Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUKmo2KA5E7FMZ1jGfXHoARHS8K1FnRBiQQ4j9PJtuzy/0/323830343a393531303a3a2f33322d3434203d3e20323734343936.roa
File:                     323830343a393531303a3a2f33322d3434203d3e20323734343936.roa (raw, json)
Hash identifier:          JykTTBOrghwwBrmSdbiYmb3IYqVD/lk4rMOgbp4oszU=
Subject key identifier:   E7:A0:31:69:0C:20:16:16:70:86:8A:F6:0C:3E:4C:58:9F:A9:73:60
Certificate issuer:       /CN=909C3BC7730E7442AD1CECA961D8613A425EBA1F
Certificate serial:       0EB8A01658473EFAB7A94F6AFE799D2B0390B4BB
Authority key identifier: 90:9C:3B:C7:73:0E:74:42:AD:1C:EC:A9:61:D8:61:3A:42:5E:BA:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909C3BC7730E7442AD1CECA961D8613A425EBA1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUKmo2KA5E7FMZ1jGfXHoARHS8K1FnRBiQQ4j9PJtuzy/0/323830343a393531303a3a2f33322d3434203d3e20323734343936.roa
Signing time:             Mon 25 May 2026 21:34:54 +0000
ROA not before:           Mon 25 May 2026 21:29:54 +0000
ROA not after:            Mon 24 May 2027 21:34:54 +0000
asID:                     274496
IP address blocks:        2804:9510::/32 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUKmo2KA5E7FMZ1jGfXHoARHS8K1FnRBiQQ4j9PJtuzy/0/909C3BC7730E7442AD1CECA961D8613A425EBA1F.crl
                          rsync://rpki-repo.registro.br/repo/EUKmo2KA5E7FMZ1jGfXHoARHS8K1FnRBiQQ4j9PJtuzy/0/909C3BC7730E7442AD1CECA961D8613A425EBA1F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909C3BC7730E7442AD1CECA961D8613A425EBA1F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 10:28:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b8:a0:16:58:47:3e:fa:b7:a9:4f:6a:fe:79:9d:2b:03:90:b4:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909C3BC7730E7442AD1CECA961D8613A425EBA1F
        Validity
            Not Before: May 25 21:29:54 2026 GMT
            Not After : May 24 21:34:54 2027 GMT
        Subject: CN=E7A031690C20161670868AF60C3E4C589FA97360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9d:e1:12:17:1d:2e:c2:96:ca:82:88:37:7c:
                    57:bf:cb:bd:60:4d:ba:ee:3b:1f:a6:18:4c:d3:93:
                    4c:21:70:e6:19:96:e6:7b:f7:51:72:1a:fe:cb:89:
                    41:13:ea:7b:09:eb:2a:70:2a:b5:ce:73:71:91:33:
                    0b:8c:2b:f5:b0:80:7c:50:d5:58:e3:d5:87:3f:8e:
                    13:43:8e:71:61:a1:45:a6:84:9e:41:f8:51:d2:f7:
                    11:7f:80:82:41:7d:50:44:91:3c:cd:b9:41:ec:53:
                    e6:c9:af:83:b1:e3:64:34:ce:cd:9f:23:db:c3:b6:
                    eb:97:5d:0a:f6:c9:69:f7:4e:b3:6e:10:ea:c8:c6:
                    52:15:4c:f1:7f:b1:b2:4f:63:13:2a:24:2f:13:7b:
                    c5:76:1d:9b:51:70:ba:bb:ca:26:04:fa:4e:e5:bd:
                    0d:76:b1:05:d6:e3:ef:11:93:8f:c5:ce:f8:5a:33:
                    fe:2d:cd:a4:c4:89:fc:fa:7f:af:65:60:0f:59:48:
                    ab:d8:3f:ef:b2:d0:8d:a3:63:1b:37:08:b9:b7:e0:
                    c0:9f:fd:f7:3e:42:25:8b:22:4f:1a:80:4e:90:75:
                    71:51:bd:b4:72:0e:a3:b3:ee:59:aa:17:ee:a6:73:
                    42:bc:74:88:7f:e6:37:e0:31:ab:72:96:f3:7e:1d:
                    25:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A0:31:69:0C:20:16:16:70:86:8A:F6:0C:3E:4C:58:9F:A9:73:60
            X509v3 Authority Key Identifier:
                keyid:90:9C:3B:C7:73:0E:74:42:AD:1C:EC:A9:61:D8:61:3A:42:5E:BA:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUKmo2KA5E7FMZ1jGfXHoARHS8K1FnRBiQQ4j9PJtuzy/0/909C3BC7730E7442AD1CECA961D8613A425EBA1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909C3BC7730E7442AD1CECA961D8613A425EBA1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUKmo2KA5E7FMZ1jGfXHoARHS8K1FnRBiQQ4j9PJtuzy/0/323830343a393531303a3a2f33322d3434203d3e20323734343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9510::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:e6:fa:c9:9a:8b:6f:27:39:7e:fb:ca:2e:1b:a5:1e:24:ef:
         44:8b:9f:ba:a2:bd:e8:16:0b:02:76:a9:db:d1:e4:96:02:d3:
         ea:bb:8c:8f:21:13:f4:a1:da:12:59:2f:51:14:2e:f9:39:82:
         4e:64:f1:fe:4a:bb:49:99:72:f2:49:bf:c1:19:03:a0:78:18:
         0f:35:f2:42:cf:80:1e:e5:59:f4:41:ed:c7:b6:62:2b:c5:12:
         97:d6:54:53:a2:85:37:71:4c:ff:31:d8:f7:23:59:23:5b:35:
         5d:8c:9c:3a:87:27:97:7d:12:bc:ac:f1:be:61:c4:9d:ec:f0:
         a6:8e:8c:6b:bd:b5:6c:42:9d:3b:96:0d:03:bf:10:1e:f5:fa:
         7c:22:81:11:b0:3e:5a:fd:ab:a5:94:8c:a6:bb:1a:69:8d:58:
         30:5b:d7:73:b9:73:6e:65:8d:db:bb:29:12:ce:7d:cd:d6:f0:
         dc:26:75:3b:d5:b7:c0:13:6e:d7:fa:64:9a:b9:07:8c:62:93:
         7d:64:0f:52:4c:2b:bc:44:71:2b:f3:7c:fe:b0:31:30:87:86:
         92:13:d1:ee:77:60:df:24:4f:96:31:a6:4b:95:ce:4d:2b:8b:
         5f:26:4f:4f:7f:cf:b2:de:76:c8:73:2a:c6:8e:71:0a:d4:b5:
         32:ab:9e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:00:06 2026 by rpki-client