Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn2PoZUTVXkuatDUyMatcfUZBG2HPZtCmdRw9YwEJE4d/0/323830343a363039633a3a2f33322d313238203d3e20323639313830.roa
File:                     323830343a363039633a3a2f33322d313238203d3e20323639313830.roa (raw, json)
Hash identifier:          A8zi2r1gc093bOEDkZl1u6+tfeuQDeAL4MB9/zvCibw=
Subject key identifier:   B7:F0:4B:DC:E8:6D:43:8F:50:F8:63:6E:57:FD:6E:81:E5:2C:92:20
Certificate issuer:       /CN=BD0661DECE4FB2229696CF4096DCD8CC61B87A5D
Certificate serial:       3E270E03FE0B75FD84522913E67EA207DB7A5A4B
Authority key identifier: BD:06:61:DE:CE:4F:B2:22:96:96:CF:40:96:DC:D8:CC:61:B8:7A:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD0661DECE4FB2229696CF4096DCD8CC61B87A5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn2PoZUTVXkuatDUyMatcfUZBG2HPZtCmdRw9YwEJE4d/0/323830343a363039633a3a2f33322d313238203d3e20323639313830.roa
Signing time:             Thu 28 May 2026 23:55:14 +0000
ROA not before:           Thu 28 May 2026 23:50:14 +0000
ROA not after:            Thu 27 May 2027 23:55:14 +0000
asID:                     269180
IP address blocks:        2804:609c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gn2PoZUTVXkuatDUyMatcfUZBG2HPZtCmdRw9YwEJE4d/0/BD0661DECE4FB2229696CF4096DCD8CC61B87A5D.crl
                          rsync://rpki-repo.registro.br/repo/Gn2PoZUTVXkuatDUyMatcfUZBG2HPZtCmdRw9YwEJE4d/0/BD0661DECE4FB2229696CF4096DCD8CC61B87A5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD0661DECE4FB2229696CF4096DCD8CC61B87A5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 00:20:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:27:0e:03:fe:0b:75:fd:84:52:29:13:e6:7e:a2:07:db:7a:5a:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD0661DECE4FB2229696CF4096DCD8CC61B87A5D
        Validity
            Not Before: May 28 23:50:14 2026 GMT
            Not After : May 27 23:55:14 2027 GMT
        Subject: CN=B7F04BDCE86D438F50F8636E57FD6E81E52C9220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:27:3c:37:22:33:68:0c:ae:49:a5:2e:f5:1a:
                    83:b1:e7:aa:9e:bd:11:48:55:a4:77:70:0c:6c:1f:
                    65:f3:d9:87:1b:a8:5f:6a:35:48:c0:c1:65:54:d4:
                    2b:dc:a0:a7:67:c4:00:19:4c:25:89:72:a7:48:13:
                    03:63:f9:12:9e:b2:86:2f:57:fe:ba:67:2d:4b:61:
                    3f:89:fb:f5:fc:43:9c:5d:8f:cf:11:8e:d5:94:d1:
                    8a:aa:5f:ec:5d:51:6d:23:02:45:88:88:0a:4d:05:
                    83:12:fd:95:e8:20:0c:f8:2c:d3:b5:00:51:bf:e5:
                    af:a4:4f:9d:d1:ca:90:c2:4c:47:80:44:c9:8a:e5:
                    5e:02:85:2f:4b:01:81:44:5d:8a:cf:d4:d3:5a:c2:
                    41:11:95:74:8f:0c:8a:c5:f7:aa:20:89:0d:e5:67:
                    a7:d8:97:2e:a3:64:99:e4:13:97:cd:be:f6:ee:d3:
                    17:8c:37:2b:e4:60:cd:7e:af:c2:b7:7d:d8:b1:20:
                    db:20:6e:d7:9c:48:a6:88:3f:05:ee:5b:93:84:91:
                    83:30:74:0b:e0:a8:7d:3c:c5:2d:15:09:6d:bc:ae:
                    9b:3c:20:81:4e:f1:d4:f5:71:42:12:c7:e9:54:39:
                    09:8a:c1:e4:fa:6e:d9:d2:d1:42:c5:ee:90:ac:3a:
                    e6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F0:4B:DC:E8:6D:43:8F:50:F8:63:6E:57:FD:6E:81:E5:2C:92:20
            X509v3 Authority Key Identifier:
                keyid:BD:06:61:DE:CE:4F:B2:22:96:96:CF:40:96:DC:D8:CC:61:B8:7A:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn2PoZUTVXkuatDUyMatcfUZBG2HPZtCmdRw9YwEJE4d/0/BD0661DECE4FB2229696CF4096DCD8CC61B87A5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD0661DECE4FB2229696CF4096DCD8CC61B87A5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn2PoZUTVXkuatDUyMatcfUZBG2HPZtCmdRw9YwEJE4d/0/323830343a363039633a3a2f33322d313238203d3e20323639313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:609c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:22:c9:64:f6:4b:5d:dc:ac:d5:3c:b9:2c:47:c9:53:4c:c0:
         fc:6d:57:84:6a:84:4c:a3:d4:95:89:00:c4:9a:4e:02:c7:5f:
         58:8b:0b:21:f0:8a:a3:cf:71:06:21:a9:6a:d2:d9:c9:53:ab:
         a4:bc:06:03:dd:a2:79:85:59:08:72:95:a2:45:b3:5c:af:b2:
         de:33:e4:20:34:c6:5b:ea:db:d5:7c:b1:d8:13:bb:e2:b7:4d:
         b2:25:21:a5:34:e9:62:ce:a4:6b:32:66:ff:d1:87:67:1a:b3:
         8d:ea:14:ff:07:cd:9a:bc:b9:a5:c4:a1:39:6e:31:f4:38:0c:
         14:26:93:cb:c9:17:ec:89:ef:23:cc:b2:59:80:37:fa:be:66:
         40:d4:d4:7a:58:ab:36:22:91:13:39:74:09:d6:67:cd:3e:25:
         87:02:0f:c0:b5:69:d6:c8:f0:af:ce:fc:15:17:46:ba:4c:f6:
         be:a5:90:a9:37:74:de:ea:e7:6f:86:6d:1b:d4:04:6f:b4:cb:
         cd:ff:82:d0:71:63:d4:bb:00:88:90:85:f0:f0:0a:c8:c6:56:
         83:f9:4b:21:dc:d7:02:93:b3:1e:ed:8d:91:f1:e4:39:14:45:
         2d:73:44:ac:ed:06:47:f0:10:84:5d:0c:73:f4:5d:e0:13:69:
         15:39:5d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:16:30 2026 by rpki-client