Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a3a2f33342d3334203d3e20323733373034.roa
File:                     323830343a386166383a3a2f33342d3334203d3e20323733373034.roa (raw, json)
Hash identifier:          fFkO1mAEYubI7cL55OdWpRgTFZPVk9mie8lOyMIKkog=
Subject key identifier:   1E:6F:E1:9E:AA:D9:D6:62:A6:0F:1D:DD:EC:39:15:EA:49:43:C7:95
Certificate issuer:       /CN=21A1F812DC436FBAF80C04C11B4C6AA40A35A84F
Certificate serial:       6C5A38356526E110D4B6AE68D7BB075AAD74D324
Authority key identifier: 21:A1:F8:12:DC:43:6F:BA:F8:0C:04:C1:1B:4C:6A:A4:0A:35:A8:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21A1F812DC436FBAF80C04C11B4C6AA40A35A84F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a3a2f33342d3334203d3e20323733373034.roa
Signing time:             Fri 12 Jun 2026 16:38:49 +0000
ROA not before:           Fri 12 Jun 2026 16:33:49 +0000
ROA not after:            Fri 11 Jun 2027 16:38:49 +0000
asID:                     273704
IP address blocks:        2804:8af8::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/21A1F812DC436FBAF80C04C11B4C6AA40A35A84F.crl
                          rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/21A1F812DC436FBAF80C04C11B4C6AA40A35A84F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21A1F812DC436FBAF80C04C11B4C6AA40A35A84F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Jun 2026 17:19:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:5a:38:35:65:26:e1:10:d4:b6:ae:68:d7:bb:07:5a:ad:74:d3:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A1F812DC436FBAF80C04C11B4C6AA40A35A84F
        Validity
            Not Before: Jun 12 16:33:49 2026 GMT
            Not After : Jun 11 16:38:49 2027 GMT
        Subject: CN=1E6FE19EAAD9D662A60F1DDDEC3915EA4943C795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d0:bd:19:02:dc:b9:82:d3:a3:6a:49:a5:7c:
                    b0:73:6b:c8:f2:b9:21:90:01:25:67:48:91:06:c7:
                    91:ec:dd:42:bb:6a:78:ca:e1:ee:2e:dc:fd:7d:6c:
                    89:43:83:61:73:63:a9:c2:34:6a:5c:c6:2f:77:c3:
                    e7:29:82:91:6f:a0:f4:82:32:2d:ad:99:02:76:40:
                    a9:35:e4:4e:39:13:c4:c7:72:12:42:de:ef:e2:0b:
                    a1:28:28:8a:eb:0f:56:d4:7d:3c:f9:03:bc:60:73:
                    02:39:ec:62:88:1b:88:59:95:e9:c5:0e:64:2e:f2:
                    c0:84:58:61:95:1d:ea:ac:90:93:e9:48:ca:ea:64:
                    42:a1:35:1d:43:2b:11:41:3c:25:af:1c:5d:53:b1:
                    0f:35:9c:76:f5:7f:85:59:96:7e:4a:c7:9f:15:d6:
                    9a:1f:1b:27:26:46:50:4a:01:c4:41:52:77:ca:ce:
                    05:75:de:da:20:70:19:af:3c:ad:2e:26:43:64:91:
                    d4:d8:45:ad:7d:1b:3a:ac:1b:81:4a:2e:d7:8e:18:
                    e1:d9:45:e3:20:05:87:47:01:c2:b3:09:4e:e9:71:
                    1f:b1:68:1e:c8:e9:ae:67:6d:f2:78:88:90:cb:b9:
                    85:32:8f:e3:60:e8:c4:bc:bd:fc:71:bd:4a:a5:1f:
                    37:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6F:E1:9E:AA:D9:D6:62:A6:0F:1D:DD:EC:39:15:EA:49:43:C7:95
            X509v3 Authority Key Identifier:
