Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9w665A78SqaJKMADSFRDEYczmLX94qxjLAUNjgPswdeK/0/323830343a343530303a3a2f33322d3335203d3e20323637363636.roa
File:                     323830343a343530303a3a2f33322d3335203d3e20323637363636.roa (raw, json)
Hash identifier:          GkC9hU7RmbAp/UIKnqiCtFCSVV1lJtzqFW9IYMAErBU=
Subject key identifier:   D3:F8:56:D6:49:F6:86:EA:61:1F:37:1A:A0:30:4B:BA:2E:D7:21:3A
Certificate issuer:       /CN=5EA6E53A684BE6ED5DC8EF282338D067320E1881
Certificate serial:       20AEC0EDC50713C9010620DBD0836051D964A115
Authority key identifier: 5E:A6:E5:3A:68:4B:E6:ED:5D:C8:EF:28:23:38:D0:67:32:0E:18:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EA6E53A684BE6ED5DC8EF282338D067320E1881.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9w665A78SqaJKMADSFRDEYczmLX94qxjLAUNjgPswdeK/0/323830343a343530303a3a2f33322d3335203d3e20323637363636.roa
Signing time:             Tue 02 Jun 2026 18:28:01 +0000
ROA not before:           Tue 02 Jun 2026 18:23:01 +0000
ROA not after:            Tue 01 Jun 2027 18:28:01 +0000
asID:                     267666
IP address blocks:        2804:4500::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9w665A78SqaJKMADSFRDEYczmLX94qxjLAUNjgPswdeK/0/5EA6E53A684BE6ED5DC8EF282338D067320E1881.crl
                          rsync://rpki-repo.registro.br/repo/9w665A78SqaJKMADSFRDEYczmLX94qxjLAUNjgPswdeK/0/5EA6E53A684BE6ED5DC8EF282338D067320E1881.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EA6E53A684BE6ED5DC8EF282338D067320E1881.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 06:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ae:c0:ed:c5:07:13:c9:01:06:20:db:d0:83:60:51:d9:64:a1:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EA6E53A684BE6ED5DC8EF282338D067320E1881
        Validity
            Not Before: Jun  2 18:23:01 2026 GMT
            Not After : Jun  1 18:28:01 2027 GMT
        Subject: CN=D3F856D649F686EA611F371AA0304BBA2ED7213A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:a2:46:09:79:9c:4d:8d:c1:8d:aa:f8:9f:31:
                    b2:cb:7f:b3:a2:57:ce:87:8d:30:a1:ac:87:4d:b8:
                    d1:fe:a4:34:02:00:2b:bf:1c:e0:b6:6c:11:85:08:
                    af:58:d3:1b:75:83:12:2f:be:98:19:25:45:c8:6b:
                    d1:b7:7f:b8:00:40:ad:0b:ea:c4:2a:42:56:1b:0a:
                    ee:a4:39:22:10:90:e7:f0:8b:c5:b9:19:4b:0a:50:
                    b4:67:33:68:17:31:e3:6e:10:28:ec:35:76:60:55:
                    41:fc:ac:e8:08:41:4f:b2:69:f9:94:c4:18:c7:99:
                    89:75:0a:ed:71:7a:1e:e2:c5:f5:69:e0:b2:2f:d3:
                    9c:d9:8a:26:96:1c:d8:26:ef:4e:5d:dc:a1:e0:33:
                    33:22:de:bc:27:70:a5:39:41:03:24:b7:69:00:08:
                    eb:34:e9:93:5a:f5:98:57:08:e7:ae:f3:f7:13:ce:
                    bc:9c:95:fe:cf:2e:a7:fe:60:f8:ad:28:c9:f7:97:
                    06:56:a2:56:37:00:af:56:ab:7c:66:3c:7e:b2:e0:
                    a5:a5:4b:5b:1f:cd:22:bb:81:f0:90:2e:8b:01:04:
                    f5:0c:b5:9e:88:98:3c:d3:a1:6c:4c:4b:d0:ae:9f:
                    6a:cb:88:bd:24:c5:3b:1b:b4:72:7d:0b:54:5f:48:
                    73:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F8:56:D6:49:F6:86:EA:61:1F:37:1A:A0:30:4B:BA:2E:D7:21:3A
            X509v3 Authority Key Identifier:
