Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a313030303a3a2f34322d3432203d3e20323733373034.roa
File:                     323830343a386166383a313030303a3a2f34322d3432203d3e20323733373034.roa (raw, json)
Hash identifier:          8nKp6Xt/dfo9RCQ2S/r2yqeGmr3+Tc/oMh77dST5v/o=
Subject key identifier:   4B:E7:84:37:CE:39:F3:6B:FD:41:22:6D:95:0B:C7:29:33:1D:4F:5D
Certificate issuer:       /CN=21A1F812DC436FBAF80C04C11B4C6AA40A35A84F
Certificate serial:       60840E95E856B3D7B0CB8FEF19ECF34586C7DBA9
Authority key identifier: 21:A1:F8:12:DC:43:6F:BA:F8:0C:04:C1:1B:4C:6A:A4:0A:35:A8:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21A1F812DC436FBAF80C04C11B4C6AA40A35A84F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a313030303a3a2f34322d3432203d3e20323733373034.roa
Signing time:             Fri 12 Jun 2026 16:38:47 +0000
ROA not before:           Fri 12 Jun 2026 16:33:47 +0000
ROA not after:            Fri 11 Jun 2027 16:38:47 +0000
asID:                     273704
IP address blocks:        2804:8af8:1000::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/21A1F812DC436FBAF80C04C11B4C6AA40A35A84F.crl
                          rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/21A1F812DC436FBAF80C04C11B4C6AA40A35A84F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21A1F812DC436FBAF80C04C11B4C6AA40A35A84F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 06:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:84:0e:95:e8:56:b3:d7:b0:cb:8f:ef:19:ec:f3:45:86:c7:db:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A1F812DC436FBAF80C04C11B4C6AA40A35A84F
        Validity
            Not Before: Jun 12 16:33:47 2026 GMT
            Not After : Jun 11 16:38:47 2027 GMT
        Subject: CN=4BE78437CE39F36BFD41226D950BC729331D4F5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:37:9f:41:03:2e:9e:33:f6:c0:04:f6:10:52:
                    d7:e7:03:18:28:a1:23:25:d0:9c:97:e5:b3:70:21:
                    33:9b:57:a3:6a:53:df:8d:42:4f:de:fe:7e:c1:b7:
                    24:a3:e3:11:8c:df:31:fd:f6:7b:41:25:b4:25:66:
                    bc:1d:38:bb:2d:fa:8b:10:54:6e:f7:b2:ce:97:1c:
                    02:5d:d5:c9:6a:50:2b:aa:d2:36:aa:e1:30:9e:a0:
                    23:4e:d0:18:3f:49:e5:fd:23:f2:50:7a:f8:2c:a4:
                    ea:d0:51:db:62:7e:92:aa:36:90:99:fd:78:48:b4:
                    d2:3d:8d:1f:09:50:e7:4c:7e:9b:75:6c:85:08:60:
                    b0:d0:60:53:f6:a9:e4:34:10:84:8d:ab:b5:83:ed:
                    60:8c:35:f8:ec:b2:a7:da:70:92:bf:f4:f4:f9:b7:
                    ba:69:78:35:04:40:c9:b5:eb:b4:f1:10:bf:8c:f5:
                    28:95:af:5a:ac:c5:52:5c:23:fa:8b:b1:03:4b:13:
                    6d:59:23:61:42:5b:f8:65:7c:ca:2f:54:76:b7:a5:
                    02:a1:fb:57:6c:01:03:ee:23:ee:15:71:bd:4d:4b:
                    c4:af:02:72:7d:13:7a:45:1e:d3:7c:1e:e5:e5:78:
                    73:dc:6f:66:13:d3:28:fe:d0:9e:80:56:02:a9:a2:
                    83:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E7:84:37:CE:39:F3:6B:FD:41:22:6D:95:0B:C7:29:33:1D:4F:5D
            X509v3 Authority Key Identifier:
                keyid:21:A1:F8:12:DC:43:6F:BA:F8:0C:04:C1:1B:4C:6A:A4:0A:35:A8:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/21A1F812DC436FBAF80C04C11B4C6AA40A35A84F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21A1F812DC436FBAF80C04C11B4C6AA40A35A84F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a313030303a3a2f34322d3432203d3e20323733373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8af8:1000::/42

    Signature Algorithm: sha256WithRSAEncryption
         08:ea:86:d4:5e:fc:24:58:f7:cc:5e:3e:ad:c5:85:37:7c:db:
         c6:37:e5:68:6c:24:74:ab:8a:06:e6:5a:4c:47:3b:8c:b7:10:
         0d:91:e4:0f:05:51:1f:e1:5b:b8:e4:52:77:d6:41:d4:bf:08:
         9e:27:36:01:75:d4:69:9b:a7:4a:9c:cf:8d:e8:e8:4c:4a:19:
         58:be:17:8c:44:f8:c1:11:00:db:99:6f:41:cf:25:b5:05:fb:
         4e:96:31:0e:ff:64:da:17:db:27:c8:6d:0c:a6:07:5a:ac:92:
         78:5a:f9:fd:97:a5:3d:d4:7b:1e:25:a2:24:fa:24:bd:b0:31:
         0a:7a:00:9d:03:13:f4:9d:97:1e:c6:2b:0a:fd:0a:d4:17:b1:
         4f:bc:90:54:cc:87:95:98:14:c4:bc:98:38:b8:16:b0:db:36:
         df:da:e7:ed:a2:e2:ea:58:3a:c2:9d:97:84:f1:0e:75:47:45:
         b5:95:18:ff:b2:8f:64:47:f9:93:85:58:e8:5d:d5:e4:dc:31:
         db:27:1e:a9:36:3e:e5:74:ff:cc:dd:9e:f1:a9:26:f2:9a:f0:
         c6:d7:5a:f8:d5:51:16:fa:e0:f7:d1:b4:06:e5:f6:d3:ec:27:
         cf:51:2d:66:db:38:e2:86:9a:92:ce:37:d5:1f:ac:84:7a:86:
         9b:30:2a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:08:49 2026 by rpki-client