Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a666630303a3a2f34302d3430203d3e20323632363837.roa
File:                     323830343a333835633a666630303a3a2f34302d3430203d3e20323632363837.roa (raw, json)
Hash identifier:          uzVjXUUCjPi9S5Oi4qaZj5Gio9AjMuvKLsuXiqZRjag=
Subject key identifier:   7A:A8:32:42:E5:A3:44:D1:3F:16:51:90:FC:BA:23:F4:4E:D0:95:9E
Certificate issuer:       /CN=2ED25129C7D76B8FD6CFF23CC3CF86A794994329
Certificate serial:       637C72DEE2B8897B03631CCC0D2227D9DC3CF09D
Authority key identifier: 2E:D2:51:29:C7:D7:6B:8F:D6:CF:F2:3C:C3:CF:86:A7:94:99:43:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a666630303a3a2f34302d3430203d3e20323632363837.roa
Signing time:             Tue 09 Jun 2026 12:30:46 +0000
ROA not before:           Tue 09 Jun 2026 12:25:46 +0000
ROA not after:            Tue 08 Jun 2027 12:30:46 +0000
asID:                     262687
IP address blocks:        2804:385c:ff00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 13:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:7c:72:de:e2:b8:89:7b:03:63:1c:cc:0d:22:27:d9:dc:3c:f0:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED25129C7D76B8FD6CFF23CC3CF86A794994329
        Validity
            Not Before: Jun  9 12:25:46 2026 GMT
            Not After : Jun  8 12:30:46 2027 GMT
        Subject: CN=7AA83242E5A344D13F165190FCBA23F44ED0959E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:26:5b:b2:87:37:00:54:9f:f9:5d:bb:14:73:
                    06:3f:b1:10:63:e6:63:f6:5f:c2:6c:5a:a4:a0:1c:
                    09:74:cf:08:04:e0:c5:34:3a:34:82:69:2b:7c:ca:
                    bf:76:9c:ab:66:27:91:44:77:dc:6d:86:74:f9:41:
                    3e:bd:17:34:55:d2:22:a1:d7:2e:63:65:09:34:f4:
                    bd:32:f6:f4:aa:af:5e:84:d1:f8:20:7c:6b:25:5d:
                    a3:70:21:f7:63:92:66:de:fb:45:87:85:e7:85:57:
                    e3:a0:7d:fa:fb:3b:a4:f8:8c:b0:50:e4:ac:1e:cc:
                    92:74:44:89:a7:93:6b:7e:09:63:5c:70:1e:b4:ea:
                    5c:2f:0e:24:c3:a5:14:9c:5e:22:4b:7b:db:de:d0:
                    05:30:2f:71:d5:dd:38:8a:58:af:f9:cb:24:10:d5:
                    79:5d:e6:41:87:2e:26:d6:5d:9c:6d:74:df:36:ea:
                    51:a3:27:03:31:83:96:da:c8:3b:fc:ef:4b:f2:ee:
                    ac:64:39:3f:ab:2c:15:19:d6:47:dc:bc:95:62:e3:
                    52:64:eb:77:5b:e9:bd:3b:02:1a:10:d4:1c:e9:c5:
                    01:ad:0c:67:e9:37:21:a8:c5:e1:d7:50:df:71:17:
                    87:30:f2:71:ec:0c:5c:3c:2b:6b:5a:d4:81:9a:69:
                    03:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A8:32:42:E5:A3:44:D1:3F:16:51:90:FC:BA:23:F4:4E:D0:95:9E
            X509v3 Authority Key Identifier:
                keyid:2E:D2:51:29:C7:D7:6B:8F:D6:CF:F2:3C:C3:CF:86:A7:94:99:43:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a666630303a3a2f34302d3430203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         08:18:f7:44:0c:fd:90:28:9b:56:32:2a:5e:36:2e:a9:42:c6:
         a8:c6:a6:66:ca:e7:05:d7:00:d5:6a:a4:b6:9b:64:0b:39:85:
         71:c3:6f:8d:95:05:3c:5c:ef:d7:0a:a8:29:df:79:9f:79:20:
         2e:e4:8c:9f:e8:fa:53:52:11:2f:39:9c:71:b8:36:a5:3a:e2:
         a7:3c:5c:97:88:4c:52:8f:d0:d2:ec:62:ce:b6:98:1c:4f:27:
         c7:2b:26:52:37:99:dc:51:fb:a7:14:8d:c8:a9:ef:79:45:fa:
         bb:86:1d:ec:81:9e:21:8b:85:0d:0e:d7:38:f3:8a:90:bb:c4:
         19:4d:76:16:5d:47:0f:e7:7f:1e:50:83:ff:47:68:d0:57:9a:
         2b:c0:ac:7b:f6:55:63:8e:b4:4b:b7:0e:3a:70:4b:e7:ad:e6:
         c9:9c:49:03:ce:de:53:5f:7d:5b:b1:be:0a:af:bc:55:80:f0:
         05:ae:ae:93:52:7d:46:f6:d7:8a:62:28:c9:aa:6c:66:50:f2:
         d4:fd:5f:81:51:f0:85:cd:17:53:d0:ec:8e:ac:c9:ca:a5:08:
         c2:41:d3:25:13:27:12:40:7a:b1:d8:7e:8b:54:9e:cc:e8:4e:
         8f:0a:5a:f1:28:2b:78:a8:31:9c:0b:27:a8:e2:2c:19:92:43:
         70:85:9a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:06:42 2026 by rpki-client