Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/323830343a346532383a3a2f33322d3634203d3e20323638323433.roa
File:                     323830343a346532383a3a2f33322d3634203d3e20323638323433.roa (raw, json)
Hash identifier:          8GNua399mCu/S/sp2syeuCnlURsOZFXa8mPv9oRNYmM=
Subject key identifier:   AC:7D:26:56:CF:D8:D2:84:81:04:DF:C5:19:B3:B4:42:A1:15:64:2F
Certificate issuer:       /CN=2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE
Certificate serial:       4AA47FEBBD417F324210CDEF533449579182CB38
Authority key identifier: 2E:0D:8C:A9:FB:9B:93:5A:BD:E6:72:6B:E1:EA:2A:85:70:F4:EF:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/323830343a346532383a3a2f33322d3634203d3e20323638323433.roa
Signing time:             Wed 03 Jun 2026 14:46:32 +0000
ROA not before:           Wed 03 Jun 2026 14:41:32 +0000
ROA not after:            Wed 02 Jun 2027 14:46:32 +0000
asID:                     268243
IP address blocks:        2804:4e28::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.crl
                          rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 00:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a4:7f:eb:bd:41:7f:32:42:10:cd:ef:53:34:49:57:91:82:cb:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE
        Validity
            Not Before: Jun  3 14:41:32 2026 GMT
            Not After : Jun  2 14:46:32 2027 GMT
        Subject: CN=AC7D2656CFD8D2848104DFC519B3B442A115642F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f1:ed:94:72:ca:01:fc:28:2d:85:00:e6:94:
                    85:c8:39:3d:29:e3:b6:68:7a:a8:2c:16:fc:ea:11:
                    b8:93:e2:42:b1:b4:89:5e:6e:67:12:77:17:d1:8e:
                    e1:28:b8:ef:7c:e2:a1:8a:df:8c:5b:1a:d3:b9:68:
                    e8:78:76:a2:df:b6:37:98:1c:66:53:be:fe:ae:f5:
                    e9:01:d7:51:9f:72:ad:56:38:56:a5:7f:58:45:73:
                    48:6d:ea:7f:a7:1d:1d:39:8c:96:fb:0a:65:03:ae:
                    09:da:ac:53:e2:91:40:d9:91:ea:2e:21:d2:da:e4:
                    5a:7c:b0:0d:87:41:9c:d0:cd:2d:2e:7d:f4:41:b4:
                    14:69:40:ce:31:2e:d1:ae:b6:26:1a:14:b7:12:bb:
                    62:1e:e3:38:fa:81:07:05:da:65:ff:a6:ed:85:1b:
                    6a:dd:b6:0a:f2:fb:cd:26:fd:01:fc:fc:66:a6:3b:
                    da:0f:2c:a9:9a:f6:d7:bd:b5:f2:9e:6a:02:32:82:
                    a7:25:c4:4a:79:d3:93:8d:22:39:83:ec:70:c6:fd:
                    91:68:28:35:e3:f5:b1:f2:81:b5:f7:92:4e:34:34:
                    0c:e5:4a:53:18:c8:3b:d8:aa:11:e3:45:28:3d:93:
                    83:6f:21:61:04:fb:0c:48:fb:5a:99:3a:ab:c1:c4:
                    16:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:7D:26:56:CF:D8:D2:84:81:04:DF:C5:19:B3:B4:42:A1:15:64:2F
            X509v3 Authority Key Identifier:
                keyid:2E:0D:8C:A9:FB:9B:93:5A:BD:E6:72:6B:E1:EA:2A:85:70:F4:EF:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/323830343a346532383a3a2f33322d3634203d3e20323638323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e28::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:b2:62:a7:d6:7b:0e:00:d1:81:90:f5:af:bc:d7:f1:41:1e:
         df:b5:94:58:be:53:1c:15:7d:7e:24:8a:7a:33:f0:59:e0:38:
         a8:c3:7c:a9:bf:9b:dd:ca:e1:14:1e:c4:0f:bb:7e:33:77:05:
         28:ec:13:6a:9b:49:e3:44:2e:ec:7d:f0:ba:2c:16:7e:91:0a:
         d6:ff:ef:fe:c4:d9:67:0d:ab:d8:58:ee:ea:10:29:21:b2:04:
         c7:aa:7b:3b:35:50:df:17:fd:fa:fd:ef:b0:73:63:df:a8:c9:
         f2:7e:57:9f:a3:f9:e2:e5:26:2b:24:9f:74:c5:2e:bf:07:f3:
         fe:6a:74:e0:fd:7c:bf:37:bf:0e:2f:de:0f:8d:44:4b:42:89:
         4d:33:98:5f:e0:e3:e3:47:8b:85:ef:a4:86:87:02:66:ea:4b:
         b8:2b:97:c0:06:71:4a:0c:e9:ca:bd:c6:f9:94:65:24:39:fc:
         a3:5d:b3:f0:8d:b8:3f:b1:52:86:36:ea:96:51:d8:10:f1:d1:
         86:be:0d:84:9f:1f:fe:15:ad:1d:df:8a:29:ec:ee:1c:00:0c:
         80:d3:7d:0f:92:8e:bd:b6:97:0a:5a:e0:a3:b7:22:67:89:8f:
         21:af:4d:17:ac:ec:56:91:02:c8:25:9c:ab:48:a2:63:7f:42:
         79:d8:d6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:54:00 2026 by rpki-client