Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a343030303a3a2f33342d3334203d3e20323730353434.roa
File:                     323830343a366439633a343030303a3a2f33342d3334203d3e20323730353434.roa (raw, json)
Hash identifier:          h/pRTKDR0nJ/tBTb5Nsf38Wv5soYMEe0r2y+Pgb61CQ=
Subject key identifier:   54:EF:D2:BF:03:2E:BE:47:3D:84:8F:5A:24:CC:F0:11:E8:56:11:8B
Certificate issuer:       /CN=5DD5FC84B74FD9F8D75C2840737B942D7C5DF659
Certificate serial:       5344777B2EA6F71B063C24F3FDBAA3C22BDF4DA8
Authority key identifier: 5D:D5:FC:84:B7:4F:D9:F8:D7:5C:28:40:73:7B:94:2D:7C:5D:F6:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a343030303a3a2f33342d3334203d3e20323730353434.roa
Signing time:             Wed 10 Jun 2026 02:00:25 +0000
ROA not before:           Wed 10 Jun 2026 01:55:25 +0000
ROA not after:            Wed 09 Jun 2027 02:00:25 +0000
asID:                     270544
IP address blocks:        2804:6d9c:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.crl
                          rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 21:45:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:44:77:7b:2e:a6:f7:1b:06:3c:24:f3:fd:ba:a3:c2:2b:df:4d:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DD5FC84B74FD9F8D75C2840737B942D7C5DF659
        Validity
            Not Before: Jun 10 01:55:25 2026 GMT
            Not After : Jun  9 02:00:25 2027 GMT
        Subject: CN=54EFD2BF032EBE473D848F5A24CCF011E856118B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6b:0e:a1:a1:78:15:e1:b1:5c:35:32:c6:84:
                    02:72:dd:33:dd:c4:67:6c:12:3e:f5:da:fe:01:b8:
                    bc:2f:24:fd:4e:95:a7:63:93:69:e8:e5:5f:a2:e4:
                    eb:61:3c:9d:61:74:9e:72:d7:2d:2b:9c:08:8b:75:
                    99:3a:b8:a8:92:90:de:c6:fe:fa:6e:f0:07:95:13:
                    e1:aa:18:48:8a:3f:41:e8:bf:ef:c3:d2:a9:2d:c5:
                    72:ad:58:25:86:1b:9f:45:93:6d:c2:96:12:66:ff:
                    e5:d6:a3:2b:26:7b:39:a4:1d:72:36:ce:fa:d6:95:
                    87:d5:ea:52:22:bc:32:85:fb:00:51:6b:ee:a7:a9:
                    f5:65:89:e8:aa:19:59:e9:e6:c6:3f:da:9d:33:11:
                    1a:19:c3:30:c6:b1:f2:c4:4f:41:7d:59:c0:7b:40:
                    7a:08:e2:b2:42:38:96:6c:bd:f6:ee:66:c0:4d:10:
                    1b:97:02:94:8a:85:8a:b6:2b:2f:f2:cf:3f:41:b5:
                    9c:b1:3f:23:19:77:b0:4a:d4:ad:e8:3a:00:db:fa:
                    6c:5f:53:68:31:4a:ab:30:de:9c:c3:c0:a8:50:2b:
                    80:60:ab:71:8c:ac:a7:78:2b:0b:b2:d8:2b:94:d1:
                    71:42:62:23:63:c1:39:26:4a:94:b0:ee:6e:3e:26:
                    3b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:EF:D2:BF:03:2E:BE:47:3D:84:8F:5A:24:CC:F0:11:E8:56:11:8B
            X509v3 Authority Key Identifier:
                keyid:5D:D5:FC:84:B7:4F:D9:F8:D7:5C:28:40:73:7B:94:2D:7C:5D:F6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a343030303a3a2f33342d3334203d3e20323730353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d9c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         38:63:0e:28:92:2a:81:14:df:01:78:03:74:9b:62:da:52:a1:
         5f:fd:a2:b8:5e:a8:0b:05:e3:f2:71:7f:a5:5b:0f:62:db:e5:
         3a:48:02:e4:e5:c8:89:f8:73:2f:10:91:35:2f:19:3d:d7:96:
         b9:0e:f6:1a:91:4b:66:ce:23:bf:32:63:a1:59:32:fd:4c:2e:
         88:3e:c3:32:e3:e8:75:df:a8:3b:e0:a4:7b:1e:b1:ef:2d:a2:
         58:b4:76:d4:ba:cc:5e:b5:10:23:86:0a:d6:6a:a9:d8:c0:5c:
         e7:b7:6b:0e:55:90:43:19:0e:03:1f:4f:fd:3b:f9:3b:7e:5f:
         eb:63:68:b5:54:4d:c8:51:33:9a:56:0e:f0:91:2d:94:18:97:
         38:76:9d:76:4f:43:a9:25:26:34:e1:06:f7:7f:a7:37:cb:22:
         c0:a6:fd:a9:fe:71:5a:f0:23:74:b5:b9:13:07:d6:9e:6c:12:
         17:7e:24:29:0b:ff:95:e3:a7:0c:3a:78:08:74:d4:ac:25:c1:
         3e:63:5b:b4:40:56:b6:e7:da:f8:b1:b6:ee:28:28:78:69:86:
         f7:79:af:62:d3:1f:de:d3:cb:12:79:46:98:c0:5c:d6:d5:2d:
         34:56:42:a3:96:70:d7:c7:57:5a:34:b2:cd:cc:ff:ae:f4:76:
         86:bb:27:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 10:54:43 2026 by rpki-client