Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a383030303a3a2f33362d3336203d3e20323632363837.roa
File:                     323830343a333835633a383030303a3a2f33362d3336203d3e20323632363837.roa (raw, json)
Hash identifier:          dgcMymGurNkrPBnX7Hb9A9pfXuQvcWI9GCVKsxt+RXc=
Subject key identifier:   40:B1:C5:ED:DB:C2:20:79:AC:68:E5:1C:85:C3:FA:34:6C:34:C7:7A
Certificate issuer:       /CN=2ED25129C7D76B8FD6CFF23CC3CF86A794994329
Certificate serial:       452E92C317A47E0435900D404E4E87D00B63DAAD
Authority key identifier: 2E:D2:51:29:C7:D7:6B:8F:D6:CF:F2:3C:C3:CF:86:A7:94:99:43:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a383030303a3a2f33362d3336203d3e20323632363837.roa
Signing time:             Tue 09 Jun 2026 12:30:46 +0000
ROA not before:           Tue 09 Jun 2026 12:25:46 +0000
ROA not after:            Tue 08 Jun 2027 12:30:46 +0000
asID:                     262687
IP address blocks:        2804:385c:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 13:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:2e:92:c3:17:a4:7e:04:35:90:0d:40:4e:4e:87:d0:0b:63:da:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED25129C7D76B8FD6CFF23CC3CF86A794994329
        Validity
            Not Before: Jun  9 12:25:46 2026 GMT
            Not After : Jun  8 12:30:46 2027 GMT
        Subject: CN=40B1C5EDDBC22079AC68E51C85C3FA346C34C77A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:89:38:f8:77:c2:35:cc:4a:8b:cf:23:c0:5f:
                    4a:3b:8f:a7:86:9e:0f:da:c5:6b:51:d6:50:df:25:
                    38:78:6a:8d:38:e4:d4:6f:f7:47:35:df:d1:ff:40:
                    24:bd:cf:e8:fa:bf:e8:e0:ab:63:8c:54:5a:13:22:
                    47:ad:64:cc:85:19:00:60:a0:b2:40:3e:54:c5:b6:
                    22:55:98:81:29:b7:a7:50:39:c7:29:71:72:d8:01:
                    44:39:e4:4d:ac:0d:8e:69:41:a5:f9:67:f9:8a:3c:
                    cb:66:a4:5d:83:1c:e5:fd:90:f5:7e:f8:9b:51:b5:
                    26:a1:11:ae:5f:61:42:f8:76:24:18:3f:89:e6:f6:
                    92:79:26:ed:df:55:86:a0:ac:90:20:e3:4a:16:0b:
                    92:d1:b3:e1:1d:c5:bb:c5:92:79:0f:6b:2f:c2:8d:
                    ba:33:93:7b:b8:14:fe:c6:df:26:a2:59:28:f8:4b:
                    5c:42:b4:a0:40:a4:7f:7b:21:33:2c:b4:47:23:93:
                    63:35:82:0e:21:ac:8c:e8:5c:74:ae:1b:a4:98:cb:
                    9b:b6:26:d2:21:bc:0e:ef:61:e3:ab:f0:24:10:2e:
                    10:3c:93:00:3f:f9:e0:7e:a9:c8:d6:cf:56:9c:79:
                    f3:03:40:cd:3e:1d:7f:95:f7:07:ff:56:ec:ab:53:
                    25:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B1:C5:ED:DB:C2:20:79:AC:68:E5:1C:85:C3:FA:34:6C:34:C7:7A
            X509v3 Authority Key Identifier:
                keyid:2E:D2:51:29:C7:D7:6B:8F:D6:CF:F2:3C:C3:CF:86:A7:94:99:43:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a383030303a3a2f33362d3336203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         64:15:36:d2:84:a8:be:96:f9:65:17:e3:a3:53:a7:3e:3a:ba:
         47:d6:3e:99:49:9d:88:fb:b5:47:f2:ef:57:5d:3e:81:84:b9:
         cc:48:b9:cc:17:5e:87:4c:a0:23:97:2b:7b:04:09:54:14:b5:
         fc:c3:b7:8a:e1:f4:73:6e:35:65:24:d2:c8:d0:25:99:24:5e:
         18:a4:a5:93:c4:c9:91:e9:e2:1d:3a:08:58:13:72:a5:57:f3:
         a6:d3:c3:b7:a5:7a:da:10:93:d9:48:ce:d2:d7:f5:c9:dd:11:
         c8:3c:3f:d2:24:71:45:e3:cf:b1:c6:22:a6:7c:9c:8e:d3:b4:
         5a:e9:4d:66:dd:4e:b0:50:d1:c6:2a:86:c1:34:af:ab:e0:8b:
         ee:37:44:6c:4e:d9:be:be:5a:3a:01:62:c1:5b:bd:29:4e:84:
         52:b9:02:41:ad:e1:6e:0f:2e:e0:5c:c2:5d:80:ec:9c:01:42:
         5f:d3:d6:07:ec:48:d4:b4:26:89:81:cf:57:2b:c3:71:5b:df:
         86:99:a3:3b:19:85:a9:9d:8d:56:c7:22:f1:73:01:96:3e:0b:
         4c:bd:6f:c6:96:55:46:a4:ec:dd:ef:29:92:08:a0:16:76:77:
         a8:05:4f:5e:c3:ef:1d:75:1d:eb:51:72:9d:b7:94:17:db:58:
         00:fd:08:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:06:43 2026 by rpki-client