Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/323830343a343633343a396334303a3a2f34382d3438203d3e20323636393735.roa
File:                     323830343a343633343a396334303a3a2f34382d3438203d3e20323636393735.roa (raw, json)
Hash identifier:          Ovy+jNk341ydb9ECWV7//aWOiwidKpLVF87BF+F4hLw=
Subject key identifier:   DF:F9:5E:E2:AC:D3:CE:E6:E8:EE:1F:03:4D:F0:38:16:BC:B7:5A:DE
Certificate issuer:       /CN=F346A2DF3646E1D5462B83A19F3C56C660FEB218
Certificate serial:       2904A55D02BD253599E5F2DDC334D01EC9CBFFCB
Authority key identifier: F3:46:A2:DF:36:46:E1:D5:46:2B:83:A1:9F:3C:56:C6:60:FE:B2:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F346A2DF3646E1D5462B83A19F3C56C660FEB218.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/323830343a343633343a396334303a3a2f34382d3438203d3e20323636393735.roa
Signing time:             Wed 20 May 2026 13:25:11 +0000
ROA not before:           Wed 20 May 2026 13:20:11 +0000
ROA not after:            Wed 19 May 2027 13:25:11 +0000
asID:                     266975
IP address blocks:        2804:4634:9c40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/F346A2DF3646E1D5462B83A19F3C56C660FEB218.crl
                          rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/F346A2DF3646E1D5462B83A19F3C56C660FEB218.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F346A2DF3646E1D5462B83A19F3C56C660FEB218.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 04:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:04:a5:5d:02:bd:25:35:99:e5:f2:dd:c3:34:d0:1e:c9:cb:ff:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F346A2DF3646E1D5462B83A19F3C56C660FEB218
        Validity
            Not Before: May 20 13:20:11 2026 GMT
            Not After : May 19 13:25:11 2027 GMT
        Subject: CN=DFF95EE2ACD3CEE6E8EE1F034DF03816BCB75ADE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:be:5e:99:22:be:25:9e:f8:94:04:0d:6f:02:
                    98:f4:e7:67:78:60:10:fb:48:18:77:1e:6c:62:52:
                    24:2f:13:a8:cc:e4:ac:66:7e:5e:dd:34:cd:e2:b7:
                    ce:1d:2b:2d:ec:fd:fa:74:f5:25:7c:34:88:a5:26:
                    80:8a:43:70:9b:ef:bd:7f:fa:fa:74:cd:ba:d9:7f:
                    c4:44:1d:72:be:b9:c0:68:be:6c:e0:ff:13:29:f6:
                    85:85:ca:a6:f7:b4:4c:ca:b1:fa:48:d4:fa:b2:a3:
                    5a:ad:88:e3:f9:65:c4:dd:cc:fb:a7:3f:d7:7f:6d:
                    61:b1:22:58:36:5c:0f:ef:83:3e:bf:e9:67:3e:3c:
                    2b:7a:b3:4f:1d:c3:f2:f6:29:30:42:30:a7:20:8c:
                    c1:c9:7e:58:74:84:3c:ef:a2:2e:d5:9b:55:87:ac:
                    c7:ed:c7:1e:54:9b:75:4c:96:9e:14:34:f4:32:79:
                    60:8b:a2:12:b9:4b:0d:31:a8:94:35:dc:2d:42:17:
                    73:d4:c1:8d:8d:0e:7a:79:7f:52:49:dd:c8:f9:85:
                    49:ce:6e:55:65:47:49:e1:f3:e1:a5:71:41:b4:56:
                    c6:e5:87:c4:e4:44:27:5a:3b:dc:d2:49:f6:f1:bb:
                    8d:4c:37:ad:47:9b:e6:7e:b9:48:bb:2b:fb:7b:67:
                    5a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F9:5E:E2:AC:D3:CE:E6:E8:EE:1F:03:4D:F0:38:16:BC:B7:5A:DE
            X509v3 Authority Key Identifier:
                keyid:F3:46:A2:DF:36:46:E1:D5:46:2B:83:A1:9F:3C:56:C6:60:FE:B2:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/F346A2DF3646E1D5462B83A19F3C56C660FEB218.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F346A2DF3646E1D5462B83A19F3C56C660FEB218.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/323830343a343633343a396334303a3a2f34382d3438203d3e20323636393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4634:9c40::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:68:b8:ff:a9:0e:d9:c1:ae:1d:80:56:1c:fb:fd:c7:bc:07:
         84:2e:1d:03:cc:88:70:28:66:e5:d2:06:ad:22:08:24:b8:ce:
         93:2e:b7:c9:83:33:01:a3:74:24:e2:7d:c5:20:e0:7b:f1:db:
         81:9f:72:80:39:35:7f:cc:25:16:8b:72:10:4b:23:69:ed:0d:
         f9:49:bd:cf:08:20:93:df:57:2e:34:50:86:d3:98:94:68:fe:
         6a:4e:08:5f:97:de:d5:2f:05:47:72:55:7b:8d:cb:16:41:21:
         a2:9d:25:e0:69:5e:e8:21:e0:dc:a9:99:8b:da:a5:d8:01:eb:
         25:1a:b2:cd:30:62:14:b2:65:e6:30:87:cc:94:d3:ac:29:db:
         3e:9d:ce:32:02:e5:99:bc:94:97:dd:45:dd:b6:1a:ab:38:30:
         21:22:77:a5:1b:86:6d:00:25:7f:9d:40:75:18:8c:b3:43:0d:
         2b:e7:76:e3:5f:60:1d:13:3a:5b:40:1b:ff:9c:16:2b:2d:cb:
         d9:4f:c5:6a:0e:70:e1:ff:a6:d9:84:60:03:bc:9d:d7:26:0c:
         ff:d5:56:db:fa:07:41:7f:a2:42:e7:eb:3f:53:13:3c:52:19:
         d5:b0:14:8a:cb:85:e3:62:d0:a6:de:95:1a:dd:da:8b:6f:b5:
         52:a8:f5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:20:07 2026 by rpki-client