Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/323830343a363863303a3a2f33322d3334203d3e20323639373133.roa
File:                     323830343a363863303a3a2f33322d3334203d3e20323639373133.roa (raw, json)
Hash identifier:          OekydxEboXttQnj/bhd3VXYL76popZsFf2yrfCqDBm4=
Subject key identifier:   B3:30:3F:54:23:00:39:3F:89:8D:0E:C7:7C:9B:BB:A4:F5:31:8C:E3
Certificate issuer:       /CN=77B49FAE0B44A260013E4F5043DD07033113F7D0
Certificate serial:       2F75585FBAC23929944979D2224DFC5C7396BAB6
Authority key identifier: 77:B4:9F:AE:0B:44:A2:60:01:3E:4F:50:43:DD:07:03:31:13:F7:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77B49FAE0B44A260013E4F5043DD07033113F7D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/323830343a363863303a3a2f33322d3334203d3e20323639373133.roa
Signing time:             Tue 02 Jun 2026 21:00:00 +0000
ROA not before:           Tue 02 Jun 2026 20:55:00 +0000
ROA not after:            Tue 01 Jun 2027 21:00:00 +0000
asID:                     269713
IP address blocks:        2804:68c0::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/77B49FAE0B44A260013E4F5043DD07033113F7D0.crl
                          rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/77B49FAE0B44A260013E4F5043DD07033113F7D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77B49FAE0B44A260013E4F5043DD07033113F7D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 06:16:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:75:58:5f:ba:c2:39:29:94:49:79:d2:22:4d:fc:5c:73:96:ba:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77B49FAE0B44A260013E4F5043DD07033113F7D0
        Validity
            Not Before: Jun  2 20:55:00 2026 GMT
            Not After : Jun  1 21:00:00 2027 GMT
        Subject: CN=B3303F542300393F898D0EC77C9BBBA4F5318CE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7d:03:79:13:7b:a8:bc:de:14:27:ff:78:1a:
                    47:65:2a:04:e2:a3:30:3f:ec:38:b3:b0:ec:5e:4d:
                    64:fa:e4:79:70:4d:9c:4f:20:a1:91:2e:a6:6e:7b:
                    4b:b9:08:af:00:38:1a:b2:fd:55:1b:fc:98:53:f7:
                    57:76:2e:b0:b9:5b:4d:58:54:30:3e:e9:7e:6b:4c:
                    ee:7d:c5:d3:76:4d:2f:93:4e:44:5c:44:38:be:e3:
                    88:70:67:09:8e:05:4b:82:60:d1:f5:32:b8:8d:9c:
                    a9:ed:ce:47:89:dc:60:2d:1c:3d:a8:92:30:76:3c:
                    c2:13:bb:5d:32:33:38:cf:81:6f:1a:0a:63:11:5a:
                    27:56:b8:8a:37:af:43:94:13:3d:67:d0:63:97:a2:
                    a6:8d:8d:34:e3:1b:86:d9:ab:b8:01:e6:99:56:52:
                    bd:c7:bd:d3:0b:ac:e6:96:f0:b5:1e:27:97:6d:bd:
                    22:81:0f:d7:b8:ff:57:7f:28:bd:af:b4:20:f6:e4:
                    94:d1:39:f3:ad:7a:83:59:19:ec:bf:fb:95:1b:37:
                    18:ee:c6:60:55:9b:0d:47:c8:ec:f2:32:e2:4c:46:
                    ac:02:f2:fa:cb:f9:37:dd:cc:ff:94:6a:67:3b:41:
                    0d:ea:25:ba:ee:e6:ab:2c:4d:5e:0d:85:ef:1b:7f:
                    8f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:30:3F:54:23:00:39:3F:89:8D:0E:C7:7C:9B:BB:A4:F5:31:8C:E3
            X509v3 Authority Key Identifier:
                keyid:77:B4:9F:AE:0B:44:A2:60:01:3E:4F:50:43:DD:07:03:31:13:F7:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/77B49FAE0B44A260013E4F5043DD07033113F7D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77B49FAE0B44A260013E4F5043DD07033113F7D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/323830343a363863303a3a2f33322d3334203d3e20323639373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:68c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:8e:2b:f7:73:54:d9:f5:1b:c1:27:af:49:42:f3:1c:f1:8b:
         75:68:42:9d:99:9d:79:66:a9:7c:b0:f3:1f:69:7a:ad:b8:ed:
         b6:4b:0c:6f:e1:c4:f3:ee:d9:e0:fd:10:ce:d9:2a:f7:cf:4e:
         62:3f:93:f4:d3:ff:2b:83:f9:2f:02:6a:ec:f0:31:c6:f5:37:
         70:ae:3a:41:b2:f8:47:fc:02:a1:cf:17:30:b0:8a:bd:e8:fd:
         23:00:11:97:72:92:0c:77:da:78:e7:23:b9:7a:9a:c3:16:3d:
         a8:1e:b4:fb:60:e5:98:19:bf:55:26:e7:10:b1:04:5a:db:88:
         23:bb:95:32:10:75:9a:3c:2f:c8:1a:f0:4c:34:41:cc:73:ad:
         33:80:a9:d1:1d:2d:82:c9:90:a9:9a:69:eb:fa:78:84:6a:7c:
         22:97:a5:17:2d:1e:77:7f:fc:8c:2e:8a:a2:62:f6:85:7d:0d:
         99:17:28:f4:c0:ad:82:21:3c:a5:8d:1c:3c:19:e1:33:0d:6c:
         3e:17:c3:28:65:1e:86:be:c6:f1:89:bf:b3:99:9e:8e:13:28:
         ba:d7:18:ce:1a:17:1b:86:58:2e:5d:9d:38:a8:32:67:11:39:
         b1:d2:6f:5b:b8:e9:9e:7a:11:76:d2:67:f5:d4:b2:90:53:52:
         41:97:a2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:28:37 2026 by rpki-client