Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B3HrPFEnYBwBvTAyQpfXzk6mz25mXLVsJLZ3AdFFRJZS/0/323830343a393862303a3330303a3a2f34302d3430203d3e20323735373330.roa
File:                     323830343a393862303a3330303a3a2f34302d3430203d3e20323735373330.roa (raw, json)
Hash identifier:          CNJ1A9iI20NXJtyvBJtaW+x+KY0+jFLuWpcdkp8xVAM=
Subject key identifier:   26:EF:59:6E:0B:CE:01:65:F9:FB:AF:E6:AD:2A:02:4C:E0:F0:A9:FF
Certificate issuer:       /CN=4C0DA6C0727D350B5C7553F51479AB514AFAE91E
Certificate serial:       3A65AC7FFB55634BF08A44EBF91C270BEAEC1DA1
Authority key identifier: 4C:0D:A6:C0:72:7D:35:0B:5C:75:53:F5:14:79:AB:51:4A:FA:E9:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0DA6C0727D350B5C7553F51479AB514AFAE91E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B3HrPFEnYBwBvTAyQpfXzk6mz25mXLVsJLZ3AdFFRJZS/0/323830343a393862303a3330303a3a2f34302d3430203d3e20323735373330.roa
Signing time:             Tue 02 Jun 2026 17:19:00 +0000
ROA not before:           Tue 02 Jun 2026 17:14:00 +0000
ROA not after:            Tue 01 Jun 2027 17:19:00 +0000
asID:                     275730
IP address blocks:        2804:98b0:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B3HrPFEnYBwBvTAyQpfXzk6mz25mXLVsJLZ3AdFFRJZS/0/4C0DA6C0727D350B5C7553F51479AB514AFAE91E.crl
                          rsync://rpki-repo.registro.br/repo/B3HrPFEnYBwBvTAyQpfXzk6mz25mXLVsJLZ3AdFFRJZS/0/4C0DA6C0727D350B5C7553F51479AB514AFAE91E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0DA6C0727D350B5C7553F51479AB514AFAE91E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 21:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:65:ac:7f:fb:55:63:4b:f0:8a:44:eb:f9:1c:27:0b:ea:ec:1d:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C0DA6C0727D350B5C7553F51479AB514AFAE91E
        Validity
            Not Before: Jun  2 17:14:00 2026 GMT
            Not After : Jun  1 17:19:00 2027 GMT
        Subject: CN=26EF596E0BCE0165F9FBAFE6AD2A024CE0F0A9FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fe:ae:92:1a:5f:2c:96:40:1a:73:e9:66:3e:
                    ca:14:f4:3e:60:68:f3:ac:62:b0:b3:48:85:12:1f:
                    a3:9c:12:29:9d:e6:c1:a3:f3:4a:1d:a1:fd:7b:d8:
                    07:63:f6:a0:54:25:c8:0f:36:28:6c:35:73:17:7f:
                    ea:08:bd:3e:eb:84:fc:ba:02:3b:08:09:25:92:0a:
                    0c:76:b8:9c:41:0f:c8:3b:c5:ac:73:09:63:a0:c5:
                    ef:2b:b0:38:fa:fd:a3:8f:c5:f8:9c:cb:44:5f:af:
                    2e:73:6d:5a:44:04:95:4a:ba:1a:c1:8f:c9:08:44:
                    5e:6f:33:74:bf:d4:98:15:86:47:64:83:b9:93:bd:
                    87:b4:f0:f0:7d:ca:08:de:82:0d:ef:93:1d:a9:59:
                    4b:44:33:ff:9d:3f:84:6a:5b:a5:b5:0a:8e:70:16:
                    24:6a:f6:cf:2c:0b:94:44:c3:80:08:a3:97:72:93:
                    86:41:b7:a5:c9:1c:82:a1:a1:55:7e:ea:b1:3d:8f:
                    64:4f:c1:0f:4e:0e:c5:0b:8b:a8:3b:22:6a:a4:c5:
                    d7:88:32:96:23:f1:b1:8f:d9:d7:0f:5a:51:bf:ea:
                    eb:0f:d4:ab:dc:da:21:9f:01:9a:3d:75:c8:f1:db:
                    33:8a:96:1e:b3:a3:f3:17:ce:29:48:46:36:28:d3:
                    ed:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:EF:59:6E:0B:CE:01:65:F9:FB:AF:E6:AD:2A:02:4C:E0:F0:A9:FF
            X509v3 Authority Key Identifier:
                keyid:4C:0D:A6:C0:72:7D:35:0B:5C:75:53:F5:14:79:AB:51:4A:FA:E9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B3HrPFEnYBwBvTAyQpfXzk6mz25mXLVsJLZ3AdFFRJZS/0/4C0DA6C0727D350B5C7553F51479AB514AFAE91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0DA6C0727D350B5C7553F51479AB514AFAE91E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B3HrPFEnYBwBvTAyQpfXzk6mz25mXLVsJLZ3AdFFRJZS/0/323830343a393862303a3330303a3a2f34302d3430203d3e20323735373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:98b0:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         47:9f:b7:da:e9:d0:f8:1a:ad:77:35:20:b7:77:64:a2:0c:55:
         13:f0:74:34:83:62:ee:ab:f0:82:4b:0b:d8:a7:de:d1:b6:d0:
         d7:84:3f:4b:21:3f:0c:d1:00:54:06:13:84:b0:6d:8c:e5:08:
         9f:b1:bb:96:5b:fa:52:12:49:88:2e:fe:a1:43:7e:bb:88:e0:
         ba:20:13:75:31:bb:91:73:2c:d5:d5:24:33:43:e5:8f:7e:98:
         25:68:03:03:6d:15:1a:b7:d1:16:bf:96:8c:c8:b8:38:15:a1:
         8e:ef:e0:39:82:63:43:bd:fc:98:7a:61:eb:f5:40:ce:6b:3a:
         80:ed:5c:af:26:6b:30:e0:35:8a:d9:0b:f6:ce:7f:ff:4c:ed:
         77:fc:8d:1f:11:2a:67:d7:94:6d:e0:2a:79:d9:44:48:66:d3:
         c1:61:1f:0d:41:f3:c0:24:a5:32:2d:17:56:72:79:e5:0b:54:
         01:4c:42:bf:60:39:ba:21:e0:26:01:34:98:93:8e:38:3d:90:
         62:bd:00:d4:8e:3b:1e:94:46:c9:f1:80:b7:91:6b:cd:26:b3:
         a3:f4:1a:87:2c:e8:70:06:e6:2e:2b:6b:17:11:9e:a7:88:ff:
         5e:26:8f:79:d2:20:3b:ee:3f:81:6a:76:25:7d:5f:0d:11:5d:
         52:34:6e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:43:50 2026 by rpki-client