Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDBnhaNcsZwPvfZtr3H4Xck1uud5gUtQmSDBandYpcGa/0/323830343a363038633a3a2f33322d313238203d3e20323639313734.roa
File:                     323830343a363038633a3a2f33322d313238203d3e20323639313734.roa (raw, json)
Hash identifier:          Xvda2fVZu1RH2pKDn+JhbBupqx9SJouRekCTUZzzth4=
Subject key identifier:   B5:22:DC:42:1B:12:7F:FF:F8:D0:EF:BE:2E:60:E4:BE:EC:E5:B7:68
Certificate issuer:       /CN=329F0C2AD4D88B330E9D4FDA85B1FCE121B38415
Certificate serial:       7FA7D24E89F25E922B8EB105DFAC8DAD8C52E2EA
Authority key identifier: 32:9F:0C:2A:D4:D8:8B:33:0E:9D:4F:DA:85:B1:FC:E1:21:B3:84:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/329F0C2AD4D88B330E9D4FDA85B1FCE121B38415.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDBnhaNcsZwPvfZtr3H4Xck1uud5gUtQmSDBandYpcGa/0/323830343a363038633a3a2f33322d313238203d3e20323639313734.roa
Signing time:             Mon 25 May 2026 14:10:17 +0000
ROA not before:           Mon 25 May 2026 14:05:17 +0000
ROA not after:            Mon 24 May 2027 14:10:17 +0000
asID:                     269174
IP address blocks:        2804:608c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDBnhaNcsZwPvfZtr3H4Xck1uud5gUtQmSDBandYpcGa/0/329F0C2AD4D88B330E9D4FDA85B1FCE121B38415.crl
                          rsync://rpki-repo.registro.br/repo/JDBnhaNcsZwPvfZtr3H4Xck1uud5gUtQmSDBandYpcGa/0/329F0C2AD4D88B330E9D4FDA85B1FCE121B38415.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/329F0C2AD4D88B330E9D4FDA85B1FCE121B38415.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a7:d2:4e:89:f2:5e:92:2b:8e:b1:05:df:ac:8d:ad:8c:52:e2:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=329F0C2AD4D88B330E9D4FDA85B1FCE121B38415
        Validity
            Not Before: May 25 14:05:17 2026 GMT
            Not After : May 24 14:10:17 2027 GMT
        Subject: CN=B522DC421B127FFFF8D0EFBE2E60E4BEECE5B768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:1f:d2:a7:c3:a7:0f:96:37:eb:7d:4f:8d:c8:
                    0d:db:27:8f:12:e8:4f:bb:12:d6:d0:bb:a2:ab:f5:
                    1d:8f:74:95:ac:3d:38:8e:1b:fa:d5:07:fb:93:46:
                    b8:da:77:d8:78:1d:9f:9e:2a:d8:8e:91:0e:e1:ca:
                    c6:e4:d9:63:22:cd:da:f8:fe:4f:b1:78:47:cc:c4:
                    49:60:dd:a2:01:71:ab:90:61:07:6f:70:1c:b0:52:
                    0c:79:6c:f2:df:0e:35:92:c5:a7:ec:62:10:3e:e4:
                    1b:a8:e0:93:8b:3a:cf:41:41:1a:62:73:e2:e7:de:
                    44:bc:58:6a:63:79:2e:cb:8c:05:64:44:3d:0b:f0:
                    b4:53:a3:2b:cc:07:2e:02:23:6d:7c:33:5f:59:43:
                    f7:8d:4c:e3:1c:36:86:1a:12:4d:76:80:9b:dc:97:
                    19:1e:b8:98:55:45:48:eb:a3:b5:9d:bf:fb:51:dc:
                    e0:a2:44:f4:b7:35:fe:2c:51:9d:b2:1d:96:8c:78:
                    f1:91:08:6f:70:aa:0f:6a:a4:c5:c6:31:7a:ae:4e:
                    13:24:dd:0d:5b:f9:37:58:49:a5:78:68:14:7f:1f:
                    bc:44:de:fe:95:e7:fe:ae:ed:2d:95:c4:c7:59:f0:
                    df:b2:35:22:22:61:b1:16:24:ee:10:ec:d6:08:6b:
                    41:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:22:DC:42:1B:12:7F:FF:F8:D0:EF:BE:2E:60:E4:BE:EC:E5:B7:68
            X509v3 Authority Key Identifier:
                keyid:32:9F:0C:2A:D4:D8:8B:33:0E:9D:4F:DA:85:B1:FC:E1:21:B3:84:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDBnhaNcsZwPvfZtr3H4Xck1uud5gUtQmSDBandYpcGa/0/329F0C2AD4D88B330E9D4FDA85B1FCE121B38415.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/329F0C2AD4D88B330E9D4FDA85B1FCE121B38415.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDBnhaNcsZwPvfZtr3H4Xck1uud5gUtQmSDBandYpcGa/0/323830343a363038633a3a2f33322d313238203d3e20323639313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:608c::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:e9:67:d3:55:34:7a:43:b4:40:38:85:0f:3a:56:66:fe:fd:
         79:7b:df:7e:16:46:b8:71:48:2a:5e:39:31:80:2b:89:ec:0a:
         4f:11:32:2f:be:c3:ea:d4:c3:c5:e6:e9:8a:10:9a:7f:76:c1:
         1e:5a:33:60:a6:17:21:08:4c:23:b1:88:8e:fd:0d:ef:92:52:
         31:94:00:2c:56:1b:00:a8:49:72:16:5b:05:42:73:cd:24:06:
         bf:8c:f9:ec:6f:f3:dd:1f:86:7d:53:2c:86:f2:4f:f6:8e:7a:
         a1:cd:0c:b7:de:87:9e:53:19:d1:38:0e:ae:f6:83:f2:e8:65:
         e0:70:8a:a9:cf:d2:3b:15:50:a8:9b:f9:3d:07:49:72:0e:40:
         ea:c1:38:99:5b:a5:86:04:d1:d5:86:ad:50:3b:8b:f2:47:20:
         2f:d9:c2:19:80:45:bb:33:74:74:e4:4b:18:77:62:53:9c:4d:
         2b:6b:a2:35:46:41:68:75:37:7e:c7:98:a8:6b:37:c5:e2:fa:
         84:7f:cc:d5:6b:55:e9:4a:da:47:6a:92:a4:83:00:64:ce:ee:
         35:ca:6b:48:34:48:5a:03:4c:3d:1f:d2:7b:5b:d9:23:44:2f:
         dd:68:7c:60:1a:93:d4:ca:69:f8:e3:ca:36:4d:0d:18:26:8d:
         87:20:10:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:12:06 2026 by rpki-client