Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/323830343a336466343a323030303a3a2f33352d3335203d3e20323636353635.roa
File:                     323830343a336466343a323030303a3a2f33352d3335203d3e20323636353635.roa (raw, json)
Hash identifier:          p1rLUlF8iCF1+TbMQHvk2BQT494ZHV8si1w43SfYN+A=
Subject key identifier:   5A:C1:5F:F8:51:5C:59:60:6C:58:D6:7D:C7:48:EB:0B:9D:87:58:15
Certificate issuer:       /CN=AF9F8C386184F700F7CB796CF2E9AB404D95B0F4
Certificate serial:       2AFE35BB0ED90592BFEBF097CC02EBBB81791D29
Authority key identifier: AF:9F:8C:38:61:84:F7:00:F7:CB:79:6C:F2:E9:AB:40:4D:95:B0:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF9F8C386184F700F7CB796CF2E9AB404D95B0F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/323830343a336466343a323030303a3a2f33352d3335203d3e20323636353635.roa
Signing time:             Thu 04 Jun 2026 02:29:54 +0000
ROA not before:           Thu 04 Jun 2026 02:24:54 +0000
ROA not after:            Thu 03 Jun 2027 02:29:54 +0000
asID:                     266565
IP address blocks:        2804:3df4:2000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/AF9F8C386184F700F7CB796CF2E9AB404D95B0F4.crl
                          rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/AF9F8C386184F700F7CB796CF2E9AB404D95B0F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF9F8C386184F700F7CB796CF2E9AB404D95B0F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 23:14:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:fe:35:bb:0e:d9:05:92:bf:eb:f0:97:cc:02:eb:bb:81:79:1d:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF9F8C386184F700F7CB796CF2E9AB404D95B0F4
        Validity
            Not Before: Jun  4 02:24:54 2026 GMT
            Not After : Jun  3 02:29:54 2027 GMT
        Subject: CN=5AC15FF8515C59606C58D67DC748EB0B9D875815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2f:69:58:15:4c:66:fb:61:d6:eb:9a:d1:89:
                    78:b2:ad:c1:9e:7f:49:63:84:73:e5:a3:9d:22:2a:
                    28:5c:9c:b1:0a:a2:c7:2a:4c:74:c8:33:e9:18:c4:
                    0a:9f:da:12:18:0f:ad:76:f4:52:3a:5c:df:97:5c:
                    5c:4e:a4:e7:44:74:8f:90:2f:9e:5c:1c:8a:57:6b:
                    26:86:dc:6a:a0:f9:c6:24:6d:b8:37:a7:cb:46:13:
                    d2:1e:80:78:0f:24:d9:fe:9b:e6:41:a7:79:20:53:
                    54:8c:f4:d8:77:1f:46:e5:19:53:d1:59:62:4b:7a:
                    8b:12:8c:cb:eb:0e:2e:c7:91:64:5f:0e:1a:86:a2:
                    84:44:9b:1f:a7:e2:cf:e3:39:c0:eb:d2:28:25:ea:
                    0d:83:89:88:f1:29:48:b2:16:8f:1a:64:61:17:84:
                    4b:e2:2d:74:22:53:55:46:0a:b3:89:e9:82:52:42:
                    df:69:df:39:4c:47:62:31:14:98:80:8a:9d:b6:64:
                    e5:de:8c:cf:4c:2d:f0:a3:8f:e5:de:b1:b8:05:a5:
                    7f:61:73:c4:e8:20:f8:47:57:d5:49:a9:27:22:df:
                    a3:a0:30:06:3a:77:3c:3b:a6:28:ad:69:49:bf:fc:
                    6a:3f:12:cb:f6:8a:3f:cf:79:2a:f9:78:3a:e1:44:
                    30:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C1:5F:F8:51:5C:59:60:6C:58:D6:7D:C7:48:EB:0B:9D:87:58:15
            X509v3 Authority Key Identifier:
                keyid:AF:9F:8C:38:61:84:F7:00:F7:CB:79:6C:F2:E9:AB:40:4D:95:B0:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/AF9F8C386184F700F7CB796CF2E9AB404D95B0F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF9F8C386184F700F7CB796CF2E9AB404D95B0F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeboebrzjP9zEyzzhDptkr3D5g8ekLcMp7Kktentjs2c/0/323830343a336466343a323030303a3a2f33352d3335203d3e20323636353635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3df4:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         a3:c1:3d:1f:59:c1:49:99:0f:31:97:0e:da:f2:48:89:14:00:
         a3:09:60:5c:21:50:a9:49:cc:f2:05:9f:62:fb:10:c6:51:83:
         4f:d1:99:73:80:01:83:e1:f9:50:73:61:10:32:77:34:ad:55:
         fe:09:c2:11:f9:73:d1:08:0f:e4:4e:06:dd:a9:71:8d:93:5a:
         31:fb:c2:32:20:4d:39:f7:a0:c7:04:7c:84:4c:f0:6a:2e:0e:
         0e:c3:f1:09:a2:38:cd:3b:78:8f:60:62:31:7f:e4:bd:2c:38:
         f4:2a:7c:cd:6b:e9:24:5f:3e:6d:c1:bb:0d:f9:c3:64:05:1c:
         52:9a:b0:1c:db:22:43:a7:bf:93:92:73:9d:0e:a1:09:c4:ed:
         75:81:4a:71:b4:62:98:91:b9:57:dd:8d:f1:59:50:07:92:d8:
         a0:a2:5f:74:c5:ee:91:e1:2d:87:6e:13:39:3e:f7:b9:c3:9c:
         ed:6a:7e:44:c0:b8:d9:cf:d2:90:80:4e:17:9a:7d:ea:d6:0d:
         ae:fd:39:28:59:67:2c:56:68:2d:8d:0a:f9:4e:d4:0e:94:24:
         4a:9d:84:d2:0a:c9:06:15:ed:f1:30:f2:89:8d:45:34:dc:43:
         b2:41:48:de:34:68:44:23:33:e9:fd:90:94:67:25:63:9a:52:
         0c:c4:0b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:26:06 2026 by rpki-client