                    04:9a:cc:0f:58:01:e8:cf:de:17:a4:36:d2:99:c7:
                    25:81:ec:73:db:ca:94:e9:35:09:64:02:0a:c0:ca:
                    e1:c5:e8:98:69:9e:ad:49:6e:22:c6:9d:02:be:e8:
                    01:13:31:49:cd:be:28:e5:a1:ed:b6:72:cf:ae:f3:
                    5a:1b:2c:28:86:b9:15:6c:c9:2d:83:75:ff:15:68:
                    07:e4:a8:06:25:35:25:8d:cd:51:38:95:24:37:1c:
                    d6:76:f1:ab:08:fc:31:dc:7f:53:c9:db:63:7a:3b:
                    be:7b:6c:2d:19:5b:ba:52:c3:6a:49:3e:76:c6:af:
                    16:52:22:37:d2:94:08:8c:ab:60:44:14:a4:bb:fb:
                    87:b4:aa:d4:26:86:11:b6:6d:fe:88:bb:a2:75:db:
                    02:12:0a:00:79:c4:3a:99:ac:95:6d:ea:a6:16:9a:
                    03:b4:50:17:4b:a4:af:63:f9:37:ee:a7:f1:39:d2:
                    3f:27:a5:1e:24:2b:a2:9e:4e:ee:fe:44:60:7e:1a:
                    2a:15:4f:fe:20:5b:fa:b7:2e:a5:54:7b:99:e1:86:
                    95:ce:41:a0:ea:fd:00:ec:75:19:ec:47:1a:03:1e:
                    39:85:23:0d:22:60:a2:47:26:37:e3:48:44:34:e6:
                    54:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:5C:4B:0C:59:5B:A2:47:FC:04:94:B9:96:21:E0:46:97:51:3E:43
            X509v3 Authority Key Identifier:
                keyid:E6:53:90:E7:7A:72:9F:87:3F:A2:81:19:BC:D0:8F:1C:A0:20:4C:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9h9ZmmweX2ueUNzpZ5MmFfAZTCiT24CXixoqYxH8TUiK/0/E65390E77A729F873FA28119BCD08F1CA0204C93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E65390E77A729F873FA28119BCD08F1CA0204C93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9h9ZmmweX2ueUNzpZ5MmFfAZTCiT24CXixoqYxH8TUiK/0/323830343a373866633a636130303a3a2f34302d3430203d3e20323731323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:78fc:ca00::/40

    Signature Algorithm: sha256WithRSAEncryption
         81:49:2a:72:a8:56:b7:0c:86:d5:0e:0c:c8:50:f8:4e:7b:92:
         82:a6:4f:7a:8a:28:91:5a:2d:f7:00:ef:c0:54:30:bf:91:08:
         93:ab:04:49:b8:98:c1:8e:e9:e2:16:8d:32:17:88:11:b0:3e:
         e7:b7:45:12:7c:c8:34:80:b6:ff:ba:ce:f7:97:7c:55:f4:f2:
         ee:aa:dc:22:f5:c0:14:ec:b4:57:67:7f:28:1a:ed:86:2d:7e:
         1c:e8:8f:a2:18:cd:1e:b9:a1:17:21:db:be:d7:29:e2:4e:2e:
         66:f9:97:f9:5b:0a:5d:41:ca:cd:08:a5:79:44:d9:d9:4f:43:
         5b:9b:5c:9a:51:34:4c:b3:bf:4b:f1:f3:5e:47:aa:02:8a:dc:
         87:d6:80:b6:6e:0c:58:85:51:5a:45:ed:11:bd:7c:1d:4a:49:
         99:62:cc:80:d4:45:cc:1d:f5:3a:3e:d8:62:44:45:61:7c:41:
         ca:72:f6:a7:aa:bb:b6:cd:02:cc:f7:b7:c1:c7:25:79:bc:b4:
         f6:e3:68:a2:ce:ca:1e:3f:d2:c5:af:ff:8c:40:09:13:28:79:
         e5:c1:9f:f7:8e:8e:51:ab:e4:57:2e:22:f1:c4:9e:98:d1:0b:
         92:d6:75:9c:0d:e4:e1:f5:82:7a:a0:bc:fc:e5:6b:71:d3:b3:
         a3:f9:24:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:33:13 2026 by rpki-client