Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/323830343a363063303a3a2f33322d3438203d3e20323639313838.roa
File:                     323830343a363063303a3a2f33322d3438203d3e20323639313838.roa (raw, json)
Hash identifier:          C9EUllxEOjlgmqXXVZHGTCSfmrDozUqKCH3N+IIJA6Q=
Subject key identifier:   53:D4:CE:00:A7:08:71:77:04:BA:B3:3E:B3:D9:DF:B2:F3:2D:D1:A6
Certificate issuer:       /CN=A2481D14FAE137FC69C2002900E8E133F914C990
Certificate serial:       5D42818000DDA7B44A2A3161B8F5731B6ADD09B5
Authority key identifier: A2:48:1D:14:FA:E1:37:FC:69:C2:00:29:00:E8:E1:33:F9:14:C9:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2481D14FAE137FC69C2002900E8E133F914C990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/323830343a363063303a3a2f33322d3438203d3e20323639313838.roa
Signing time:             Fri 15 May 2026 19:06:03 +0000
ROA not before:           Fri 15 May 2026 19:01:03 +0000
ROA not after:            Fri 14 May 2027 19:06:03 +0000
asID:                     269188
IP address blocks:        2804:60c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/A2481D14FAE137FC69C2002900E8E133F914C990.crl
                          rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/A2481D14FAE137FC69C2002900E8E133F914C990.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2481D14FAE137FC69C2002900E8E133F914C990.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 15:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:42:81:80:00:dd:a7:b4:4a:2a:31:61:b8:f5:73:1b:6a:dd:09:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2481D14FAE137FC69C2002900E8E133F914C990
        Validity
            Not Before: May 15 19:01:03 2026 GMT
            Not After : May 14 19:06:03 2027 GMT
        Subject: CN=53D4CE00A708717704BAB33EB3D9DFB2F32DD1A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:70:96:0a:9c:51:64:fb:1d:d4:aa:88:73:26:
                    ee:d0:84:e1:b5:56:5e:4d:ec:16:ae:22:c6:52:c8:
                    14:d8:51:f9:2f:f6:4d:0b:e2:3b:9f:40:35:e1:43:
                    e3:4c:a7:91:b3:82:41:ae:64:64:50:0d:3e:b9:83:
                    f8:c5:9d:94:49:df:b2:9f:4c:fe:ca:67:39:48:6f:
                    61:53:57:63:70:3a:40:01:20:92:78:d9:37:7e:49:
                    54:5f:a5:19:08:1f:43:c1:17:7d:04:5e:be:bd:fc:
                    69:3e:7b:83:9d:99:03:d6:91:f1:5e:bd:ab:92:4c:
                    0e:a7:cc:a7:0d:ca:60:48:5d:92:43:0c:e1:84:e2:
                    69:5d:a9:b2:c1:4d:d1:46:ec:01:38:21:27:24:cb:
                    8e:91:07:47:f3:9f:ae:33:bf:ee:67:e1:d1:1c:24:
                    db:e3:7e:a1:b8:2b:7c:17:b2:41:12:49:1d:c1:2c:
                    b0:00:36:1c:06:2c:77:fd:34:b3:20:59:27:ad:27:
                    bc:0f:bc:7d:02:fe:2a:d4:8f:f5:39:7b:cd:7f:f4:
                    81:1a:12:68:47:47:fe:08:e8:f1:a0:5c:fc:2b:8a:
                    f4:da:1e:aa:62:04:ac:f7:e4:99:18:37:3d:dd:d5:
                    63:f0:13:1e:e4:6d:b2:82:b0:92:15:68:33:e2:15:
                    5b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D4:CE:00:A7:08:71:77:04:BA:B3:3E:B3:D9:DF:B2:F3:2D:D1:A6
            X509v3 Authority Key Identifier:
                keyid:A2:48:1D:14:FA:E1:37:FC:69:C2:00:29:00:E8:E1:33:F9:14:C9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/A2481D14FAE137FC69C2002900E8E133F914C990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2481D14FAE137FC69C2002900E8E133F914C990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/323830343a363063303a3a2f33322d3438203d3e20323639313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:97:41:67:ff:1a:1e:3d:df:ac:ab:6f:b5:fb:64:42:2b:62:
         00:d9:95:03:11:46:8f:03:22:91:be:d8:9d:3f:9e:d4:e0:eb:
         38:41:0a:2b:7d:2c:74:94:3b:a7:90:54:57:23:b1:1a:d2:eb:
         20:8d:b6:ae:45:02:c3:d4:e5:29:dd:51:a9:9c:66:f3:d8:db:
         65:c3:ed:ec:bf:c2:75:dd:86:1e:f9:d9:88:30:3b:ff:2f:02:
         1f:5b:27:a1:a7:2e:b7:37:8b:ec:0e:03:74:76:5d:71:0b:3b:
         0b:ac:1d:ee:f9:61:21:d0:c4:51:67:d4:9e:83:29:44:50:08:
         0f:60:3a:fe:f1:c6:e2:a7:a6:37:ba:16:29:d0:0c:fe:46:dd:
         36:d7:89:03:e6:f8:ff:2a:13:18:35:5e:2a:70:e3:4c:89:a4:
         02:8f:d0:cf:ae:85:7a:77:52:d1:ce:88:cc:e4:8e:3f:a7:02:
         e0:93:67:22:af:5c:de:9c:b9:8b:1b:80:32:e9:d0:4e:b9:9f:
         02:b8:9d:45:a3:53:cb:e5:4d:b4:d7:d5:56:bf:93:d6:2d:77:
         2f:6d:aa:82:f1:a4:66:bc:ac:cf:5f:17:c4:00:bf:02:d6:dc:
         b4:bf:fe:5a:98:c6:c6:b3:48:59:35:1c:97:13:47:42:f0:fa:
         7b:70:f4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:51:51 2026 by rpki-client