Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/323830343a363630633a3a2f33322d313238203d3e20323639353330.roa
File:                     323830343a363630633a3a2f33322d313238203d3e20323639353330.roa (raw, json)
Hash identifier:          nQCAIRt8DIOvPDDWyMxxwd9TIP2SnuE2jv54DbCYYlM=
Subject key identifier:   92:AD:A6:96:40:55:9C:47:D9:BD:A0:4A:99:F8:08:31:59:2A:95:5E
Certificate issuer:       /CN=D17A867E17AF52B6470057E488A4ACCBD13B57BF
Certificate serial:       15E898033C8815A5018ADDC214919C7D7E67B067
Authority key identifier: D1:7A:86:7E:17:AF:52:B6:47:00:57:E4:88:A4:AC:CB:D1:3B:57:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D17A867E17AF52B6470057E488A4ACCBD13B57BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/323830343a363630633a3a2f33322d313238203d3e20323639353330.roa
Signing time:             Mon 08 Jun 2026 20:41:48 +0000
ROA not before:           Mon 08 Jun 2026 20:36:48 +0000
ROA not after:            Mon 07 Jun 2027 20:41:48 +0000
asID:                     269530
IP address blocks:        2804:660c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/D17A867E17AF52B6470057E488A4ACCBD13B57BF.crl
                          rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/D17A867E17AF52B6470057E488A4ACCBD13B57BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D17A867E17AF52B6470057E488A4ACCBD13B57BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e8:98:03:3c:88:15:a5:01:8a:dd:c2:14:91:9c:7d:7e:67:b0:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D17A867E17AF52B6470057E488A4ACCBD13B57BF
        Validity
            Not Before: Jun  8 20:36:48 2026 GMT
            Not After : Jun  7 20:41:48 2027 GMT
        Subject: CN=92ADA69640559C47D9BDA04A99F80831592A955E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9c:27:6b:e9:2a:e9:67:e2:9b:a3:d6:e0:19:
                    bb:10:00:16:9d:b9:61:f5:e4:be:0e:0f:ae:82:df:
                    64:22:19:43:5a:2b:d1:c8:a8:18:a9:8f:18:9e:9c:
                    3c:21:d1:84:33:cb:88:10:0d:1f:23:ef:3a:5f:89:
                    71:7d:83:58:e5:31:54:2b:4a:d2:56:48:43:a8:31:
                    57:67:0f:f1:db:06:b8:dd:4d:70:a1:8b:67:ec:b6:
                    c6:4c:1e:d3:7c:bd:e4:6c:0c:b7:47:81:2e:51:39:
                    30:d8:cc:aa:5f:84:53:7b:55:5b:f2:99:cd:c9:a8:
                    b1:22:8a:8c:c5:f1:d3:4b:48:4c:1f:19:80:76:5d:
                    4c:93:db:9d:65:33:08:76:31:17:90:ce:c1:ba:4d:
                    a1:44:a5:a6:c3:04:ca:f1:6d:3c:6a:4b:3e:63:db:
                    17:5c:ef:53:6d:5d:de:8b:18:f9:15:bb:2a:55:a6:
                    9f:29:29:b8:e2:45:64:d2:00:39:96:2d:09:fe:98:
                    4e:ef:b6:0c:1e:57:6c:1f:9d:4c:d9:8d:ed:3f:9f:
                    e6:88:5d:59:55:a6:28:76:f3:b9:a4:00:da:73:71:
                    42:d1:64:be:78:3e:4d:26:01:e2:a0:0a:ec:f9:57:
                    27:17:36:e4:2c:ba:d1:18:c4:77:43:9a:7f:b1:72:
                    ff:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:AD:A6:96:40:55:9C:47:D9:BD:A0:4A:99:F8:08:31:59:2A:95:5E
            X509v3 Authority Key Identifier:
                keyid:D1:7A:86:7E:17:AF:52:B6:47:00:57:E4:88:A4:AC:CB:D1:3B:57:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/D17A867E17AF52B6470057E488A4ACCBD13B57BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D17A867E17AF52B6470057E488A4ACCBD13B57BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/323830343a363630633a3a2f33322d313238203d3e20323639353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:660c::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:64:13:e7:68:86:4e:54:c7:c8:5a:c4:00:7e:36:cd:47:0b:
         7d:99:4f:43:d7:65:42:8b:af:66:04:95:93:32:ac:e5:1f:6f:
         ae:8f:e7:f0:6c:48:0e:ad:aa:00:7f:05:14:1d:1c:0e:e6:10:
         75:a7:02:10:91:92:3c:58:30:d3:e8:a5:ef:4c:9a:4a:b8:a1:
         1a:72:65:e6:56:fb:f2:69:d8:fb:61:8c:37:a8:87:ae:c0:be:
         e2:08:41:51:c1:17:76:e7:ea:65:10:2e:7e:61:95:d1:41:16:
         2e:ef:2a:94:64:81:eb:26:7d:89:b2:ef:62:8d:cc:51:bf:e1:
         29:e0:b9:e3:2f:82:af:e8:38:c7:1c:6c:7d:70:90:d1:f5:e1:
         e1:f5:f3:fb:c4:0c:62:96:3e:c6:ff:ca:00:dc:17:ed:d3:93:
         f3:e5:6a:fd:b8:34:5a:2c:98:86:70:5f:19:f7:7c:40:28:be:
         3d:46:b8:50:a3:c2:73:75:9a:bc:9e:ff:6c:67:cb:a6:d9:23:
         9a:21:e7:40:28:f3:65:79:68:25:da:66:34:9c:13:58:80:f1:
         cb:31:32:66:ff:8f:40:1a:34:b2:b5:32:8f:ac:7a:cf:53:68:
         0d:f0:e8:ef:62:31:09:2e:7e:f2:92:8f:94:fe:42:9c:76:bf:
         64:5c:40:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:14:55 2026 by rpki-client