Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/323830343a313234303a3a2f33322d313238203d3e20323633343635.roa
File:                     323830343a313234303a3a2f33322d313238203d3e20323633343635.roa (raw, json)
Hash identifier:          Ywy+sadH76ECnW1L2HKdu50HBvqGSBtsNmMOIEHB9hY=
Subject key identifier:   D8:64:E0:FD:E6:C1:53:C4:83:C3:89:EB:CC:53:E8:FF:A2:84:F3:3E
Certificate issuer:       /CN=C11F7C20B2456BA36EBCC89270ACE976DACFC35C
Certificate serial:       6122CDCFA8FFCC2350B459D07E14DE8B8D091005
Authority key identifier: C1:1F:7C:20:B2:45:6B:A3:6E:BC:C8:92:70:AC:E9:76:DA:CF:C3:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/323830343a313234303a3a2f33322d313238203d3e20323633343635.roa
Signing time:             Wed 20 May 2026 16:08:35 +0000
ROA not before:           Wed 20 May 2026 16:03:35 +0000
ROA not after:            Wed 19 May 2027 16:08:35 +0000
asID:                     263465
IP address blocks:        2804:1240::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.crl
                          rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 06:24:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:22:cd:cf:a8:ff:cc:23:50:b4:59:d0:7e:14:de:8b:8d:09:10:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C11F7C20B2456BA36EBCC89270ACE976DACFC35C
        Validity
            Not Before: May 20 16:03:35 2026 GMT
            Not After : May 19 16:08:35 2027 GMT
        Subject: CN=D864E0FDE6C153C483C389EBCC53E8FFA284F33E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8a:71:28:f0:cc:1c:ae:5f:8f:5b:42:92:01:
                    41:fa:3c:15:86:56:5f:40:88:31:17:3e:f6:e4:7a:
                    b4:6a:66:6a:65:51:24:f6:8c:bd:e7:a3:b0:f1:fa:
                    a7:a8:6c:bc:22:8e:b7:df:52:4f:12:4c:dc:0d:74:
                    b9:18:e8:5f:2b:6c:43:20:ce:2a:23:96:80:d2:42:
                    79:c3:c8:82:32:2f:b4:0b:64:0b:14:a4:31:cd:15:
                    cc:1f:b7:79:da:ff:ca:d7:43:c7:1b:d1:c4:18:82:
                    73:7d:7d:06:f8:90:77:48:bd:3d:25:4f:16:ee:15:
                    f0:e2:73:ee:ee:e3:01:74:58:c9:b1:8c:7c:bf:53:
                    c2:94:d5:dd:a2:38:51:7a:c5:46:4b:1d:54:cc:44:
                    76:43:1e:6d:62:dc:5b:31:d3:e3:e1:16:99:1d:68:
                    d6:5e:4e:2e:c2:52:2d:58:6b:fa:a0:a7:ed:a4:6f:
                    00:01:75:aa:0e:8e:64:17:40:17:f2:e4:b3:f7:f0:
                    51:23:1b:de:2e:be:35:1e:dd:38:fa:83:13:d8:db:
                    ff:20:71:58:12:d2:a5:9a:45:97:3c:cc:20:7e:70:
                    15:c8:c3:5e:8c:ae:89:7f:66:06:61:de:78:c5:80:
                    6d:10:16:61:27:0b:ce:a7:e2:72:2e:96:52:c6:bc:
                    2d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:64:E0:FD:E6:C1:53:C4:83:C3:89:EB:CC:53:E8:FF:A2:84:F3:3E
            X509v3 Authority Key Identifier:
                keyid:C1:1F:7C:20:B2:45:6B:A3:6E:BC:C8:92:70:AC:E9:76:DA:CF:C3:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/323830343a313234303a3a2f33322d313238203d3e20323633343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1240::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:40:4e:ed:ca:b0:b6:63:ae:37:f9:65:c8:2c:6d:54:83:d2:
         49:27:c6:fe:d7:2b:9c:b3:d8:ab:3e:00:46:fc:82:4f:00:3a:
         44:dd:51:80:8a:3e:21:17:a7:8e:bb:64:6f:37:1a:06:29:49:
         38:d5:aa:a4:cf:7b:fb:37:99:50:2a:b7:e1:2d:48:9b:42:8a:
         3e:95:32:c0:51:88:70:0b:44:64:c9:4f:a2:2f:b0:92:c9:91:
         05:b9:60:5f:f8:e0:80:dd:cf:1a:d5:5b:e3:91:81:03:30:4b:
         af:50:0c:11:bc:5d:bd:75:d7:b9:a7:74:e5:7a:64:f5:8f:d1:
         8e:71:4c:ce:aa:3e:07:48:1b:68:8b:50:55:e5:3d:16:c3:a8:
         8c:37:46:c4:b5:f9:ae:1d:55:d4:b3:a4:76:92:e3:81:a4:39:
         69:64:f3:f3:65:8e:b9:48:ac:3e:dd:42:35:b5:ce:d2:8f:4f:
         87:73:f3:97:51:e3:43:32:98:f3:c9:60:8f:33:14:36:d0:04:
         7d:4d:2c:80:f9:84:23:60:62:32:e9:2f:8b:07:9d:73:fc:51:
         d0:7a:84:18:bb:a5:ec:ab:ec:5b:d0:a9:f0:34:90:4e:6b:ab:
         0a:a1:11:d7:9a:f5:52:7a:cb:42:84:ed:ba:ed:a6:a5:62:18:
         19:65:a0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 11:02:51 2026 by rpki-client