                keyid:5E:A6:E5:3A:68:4B:E6:ED:5D:C8:EF:28:23:38:D0:67:32:0E:18:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9w665A78SqaJKMADSFRDEYczmLX94qxjLAUNjgPswdeK/0/5EA6E53A684BE6ED5DC8EF282338D067320E1881.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EA6E53A684BE6ED5DC8EF282338D067320E1881.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9w665A78SqaJKMADSFRDEYczmLX94qxjLAUNjgPswdeK/0/323830343a343530303a3a2f33322d3335203d3e20323637363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4500::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:17:64:a2:b3:7e:cd:f4:06:ac:b8:b1:1e:b4:d2:bf:ea:14:
         85:42:26:93:2c:7f:1f:d8:49:50:04:3d:73:20:da:64:8a:61:
         09:cb:6d:06:1f:83:6a:73:ac:c3:9c:fd:d9:48:ef:82:c4:e5:
         da:eb:5d:35:90:b3:69:ff:6f:f2:67:44:92:6a:29:34:c2:d5:
         58:fc:03:b1:6c:59:dd:2c:d3:66:d8:9b:2e:60:e7:ba:4d:c2:
         3e:db:cf:5c:69:1a:d9:18:af:51:8e:7f:43:e2:ab:ee:64:4e:
         08:a6:49:df:ab:57:dd:92:f6:3e:47:24:0b:f4:c6:b3:4e:28:
         3f:b6:17:7e:d4:44:e9:28:5d:87:ec:ad:26:06:3b:ca:bf:9f:
         84:7e:f1:a4:a1:7f:b0:d6:3a:a7:9c:b4:b7:95:bd:ae:84:0f:
         e4:e0:0e:2f:af:3e:df:2e:55:d6:77:1b:c5:08:98:9b:eb:1a:
         65:21:48:7d:54:95:f1:f2:82:6d:f7:a4:4c:d9:ca:6a:bc:9c:
         cb:70:80:d9:13:25:2a:3f:dd:74:4c:58:93:d8:fd:9a:6e:ec:
         8a:44:fc:0c:78:11:64:0c:fa:fc:6b:ef:53:de:57:64:db:12:
         e9:f0:1d:14:d4:9f:56:a3:82:e2:36:f2:06:76:81:b9:c5:8c:
         ed:86:dd:05
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUIK7A7cUHE8kBBiDb0INgUdlkoRUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUVBNkU1M0E2ODRCRTZFRDVEQzhFRjI4MjMzOEQwNjcz
MjBFMTg4MTAeFw0yNjA2MDIxODIzMDFaFw0yNzA2MDExODI4MDFaMDMxMTAvBgNV
BAMTKEQzRjg1NkQ2NDlGNjg2RUE2MTFGMzcxQUEwMzA0QkJBMkVENzIxM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3okYJeZxNjcGNqvifMbLLf7Oi
V86HjTChrIdNuNH+pDQCACu/HOC2bBGFCK9Y0xt1gxIvvpgZJUXIa9G3f7gAQK0L
6sQqQlYbCu6kOSIQkOfwi8W5GUsKULRnM2gXMeNuECjsNXZgVUH8rOgIQU+yafmU
xBjHmYl1Cu1xeh7ixfVp4LIv05zZiiaWHNgm705d3KHgMzMi3rwncKU5QQMkt2kA
COs06ZNa9ZhXCOeu8/cTzryclf7PLqf+YPitKMn3lwZWolY3AK9Wq3xmPH6y4KWl
S1sfzSK7gfCQLosBBPUMtZ6ImDzToWxMS9Cun2rLiL0kxTsbtHJ9C1RfSHP5AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU0/hW1kn2huphHzcaoDBLui7XITowHwYDVR0j
BBgwFoAUXqblOmhL5u1dyO8oIzjQZzIOGIEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXc2NjVBNzhTcWFKS01BRFNGUkRFWWN6bUxYOTRxeGpMQVVOamdQc3dk
ZUsvMC81RUE2RTUzQTY4NEJFNkVENURDOEVGMjgyMzM4RDA2NzMyMEUxODgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVFQTZFNTNBNjg0QkU2RUQ1
REM4RUYyODIzMzhEMDY3MzIwRTE4ODEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl3NjY1QTc4U3FhSktNQURTRlJERVljem1MWDk0cXhqTEFVTmpnUHN3ZGVLLzAv
MzIzODMwMzQzYTM0MzUzMDMwM2EzYTJmMzMzMjJkMzMzNTIwM2QzZTIwMzIzNjM3
MzYzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARFADANBgkqhkiG9w0BAQsFAAOCAQEAhhdkorN+
zfQGrLixHrTSv+oUhUImkyx/H9hJUAQ9cyDaZIphCcttBh+DanOsw5z92UjvgsTl
2utdNZCzaf9v8mdEkmopNMLVWPwDsWxZ3SzTZtibLmDnuk3CPtvPXGka2RivUY5/
Q+Kr7mROCKZJ36tX3ZL2PkckC/TGs04oP7YXftRE6Shdh+ytJgY7yr+fhH7xpKF/
sNY6p5y0t5W9roQP5OAOL68+3y5V1ncbxQiYm+saZSFIfVSV8fKCbfekTNnKaryc
y3CA2RMlKj/ddExYk9j9mm7sikT8DHgRZAz6/GvvU95XZNsS6fAdFNSfVqOC4jby
BnaBucWM7YbdBQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:44:13 2026 by rpki-client