Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a613238303a3a2f34322d3432203d3e20323632363837.roa
File:                     323830343a333835633a613238303a3a2f34322d3432203d3e20323632363837.roa (raw, json)
Hash identifier:          3L8Z0XbhQ43uoIIgmkwZstxT8eYAQwqtftxKKwkpR5s=
Subject key identifier:   3D:E7:4E:F0:53:22:7F:AD:AB:E5:A3:68:15:0D:26:E7:DF:77:34:69
Certificate issuer:       /CN=2ED25129C7D76B8FD6CFF23CC3CF86A794994329
Certificate serial:       4AE380E6384DF9CA18EF5E5D836EBF91B1621B0F
Authority key identifier: 2E:D2:51:29:C7:D7:6B:8F:D6:CF:F2:3C:C3:CF:86:A7:94:99:43:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a613238303a3a2f34322d3432203d3e20323632363837.roa
Signing time:             Tue 09 Jun 2026 12:30:48 +0000
ROA not before:           Tue 09 Jun 2026 12:25:48 +0000
ROA not after:            Tue 08 Jun 2027 12:30:48 +0000
asID:                     262687
IP address blocks:        2804:385c:a280::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 13:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e3:80:e6:38:4d:f9:ca:18:ef:5e:5d:83:6e:bf:91:b1:62:1b:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED25129C7D76B8FD6CFF23CC3CF86A794994329
        Validity
            Not Before: Jun  9 12:25:48 2026 GMT
            Not After : Jun  8 12:30:48 2027 GMT
        Subject: CN=3DE74EF053227FADABE5A368150D26E7DF773469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:44:3d:0b:bb:0f:25:95:d1:b6:bf:e4:c2:34:
                    53:a0:10:9c:56:87:91:76:ea:93:3b:9c:e4:01:b6:
                    f1:09:b0:a2:95:b5:40:d6:70:1b:c9:fa:f6:fd:71:
                    0b:42:66:25:ee:8b:79:ea:7e:9c:21:01:0e:f2:38:
                    4f:5c:70:39:ab:5e:0d:7a:7b:9a:09:42:31:f4:b1:
                    d2:ef:c4:15:73:6d:c7:fb:0d:4c:da:2f:73:bc:1f:
                    db:1e:b4:b6:f6:4b:64:cb:14:49:8f:02:c9:61:27:
                    db:79:8b:9c:7f:fd:1c:38:3d:26:47:87:6c:07:a4:
                    68:e1:bc:be:56:2b:95:8b:56:6a:69:10:40:60:f1:
                    1c:3f:76:4b:d1:8f:69:88:df:22:0b:8e:ce:1a:84:
                    06:2b:42:47:98:a9:84:da:57:59:e1:0d:e2:1d:22:
                    b0:21:fa:f5:6c:d7:ea:3a:d5:99:ca:4a:c1:4b:2b:
                    cb:7e:38:14:f8:b3:58:a9:b7:f6:f7:36:6f:d5:32:
                    40:1d:91:62:1d:fd:ba:e4:0a:11:1d:91:1d:9c:09:
                    12:d9:c2:0f:7b:32:5f:de:c2:39:64:b8:e3:71:23:
                    33:d2:b5:d2:29:55:32:e2:63:35:98:40:62:9f:4d:
                    28:01:7d:24:6a:39:d6:9a:43:a9:b9:3a:44:d3:8a:
                    31:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E7:4E:F0:53:22:7F:AD:AB:E5:A3:68:15:0D:26:E7:DF:77:34:69
            X509v3 Authority Key Identifier:
                keyid:2E:D2:51:29:C7:D7:6B:8F:D6:CF:F2:3C:C3:CF:86:A7:94:99:43:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a613238303a3a2f34322d3432203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c:a280::/42

    Signature Algorithm: sha256WithRSAEncryption
         00:8f:a0:3e:d1:b2:c7:68:74:18:b1:b5:e7:5b:6f:ef:64:66:
         89:ca:f0:c3:ec:60:fd:ee:14:9b:06:82:3b:ea:e0:65:2f:9a:
         03:9f:e2:9e:0a:c0:4e:be:c0:51:c8:28:6e:a7:57:a2:60:2f:
         2e:f3:93:d6:b2:fe:b4:8e:69:f7:5f:ac:bd:52:8f:68:51:45:
         ec:4b:1a:1e:f6:d1:33:60:72:93:41:d8:f8:02:56:53:c0:a1:
         fd:12:28:d6:e5:2a:0c:ba:8d:60:8f:d9:9c:bf:0a:d0:c9:9f:
         2b:50:9c:7a:f8:20:1a:ee:c7:eb:5c:cb:aa:4a:cd:51:53:37:
         a0:35:fa:1b:c8:b5:af:b8:3d:a1:34:6a:48:2a:e5:a9:70:62:
         cd:87:6c:a4:c9:10:e7:b2:1e:73:20:74:cf:df:15:65:15:40:
         80:c6:04:9a:d1:45:16:77:b6:50:8b:50:89:c1:a3:57:92:44:
         37:27:c2:8a:cc:dc:20:95:1f:5b:1b:b6:a3:ce:92:ef:53:13:
         04:df:c0:5e:db:ad:73:26:e2:bb:70:10:70:53:3c:bd:34:1e:
         3e:8f:2c:4b:db:7c:a5:d0:cc:b9:89:3a:9d:7e:db:6e:f8:9a:
         97:2a:be:32:79:e2:db:68:74:a0:ba:5b:76:c4:f8:a1:c9:86:
         96:5d:ce:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:06:42 2026 by rpki-client