Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rW5aBWEKZxELFMengSYb97megU7YLpAkmCdp9rvCrnj/0/323830343a333631383a3a2f33322d3438203d3e20323636333236.roa
File:                     323830343a333631383a3a2f33322d3438203d3e20323636333236.roa (raw, json)
Hash identifier:          ms7LGuBEzb5V6LFSFFvk0uoszr/xySJfcAKXz4rhuJY=
Subject key identifier:   4A:E4:BA:E8:C3:C7:13:F6:C2:50:66:02:FC:3F:38:9E:98:A4:2A:45
Certificate issuer:       /CN=6B93BE1C18542A48D7C4E31D2E73BE2164AF6C79
Certificate serial:       7D73397687A5F791D5F77F9C8591542A983DBB21
Authority key identifier: 6B:93:BE:1C:18:54:2A:48:D7:C4:E3:1D:2E:73:BE:21:64:AF:6C:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B93BE1C18542A48D7C4E31D2E73BE2164AF6C79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rW5aBWEKZxELFMengSYb97megU7YLpAkmCdp9rvCrnj/0/323830343a333631383a3a2f33322d3438203d3e20323636333236.roa
Signing time:             Wed 27 May 2026 20:29:07 +0000
ROA not before:           Wed 27 May 2026 20:24:07 +0000
ROA not after:            Wed 26 May 2027 20:29:07 +0000
asID:                     266326
IP address blocks:        2804:3618::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rW5aBWEKZxELFMengSYb97megU7YLpAkmCdp9rvCrnj/0/6B93BE1C18542A48D7C4E31D2E73BE2164AF6C79.crl
                          rsync://rpki-repo.registro.br/repo/9rW5aBWEKZxELFMengSYb97megU7YLpAkmCdp9rvCrnj/0/6B93BE1C18542A48D7C4E31D2E73BE2164AF6C79.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B93BE1C18542A48D7C4E31D2E73BE2164AF6C79.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 00:42:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:73:39:76:87:a5:f7:91:d5:f7:7f:9c:85:91:54:2a:98:3d:bb:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B93BE1C18542A48D7C4E31D2E73BE2164AF6C79
        Validity
            Not Before: May 27 20:24:07 2026 GMT
            Not After : May 26 20:29:07 2027 GMT
        Subject: CN=4AE4BAE8C3C713F6C2506602FC3F389E98A42A45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e9:fd:22:bd:a2:af:cd:7f:d4:10:d9:15:b4:
                    23:34:18:69:30:9d:0b:df:fd:72:8d:16:dc:81:20:
                    4c:98:43:72:f7:60:a7:94:f6:f1:61:55:c3:02:53:
                    83:17:6f:db:61:fb:36:24:3f:f3:c4:6b:6e:e4:f6:
                    26:cc:a6:b1:c1:d5:b5:b3:86:7f:78:aa:12:59:9c:
                    52:c1:9c:45:08:5c:7a:e1:99:1d:ae:13:68:db:73:
                    42:47:74:43:16:7b:47:4b:2e:b1:25:d1:32:73:1f:
                    7d:f5:24:5d:8d:7a:75:8b:10:ec:32:af:5f:1b:8c:
                    db:93:80:d4:e9:6c:af:36:d2:e6:be:0c:1a:8b:7c:
                    cb:1c:80:61:4b:4a:06:89:79:79:3d:a6:2d:12:7b:
                    3b:b8:2a:6f:e7:e6:d4:43:a0:4f:b0:d1:53:cf:55:
                    24:ab:ea:e6:08:2a:62:ac:35:84:f5:95:99:03:7c:
                    17:d7:4e:d2:f6:55:2f:5e:1d:ff:6f:4e:41:d1:4a:
                    3f:83:a0:6a:3c:8b:77:e3:1d:82:cf:cc:26:26:59:
                    e7:63:d7:07:50:b4:6d:1a:a3:40:5e:d2:29:6e:6a:
                    31:88:26:38:ba:e1:e8:c5:06:98:04:7d:c0:4c:a0:
                    88:98:d8:ad:91:8f:87:1b:21:50:8f:67:ce:48:fa:
                    b2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E4:BA:E8:C3:C7:13:F6:C2:50:66:02:FC:3F:38:9E:98:A4:2A:45
            X509v3 Authority Key Identifier:
                keyid:6B:93:BE:1C:18:54:2A:48:D7:C4:E3:1D:2E:73:BE:21:64:AF:6C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rW5aBWEKZxELFMengSYb97megU7YLpAkmCdp9rvCrnj/0/6B93BE1C18542A48D7C4E31D2E73BE2164AF6C79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B93BE1C18542A48D7C4E31D2E73BE2164AF6C79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rW5aBWEKZxELFMengSYb97megU7YLpAkmCdp9rvCrnj/0/323830343a333631383a3a2f33322d3438203d3e20323636333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3618::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:0a:e2:96:00:b1:5f:0b:3a:31:25:e7:ad:3b:ba:47:a4:62:
         6a:0d:ef:0e:9c:eb:60:a1:d5:d0:ca:47:6a:a3:53:66:8e:df:
         a4:26:d3:79:42:97:7c:29:56:d2:4b:fe:37:7d:9f:0d:c1:7b:
         fa:61:5f:2a:3f:bc:77:87:84:7c:3e:ae:c8:fc:33:52:d7:3c:
         f9:02:0d:c8:94:a7:6d:03:36:98:2c:ed:aa:f4:ee:88:1f:1f:
         38:f2:3d:42:2f:eb:ed:6a:6f:eb:ff:41:52:07:c1:30:a4:d8:
         ab:e0:91:fd:76:1f:77:3f:e2:f2:2d:10:7d:cc:27:fb:5f:e3:
         a0:ef:80:d4:01:3a:3e:09:d0:0d:5d:f5:03:16:02:76:0d:89:
         00:07:26:84:15:38:ec:56:38:5a:5b:5f:8b:fd:ed:eb:74:79:
         ce:7a:ab:56:d8:f8:06:86:b2:ed:a9:a7:78:4b:bf:1d:cc:2c:
         75:21:fe:1d:9f:6e:94:82:e8:a0:9b:ab:ab:fd:a6:39:c9:7b:
         55:2f:1d:28:e2:ca:2e:70:b5:48:f9:3b:2b:c0:e1:19:a4:6a:
         e0:eb:fc:84:89:f4:fd:8b:22:ce:8a:23:76:37:3b:5c:6e:b8:
         c4:a4:a6:6c:ef:74:60:91:f6:28:ee:67:30:29:1b:79:8f:6d:
         c5:02:40:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:51:55 2026 by rpki-client