Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/323830343a323439633a3a2f33322d3438203d3e20323634323333.roa
File:                     323830343a323439633a3a2f33322d3438203d3e20323634323333.roa (raw, json)
Hash identifier:          qPhDtr8TIA9/INLcloi9qgvg1vnc/zKCaO1O1LycHhg=
Subject key identifier:   87:69:2C:53:59:0E:8B:07:E5:91:5D:22:3C:16:BE:3D:47:E9:28:A6
Certificate issuer:       /CN=1D68CECB62F0D929B81B4909208D8C9DBE6292A0
Certificate serial:       051282A58C5759FFE94124B2349844FD8CE4BB82
Authority key identifier: 1D:68:CE:CB:62:F0:D9:29:B8:1B:49:09:20:8D:8C:9D:BE:62:92:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D68CECB62F0D929B81B4909208D8C9DBE6292A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/323830343a323439633a3a2f33322d3438203d3e20323634323333.roa
Signing time:             Mon 01 Jun 2026 18:16:16 +0000
ROA not before:           Mon 01 Jun 2026 18:11:16 +0000
ROA not after:            Mon 31 May 2027 18:16:16 +0000
asID:                     264233
IP address blocks:        2804:249c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/1D68CECB62F0D929B81B4909208D8C9DBE6292A0.crl
                          rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/1D68CECB62F0D929B81B4909208D8C9DBE6292A0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D68CECB62F0D929B81B4909208D8C9DBE6292A0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 02:20:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:12:82:a5:8c:57:59:ff:e9:41:24:b2:34:98:44:fd:8c:e4:bb:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D68CECB62F0D929B81B4909208D8C9DBE6292A0
        Validity
            Not Before: Jun  1 18:11:16 2026 GMT
            Not After : May 31 18:16:16 2027 GMT
        Subject: CN=87692C53590E8B07E5915D223C16BE3D47E928A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:51:45:84:0d:9b:6a:e2:b3:db:a0:0a:94:e0:
                    9f:99:22:f5:ee:0f:92:5a:0f:ec:7b:62:2e:48:a7:
                    ea:0e:50:a0:ba:c7:72:30:35:78:1e:00:33:88:02:
                    fa:93:27:aa:ac:40:c4:0e:84:2d:7a:63:cf:9b:77:
                    b9:00:85:0c:34:c3:f5:a0:86:96:46:94:2e:19:9c:
                    ae:45:aa:95:65:52:3c:34:4f:fd:1b:99:98:ba:3a:
                    ff:59:f5:21:39:9d:2c:df:10:ee:9c:89:d3:a7:02:
                    b5:dd:07:bb:20:ef:74:d7:61:81:84:60:5e:2e:73:
                    f9:f9:1e:9d:e0:ca:55:d5:07:23:c0:a8:b8:ed:d8:
                    b2:5a:3a:b1:d3:2f:59:cb:e8:89:fa:22:cb:16:28:
                    86:be:ca:17:6d:b7:48:02:db:a8:1a:bc:97:7e:58:
                    d0:22:c9:48:03:be:db:46:3a:14:e0:c7:06:26:bc:
                    44:30:13:cb:ef:d8:f9:b9:99:83:d6:33:d5:5a:75:
                    8a:39:7a:eb:2c:29:06:e0:9c:77:67:47:97:e9:0b:
                    1f:18:17:ca:65:36:5b:27:ff:ef:b2:85:5f:18:71:
                    07:fa:51:d9:a2:13:5e:6d:f6:bd:c5:97:92:03:a7:
                    81:de:1b:0f:7e:4f:b5:cb:fc:25:7e:5f:1c:47:87:
                    21:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:69:2C:53:59:0E:8B:07:E5:91:5D:22:3C:16:BE:3D:47:E9:28:A6
            X509v3 Authority Key Identifier:
                keyid:1D:68:CE:CB:62:F0:D9:29:B8:1B:49:09:20:8D:8C:9D:BE:62:92:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/1D68CECB62F0D929B81B4909208D8C9DBE6292A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D68CECB62F0D929B81B4909208D8C9DBE6292A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/323830343a323439633a3a2f33322d3438203d3e20323634323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:249c::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:c8:32:5b:d8:2e:bd:9c:cd:23:2f:a8:35:e3:cb:d5:45:ec:
         12:2a:24:6f:98:f6:0f:d1:90:e4:63:0f:54:a4:b0:3a:e7:31:
         42:de:c1:2e:9f:13:0e:ab:0f:0c:7f:25:bc:63:f9:10:4b:20:
         16:71:c0:8f:89:d1:45:a8:37:96:5a:c2:50:92:b9:d0:38:b6:
         32:d0:12:df:d4:5a:d8:31:3b:37:75:31:80:ed:b0:f9:a5:7c:
         cf:a6:2c:fe:eb:b6:90:e4:1b:37:a6:f9:4a:34:a8:da:86:c8:
         88:cc:6f:c2:65:fb:17:77:41:e2:1e:09:cf:d2:da:e5:68:cc:
         1e:59:a8:89:b9:2c:ee:56:a8:40:79:a2:9e:41:1f:f9:1a:6c:
         08:68:cb:d2:4f:0e:4f:eb:e0:cf:1a:e3:7a:04:d3:bd:ca:47:
         c9:63:e3:c3:f9:1d:33:ae:e6:75:a9:87:e9:e2:53:8b:e6:83:
         b5:cb:05:ef:b6:1a:eb:31:4b:23:6f:14:72:7b:05:7f:13:cc:
         d2:71:da:3e:6c:f3:3a:fb:55:3c:71:65:74:17:ff:0f:6a:a4:
         12:f4:31:ea:50:71:94:b0:ef:9d:5e:d3:e2:71:1d:c9:11:1d:
         94:37:0e:d2:a3:de:29:1d:8a:7c:bb:9f:da:06:01:16:8b:ad:
         52:f2:87:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 03:35:51 2026 by rpki-client