                keyid:21:A1:F8:12:DC:43:6F:BA:F8:0C:04:C1:1B:4C:6A:A4:0A:35:A8:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/21A1F812DC436FBAF80C04C11B4C6AA40A35A84F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21A1F812DC436FBAF80C04C11B4C6AA40A35A84F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a3a2f33342d3334203d3e20323733373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8af8::/34

    Signature Algorithm: sha256WithRSAEncryption
         5a:5d:69:20:de:51:97:61:66:66:0a:c9:a2:5e:06:96:50:80:
         a3:aa:73:af:87:09:7d:7c:37:99:f9:24:db:41:4c:f3:77:5a:
         34:45:c3:cf:94:34:24:be:ca:a4:2e:34:29:fa:60:38:41:93:
         38:de:97:a3:a2:a9:3d:57:ef:4e:61:d9:45:4c:63:4d:3e:da:
         70:87:01:3f:7d:c5:0e:af:9f:b0:e6:e0:4a:ef:7a:71:72:5f:
         58:55:f1:67:24:64:27:5c:26:81:28:b7:1f:72:75:ac:61:92:
         e9:70:17:e8:5b:40:c4:59:5c:fa:a5:9c:47:f1:80:fa:27:57:
         72:6f:f1:7c:1e:80:a1:81:c8:cb:51:11:c8:05:45:c7:f5:ee:
         53:c0:d8:76:c5:2b:27:f6:ac:94:ab:9a:94:a1:51:91:6c:a0:
         00:5e:c2:b8:05:7d:be:67:c5:17:31:27:75:d8:44:17:b4:e6:
         1f:3a:78:40:a1:fd:64:aa:da:77:67:a7:46:41:4b:81:13:2b:
         44:ff:1e:df:d1:11:2a:2e:13:47:cb:6b:37:27:43:67:f8:d2:
         cd:9a:98:e1:8c:d4:81:4a:79:23:8a:d7:06:52:3f:e7:b5:13:
         10:d1:08:57:32:97:2c:eb:aa:fd:0f:bc:c1:fb:87:f0:3b:24:
         7b:dc:e5:b9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbFo4NWUm4RDUtq5o17sHWq100yQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFBMUY4MTJEQzQzNkZCQUY4MEMwNEMxMUI0QzZBQTQw
QTM1QTg0RjAeFw0yNjA2MTIxNjMzNDlaFw0yNzA2MTExNjM4NDlaMDMxMTAvBgNV
BAMTKDFFNkZFMTlFQUFEOUQ2NjJBNjBGMUREREVDMzkxNUVBNDk0M0M3OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn0L0ZAty5gtOjakmlfLBza8jy
uSGQASVnSJEGx5Hs3UK7anjK4e4u3P19bIlDg2FzY6nCNGpcxi93w+cpgpFvoPSC
Mi2tmQJ2QKk15E45E8THchJC3u/iC6EoKIrrD1bUfTz5A7xgcwI57GKIG4hZlenF
DmQu8sCEWGGVHeqskJPpSMrqZEKhNR1DKxFBPCWvHF1TsQ81nHb1f4VZln5Kx58V
1pofGycmRlBKAcRBUnfKzgV13togcBmvPK0uJkNkkdTYRa19GzqsG4FKLteOGOHZ
ReMgBYdHAcKzCU7pcR+xaB7I6a5nbfJ4iJDLuYUyj+Ng6MS8vfxxvUqlHzfjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUHm/hnqrZ1mKmDx3d7DkV6klDx5UwHwYDVR0j
BBgwFoAUIaH4EtxDb7r4DATBG0xqpAo1qE8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2o5WW5jSkZtb3hqNVBLeEpDMURueHNzS1dKOEFoWUpZM0xaa0VLQkdW
WGovMC8yMUExRjgxMkRDNDM2RkJBRjgwQzA0QzExQjRDNkFBNDBBMzVBODRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxQTFGODEyREM0MzZGQkFG
ODBDMDRDMTFCNEM2QUE0MEEzNUE4NEYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NqOVluY0pGbW94ajVQS3hKQzFEbnhzc0tXSjhBaFlKWTNMWmtFS0JHVlhqLzAv
MzIzODMwMzQzYTM4NjE2NjM4M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNzMz
MzczMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKASK+AAwDQYJKoZIhvcNAQELBQADggEBAFpdaSDe
UZdhZmYKyaJeBpZQgKOqc6+HCX18N5n5JNtBTPN3WjRFw8+UNCS+yqQuNCn6YDhB
kzjel6OiqT1X705h2UVMY00+2nCHAT99xQ6vn7Dm4ErvenFyX1hV8WckZCdcJoEo
tx9ydaxhkulwF+hbQMRZXPqlnEfxgPonV3Jv8XwegKGByMtREcgFRcf17lPA2HbF
Kyf2rJSrmpShUZFsoABewrgFfb5nxRcxJ3XYRBe05h86eECh/WSq2ndnp0ZBS4ET
K0T/Ht/RESouE0fLazcnQ2f40s2amOGM1IFKeSOK1wZSP+e1ExDRCFcylyzrqv0P
vMH7h/A7JHvc5bk=
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:24:25 2026 by rpki-client