Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/323830343a313734303a3a2f33322d3438203d3e203533313037.roa
File:                     323830343a313734303a3a2f33322d3438203d3e203533313037.roa (raw, json)
Hash identifier:          dQ/BkhCwNTwMmav50Tw0m5mt6SlZD3M9CU8ISe95ER0=
Subject key identifier:   49:52:9F:F8:9D:78:FE:60:CA:27:CA:D3:4F:1D:E4:4C:AB:83:2F:AB
Certificate issuer:       /CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
Certificate serial:       2F09733641D65D192BA9E92FA6AE6AFB55DB680B
Authority key identifier: 1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/323830343a313734303a3a2f33322d3438203d3e203533313037.roa
Signing time:             Tue 09 Jun 2026 01:56:43 +0000
ROA not before:           Tue 09 Jun 2026 01:51:43 +0000
ROA not after:            Tue 08 Jun 2027 01:56:43 +0000
asID:                     53107
IP address blocks:        2804:1740::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 14:18:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:09:73:36:41:d6:5d:19:2b:a9:e9:2f:a6:ae:6a:fb:55:db:68:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
        Validity
            Not Before: Jun  9 01:51:43 2026 GMT
            Not After : Jun  8 01:56:43 2027 GMT
        Subject: CN=49529FF89D78FE60CA27CAD34F1DE44CAB832FAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:69:2b:44:cf:32:61:5c:f0:2a:ad:2c:97:07:
                    bf:27:df:56:db:23:5f:75:29:56:37:3c:a5:d9:1e:
                    da:e9:92:ac:e7:a2:3b:e6:3a:f9:e3:80:b2:0b:72:
                    7e:fc:ac:93:0c:60:55:35:d3:25:c0:54:c6:23:6a:
                    df:73:ee:68:a0:ea:93:a9:c7:ff:b3:65:ea:e2:ed:
                    fb:55:cb:9f:c4:34:88:13:92:fe:66:a4:0e:91:23:
                    9c:dc:c3:0c:d6:d1:a8:0a:0d:ef:d4:31:f0:37:cd:
                    66:a6:d7:09:a8:35:89:f4:f4:62:bc:8b:ed:dd:2b:
                    0d:9e:d9:87:5c:7d:c7:7d:4f:fb:1a:fe:6a:62:32:
                    46:f4:a1:93:82:3c:16:8a:2d:9f:94:fe:76:c1:d6:
                    2d:b6:36:36:e1:e1:61:89:bf:d3:7f:13:b7:bf:43:
                    9c:24:4e:77:de:c1:1f:1c:bf:ea:1d:47:8f:76:c5:
                    ea:0a:d8:d9:19:c0:68:6f:91:7b:55:cc:90:65:24:
                    73:35:d4:e2:e1:da:4f:64:f3:b7:c9:30:d1:ae:4f:
                    af:98:e7:64:a0:2c:02:43:92:a3:59:70:5d:34:48:
                    b3:91:c3:8c:2e:72:ee:22:b6:10:80:a9:87:db:a6:
                    63:f8:75:f2:e8:b6:82:0b:e7:a1:f3:be:fa:75:69:
                    58:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:52:9F:F8:9D:78:FE:60:CA:27:CA:D3:4F:1D:E4:4C:AB:83:2F:AB
            X509v3 Authority Key Identifier:
                keyid:1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/323830343a313734303a3a2f33322d3438203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1740::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:2f:39:1d:cf:97:3c:f2:76:b1:ee:ca:e3:f4:4e:19:39:d0:
         a6:9e:2c:5e:d6:e3:ce:e1:d4:9a:63:40:6b:ed:9b:ea:38:04:
         9d:48:18:3b:55:dd:e1:e3:2b:09:2a:19:89:7a:59:f0:30:82:
         1d:27:0b:cf:c9:26:97:1c:15:68:ec:fe:f4:be:e1:33:67:d3:
         44:5a:89:60:a5:a2:30:36:d6:9f:4a:b6:49:5e:29:5b:be:31:
         d0:d3:31:af:77:9f:e0:1d:16:b5:2a:27:9d:56:bc:02:d3:48:
         f9:14:2d:dc:51:f5:f8:b5:3c:94:3c:4e:a9:b6:a9:71:53:8b:
         81:d2:77:70:d9:2d:93:68:07:51:d4:2e:ff:92:c2:12:b8:96:
         86:cb:a6:7e:69:d9:e4:a7:08:77:21:8d:30:02:28:76:1d:8d:
         2e:61:d4:ae:ca:0c:84:3d:e2:2d:75:26:f4:73:b1:86:3e:23:
         4a:53:bf:08:9f:1c:72:2c:fe:37:3e:a2:35:3d:8d:ae:6b:8c:
         94:c7:01:45:35:9d:d8:00:a4:39:04:76:08:85:c9:a8:b6:be:
         5a:3f:37:16:a3:99:88:4e:59:91:60:72:fe:7c:18:40:e7:ce:
         26:f4:3e:90:ff:bf:73:87:91:89:8d:7d:27:0b:96:ca:00:38:
         6f:d4:af:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:32:47 2026 by rpki-client