Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fsnu97xsy8dojFcnRPqdwEKYwFjPAtgcBJkuUt5tjjAi/0/323830343a326631633a3a2f33322d3438203d3e20323634383732.roa
File:                     323830343a326631633a3a2f33322d3438203d3e20323634383732.roa (raw, json)
Hash identifier:          Bt+JCXR2fw0t69ZwZatzHh735oLcEdOjLrX8OOaVC4E=
Subject key identifier:   2B:53:F4:92:A5:33:66:7D:91:24:EA:09:1E:44:6E:82:6C:5E:64:E6
Certificate issuer:       /CN=FE0C34B5C9F39562DC96D2A8B956D6CB62EC81F1
Certificate serial:       564ACDBB9BA321733608C611969A7EC7226854FE
Authority key identifier: FE:0C:34:B5:C9:F3:95:62:DC:96:D2:A8:B9:56:D6:CB:62:EC:81:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE0C34B5C9F39562DC96D2A8B956D6CB62EC81F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fsnu97xsy8dojFcnRPqdwEKYwFjPAtgcBJkuUt5tjjAi/0/323830343a326631633a3a2f33322d3438203d3e20323634383732.roa
Signing time:             Tue 02 Jun 2026 17:18:21 +0000
ROA not before:           Tue 02 Jun 2026 17:13:21 +0000
ROA not after:            Tue 01 Jun 2027 17:18:21 +0000
asID:                     264872
IP address blocks:        2804:2f1c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fsnu97xsy8dojFcnRPqdwEKYwFjPAtgcBJkuUt5tjjAi/0/FE0C34B5C9F39562DC96D2A8B956D6CB62EC81F1.crl
                          rsync://rpki-repo.registro.br/repo/Fsnu97xsy8dojFcnRPqdwEKYwFjPAtgcBJkuUt5tjjAi/0/FE0C34B5C9F39562DC96D2A8B956D6CB62EC81F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE0C34B5C9F39562DC96D2A8B956D6CB62EC81F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 04:43:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:4a:cd:bb:9b:a3:21:73:36:08:c6:11:96:9a:7e:c7:22:68:54:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE0C34B5C9F39562DC96D2A8B956D6CB62EC81F1
        Validity
            Not Before: Jun  2 17:13:21 2026 GMT
            Not After : Jun  1 17:18:21 2027 GMT
        Subject: CN=2B53F492A533667D9124EA091E446E826C5E64E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d0:35:4c:ab:de:56:01:4d:da:eb:7f:68:0d:
                    72:5a:e0:2d:cd:8e:bb:01:88:c1:b8:7f:52:e6:84:
                    31:1c:57:8c:db:e1:34:44:7c:65:b3:e8:02:9e:c3:
                    46:25:1b:02:7c:00:b8:88:df:dd:87:5a:9c:41:e5:
                    71:ca:5e:84:25:35:94:6d:98:31:22:ab:03:92:8b:
                    e1:66:2e:fc:32:c1:f2:61:eb:76:ec:0b:9c:3e:b3:
                    46:87:f3:0a:63:89:e3:e7:80:1e:af:00:2f:5b:78:
                    41:5a:e7:d1:71:05:b1:76:6d:45:69:85:ff:5c:27:
                    b7:ba:d5:73:85:47:12:9d:d2:53:0e:78:b3:ce:3b:
                    d7:6e:88:9b:42:1c:58:75:0a:ea:5d:5c:dc:36:76:
                    5d:b7:ce:a3:9c:53:87:0a:70:a3:c7:df:a7:c1:aa:
                    96:f7:3f:3d:31:fb:41:db:3e:9f:7a:01:df:63:82:
                    33:9f:bd:f7:38:d4:b8:95:9f:f6:36:49:0b:6b:16:
                    bb:5e:ca:7e:e0:42:6e:89:4b:d2:0f:0d:d4:ca:ba:
                    c6:e4:65:8d:8c:fe:13:45:6d:f0:d3:79:db:52:be:
                    f1:6a:dd:94:a0:2d:7b:5d:e4:12:a6:2b:b8:ae:de:
                    f0:8b:ef:56:7a:8b:d2:69:5f:46:1e:ce:40:4b:6c:
                    7a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:53:F4:92:A5:33:66:7D:91:24:EA:09:1E:44:6E:82:6C:5E:64:E6
            X509v3 Authority Key Identifier:
                keyid:FE:0C:34:B5:C9:F3:95:62:DC:96:D2:A8:B9:56:D6:CB:62:EC:81:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fsnu97xsy8dojFcnRPqdwEKYwFjPAtgcBJkuUt5tjjAi/0/FE0C34B5C9F39562DC96D2A8B956D6CB62EC81F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE0C34B5C9F39562DC96D2A8B956D6CB62EC81F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fsnu97xsy8dojFcnRPqdwEKYwFjPAtgcBJkuUt5tjjAi/0/323830343a326631633a3a2f33322d3438203d3e20323634383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:bf:79:0f:c8:a6:3b:1e:9c:57:48:d2:ae:4b:73:19:ed:79:
         45:67:92:7a:57:d1:79:20:b7:67:ff:6e:11:5c:b9:ca:ce:0b:
         a3:8e:d6:16:7d:c4:da:50:7c:54:fa:f4:57:54:95:cb:b2:f9:
         68:03:d6:67:df:3a:53:c2:76:f0:4a:26:b7:0b:3c:cc:40:88:
         f5:8e:8f:14:62:00:d0:66:e9:67:cb:8e:5f:8d:ad:f3:07:03:
         0c:92:0f:17:65:f5:47:1c:83:b9:ea:0d:70:5c:1f:42:3b:dc:
         69:35:19:ab:75:b9:09:21:1a:2b:71:40:0e:46:80:4e:92:63:
         51:bc:60:9f:bb:79:8b:39:31:b3:59:a9:25:65:3b:53:7c:59:
         d8:65:db:64:db:57:2d:dc:e3:a2:e4:36:8f:b6:fe:e9:17:48:
         f7:20:ac:d8:50:f0:3e:88:92:60:c4:2f:43:b8:d2:9f:6d:a7:
         4f:1e:20:2d:ad:01:be:d8:8b:24:a8:eb:06:67:72:4b:fe:56:
         96:72:c2:c4:2d:9c:db:70:3f:54:72:8b:c1:14:ac:89:77:88:
         81:10:b3:0f:af:2a:b9:d3:24:10:d5:02:d3:5b:f1:7a:73:43:
         a8:ea:ea:f7:4e:32:4d:dc:ae:83:d1:40:d5:bb:60:fc:93:22:
         d7:9b:5e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:14:23 2026 by rpki-client