Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a383030303a3a2f33342d3334203d3e20323733373034.roa
File:                     323830343a386166383a383030303a3a2f33342d3334203d3e20323733373034.roa (raw, json)
Hash identifier:          QjN8j/G0p+UXEz6ByAV3MpfczzVgiTQx4gwSCUkFGrU=
Subject key identifier:   32:3E:6C:A3:99:55:F3:63:93:D3:13:AA:42:A3:F3:DD:2F:AB:A2:10
Certificate issuer:       /CN=21A1F812DC436FBAF80C04C11B4C6AA40A35A84F
Certificate serial:       19C3DBC56F366DC96C805EFA162EA9DB3CCF4AF9
Authority key identifier: 21:A1:F8:12:DC:43:6F:BA:F8:0C:04:C1:1B:4C:6A:A4:0A:35:A8:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21A1F812DC436FBAF80C04C11B4C6AA40A35A84F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a383030303a3a2f33342d3334203d3e20323733373034.roa
Signing time:             Fri 12 Jun 2026 16:38:52 +0000
ROA not before:           Fri 12 Jun 2026 16:33:52 +0000
ROA not after:            Fri 11 Jun 2027 16:38:52 +0000
asID:                     273704
IP address blocks:        2804:8af8:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/21A1F812DC436FBAF80C04C11B4C6AA40A35A84F.crl
                          rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/21A1F812DC436FBAF80C04C11B4C6AA40A35A84F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21A1F812DC436FBAF80C04C11B4C6AA40A35A84F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Jun 2026 17:19:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c3:db:c5:6f:36:6d:c9:6c:80:5e:fa:16:2e:a9:db:3c:cf:4a:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A1F812DC436FBAF80C04C11B4C6AA40A35A84F
        Validity
            Not Before: Jun 12 16:33:52 2026 GMT
            Not After : Jun 11 16:38:52 2027 GMT
        Subject: CN=323E6CA39955F36393D313AA42A3F3DD2FABA210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9e:4d:2f:39:47:a9:ff:90:91:ab:49:ad:db:
                    57:56:9f:84:94:8e:d1:50:39:e3:da:2a:8c:7d:5c:
                    82:a6:df:93:1b:df:60:b2:f1:b4:85:5f:ba:f9:ef:
                    42:3d:e4:7f:41:c4:35:26:64:ab:b3:f9:bb:02:71:
                    15:45:af:e8:2a:a5:5c:4e:c4:7d:28:06:5d:f4:47:
                    64:6b:ed:b7:e8:e9:ac:7e:27:34:3f:55:92:b3:72:
                    6c:26:9e:a3:d7:fc:b4:2e:80:b6:3a:b3:a8:b9:e6:
                    d6:f6:f3:58:07:9f:c3:67:9a:62:7f:48:e8:0d:8c:
                    25:58:e5:82:a2:da:74:5a:70:c4:be:de:76:ad:ed:
                    38:3b:a0:98:cf:d9:1d:0a:bc:ac:d7:18:db:d9:07:
                    6f:d3:63:14:d3:ee:27:6d:a3:0d:3e:1c:10:05:24:
                    ff:28:84:35:38:08:1f:6d:66:b1:f6:2a:53:c4:6f:
                    94:cb:33:ee:33:27:14:aa:2c:12:dc:54:c9:61:31:
                    cf:6b:e6:32:8d:b5:85:53:db:a9:b2:f8:77:26:da:
                    25:3e:ae:86:93:da:26:d5:ee:2a:e7:32:49:1d:ff:
                    1b:c4:61:ad:a6:d4:1d:1c:44:98:92:0c:73:e8:92:
                    17:b3:a2:3c:50:0f:26:63:13:b3:93:8b:88:e4:e4:
                    d4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3E:6C:A3:99:55:F3:63:93:D3:13:AA:42:A3:F3:DD:2F:AB:A2:10
            X509v3 Authority Key Identifier:
                keyid:21:A1:F8:12:DC:43:6F:BA:F8:0C:04:C1:1B:4C:6A:A4:0A:35:A8:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/21A1F812DC436FBAF80C04C11B4C6AA40A35A84F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21A1F812DC436FBAF80C04C11B4C6AA40A35A84F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a383030303a3a2f33342d3334203d3e20323733373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8af8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7d:58:97:94:4f:a1:66:79:fe:b5:0c:0a:ab:31:bf:d6:db:77:
         0a:9f:b5:83:0d:1e:6b:f6:64:51:72:c0:e9:ff:18:c8:d9:cb:
         34:fc:33:c2:8c:84:59:5f:c7:43:6f:f3:1f:5e:2c:4c:b5:09:
         6a:8f:b3:e8:b7:3c:dc:0e:05:51:5a:62:28:d5:0d:23:3a:7f:
         58:60:fd:3c:9b:a0:9a:57:74:fb:29:14:f4:b8:f8:be:0e:03:
         73:f0:f0:7f:c4:ad:9a:8f:e3:ea:2c:c3:11:42:70:44:8b:f0:
         4e:2e:a1:e0:f4:a2:3f:c4:86:20:d3:0d:61:ed:68:b3:dc:5b:
         5c:28:f5:44:58:36:a5:5f:ec:0c:db:82:03:3d:2b:08:5e:c1:
         12:3c:74:51:c1:29:cb:45:2e:85:a5:f1:24:b7:17:14:8a:09:
         fc:89:21:c7:bf:60:e0:d7:32:1c:e3:c4:99:3b:1b:59:d5:16:
         00:cf:9c:79:f9:2a:46:74:78:ad:d7:96:a7:eb:b9:b3:90:94:
         a3:21:8f:cd:5c:db:4a:72:09:3f:d8:0a:ee:bb:4c:19:09:9e:
         7c:15:ba:ad:7e:c9:b1:60:25:d4:ec:63:d3:57:84:83:b0:4d:
         13:a8:ec:aa:d4:79:b0:31:d9:a4:f8:d5:c3:79:3d:63:c8:87:
         54:d0:ff:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:24:53 2026 by rpki-client