Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/323830343a346362343a323030303a3a2f33362d3336203d3e20323637333836.roa
File:                     323830343a346362343a323030303a3a2f33362d3336203d3e20323637333836.roa (raw, json)
Hash identifier:          zgbDZ1LxVu+W5E7aBgn6gPlywDatHFuU2ZQYNRoOySc=
Subject key identifier:   46:E7:FF:C1:7E:82:E1:05:7C:C5:BC:02:06:83:9D:26:13:28:A1:00
Certificate issuer:       /CN=272EE1B25800F489DD72CC554F5C22037BDA8291
Certificate serial:       6671C39086CFF32A4A2F3225E143014C03450226
Authority key identifier: 27:2E:E1:B2:58:00:F4:89:DD:72:CC:55:4F:5C:22:03:7B:DA:82:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272EE1B25800F489DD72CC554F5C22037BDA8291.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/323830343a346362343a323030303a3a2f33362d3336203d3e20323637333836.roa
Signing time:             Thu 04 Jun 2026 12:58:46 +0000
ROA not before:           Thu 04 Jun 2026 12:53:46 +0000
ROA not after:            Thu 03 Jun 2027 12:58:46 +0000
asID:                     267386
IP address blocks:        2804:4cb4:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/272EE1B25800F489DD72CC554F5C22037BDA8291.crl
                          rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/272EE1B25800F489DD72CC554F5C22037BDA8291.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272EE1B25800F489DD72CC554F5C22037BDA8291.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 10:19:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:71:c3:90:86:cf:f3:2a:4a:2f:32:25:e1:43:01:4c:03:45:02:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=272EE1B25800F489DD72CC554F5C22037BDA8291
        Validity
            Not Before: Jun  4 12:53:46 2026 GMT
            Not After : Jun  3 12:58:46 2027 GMT
        Subject: CN=46E7FFC17E82E1057CC5BC0206839D261328A100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0d:82:bb:6a:38:07:d2:83:27:d5:43:aa:c3:
                    28:52:57:0c:40:5d:c9:e5:1e:93:47:9f:3e:07:b9:
                    cb:c7:29:27:31:db:4d:49:33:53:37:10:46:2a:f7:
                    79:f2:f9:98:ca:0a:59:d1:2c:52:cb:90:30:43:fd:
                    39:6d:0c:91:ff:3f:41:32:0b:87:b7:63:ac:78:51:
                    65:1f:b9:59:63:f0:ca:63:d4:99:bf:e7:dd:e4:9b:
                    a8:30:59:a3:02:89:24:55:aa:39:18:c6:5b:82:74:
                    39:7b:1b:f0:71:a9:86:38:4c:8f:99:0a:15:35:81:
                    2a:aa:a3:e0:05:f8:a5:c3:b0:37:6f:94:83:11:cf:
                    6b:3f:fc:ad:1c:18:d0:e4:61:e2:3b:1f:2a:8d:8a:
                    2a:94:b8:02:b0:c0:8e:d8:ff:2d:07:8b:64:06:7d:
                    11:22:46:5b:26:1d:92:4f:b6:60:97:1b:b9:57:73:
                    41:22:6f:4e:12:8d:61:6b:20:26:c8:54:71:44:34:
                    85:5d:64:69:2e:bf:4d:e7:77:d6:65:04:ab:38:c5:
                    63:c3:a6:86:0e:2c:77:7e:c5:89:d5:80:95:f6:9e:
                    47:fb:26:f3:21:dc:1f:b9:ab:b9:7c:63:d6:70:69:
                    7a:d9:0a:18:4f:df:f4:29:60:ed:7b:f0:9f:47:b1:
                    36:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E7:FF:C1:7E:82:E1:05:7C:C5:BC:02:06:83:9D:26:13:28:A1:00
            X509v3 Authority Key Identifier:
                keyid:27:2E:E1:B2:58:00:F4:89:DD:72:CC:55:4F:5C:22:03:7B:DA:82:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/272EE1B25800F489DD72CC554F5C22037BDA8291.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272EE1B25800F489DD72CC554F5C22037BDA8291.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/323830343a346362343a323030303a3a2f33362d3336203d3e20323637333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cb4:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         66:67:b1:4b:90:6f:88:34:f7:ea:15:21:af:d9:d9:14:5a:92:
         b4:17:f7:85:63:60:7d:e2:dc:ea:15:b5:bf:c8:e9:56:c6:d3:
         0d:64:a5:87:38:a1:94:ba:e0:80:41:0a:22:2e:ad:9f:f2:80:
         fb:57:45:f4:56:90:f7:1e:d7:4a:b8:47:c7:15:2d:3e:bb:22:
         cc:de:76:cf:34:18:0f:59:4c:1c:c4:ff:12:c7:03:19:a5:a5:
         ac:64:54:e9:cf:47:73:0d:61:99:1f:39:5a:2a:b0:aa:dc:0f:
         fb:94:89:9d:74:a3:78:5d:28:dc:83:57:88:af:e1:4c:2e:5d:
         e8:55:fc:fc:d2:65:a1:f0:a3:dc:2c:4d:8a:ff:f4:73:95:73:
         42:19:12:c1:6d:38:56:3e:9d:8b:b2:17:ce:fd:fe:34:c7:5c:
         47:34:ff:6d:d3:f2:d1:42:ff:5a:32:60:68:11:46:5b:9a:7a:
         f1:d7:12:c0:5d:e6:a4:4a:6e:69:a1:98:c1:8d:0e:a7:cc:6c:
         f1:15:28:59:44:dc:58:51:39:f2:72:30:d0:11:55:71:79:bd:
         c0:03:86:04:e4:2d:a4:c9:60:40:4f:e1:90:6a:5a:c5:8e:10:
         0d:60:c6:52:fc:c1:15:dc:9f:df:4b:20:ec:22:0c:40:e2:ae:
         c1:5b:af:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:14:31 2026 by rpki-client