Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/13FZ8aVq5AEToR3nsCz4ZUb12TPbW5khVAq9FNGDu47r/0/323830343a356461303a3a2f33322d3438203d3e20323133343936.roa
File:                     323830343a356461303a3a2f33322d3438203d3e20323133343936.roa (raw, json)
Hash identifier:          6siT5RWr6mvTntTlMbZSYzVukaHMsV+toO4R7fP2+qY=
Subject key identifier:   8C:66:9A:1B:15:1D:0D:03:8F:D9:44:F1:C0:61:C9:8E:28:49:C1:0B
Certificate issuer:       /CN=0AEC26295A21DF55C14EF28131233747E60E500B
Certificate serial:       2B05E9444352BC51C589F36E40E66812C092AC17
Authority key identifier: 0A:EC:26:29:5A:21:DF:55:C1:4E:F2:81:31:23:37:47:E6:0E:50:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AEC26295A21DF55C14EF28131233747E60E500B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/13FZ8aVq5AEToR3nsCz4ZUb12TPbW5khVAq9FNGDu47r/0/323830343a356461303a3a2f33322d3438203d3e20323133343936.roa
Signing time:             Fri 19 Jun 2026 12:10:40 +0000
ROA not before:           Fri 19 Jun 2026 12:05:40 +0000
ROA not after:            Fri 18 Jun 2027 12:10:40 +0000
asID:                     213496
IP address blocks:        2804:5da0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/13FZ8aVq5AEToR3nsCz4ZUb12TPbW5khVAq9FNGDu47r/0/0AEC26295A21DF55C14EF28131233747E60E500B.crl
                          rsync://rpki-repo.registro.br/repo/13FZ8aVq5AEToR3nsCz4ZUb12TPbW5khVAq9FNGDu47r/0/0AEC26295A21DF55C14EF28131233747E60E500B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AEC26295A21DF55C14EF28131233747E60E500B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Jun 2026 00:08:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:05:e9:44:43:52:bc:51:c5:89:f3:6e:40:e6:68:12:c0:92:ac:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AEC26295A21DF55C14EF28131233747E60E500B
        Validity
            Not Before: Jun 19 12:05:40 2026 GMT
            Not After : Jun 18 12:10:40 2027 GMT
        Subject: CN=8C669A1B151D0D038FD944F1C061C98E2849C10B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:6a:92:41:ce:e1:8f:e4:9b:45:c7:68:5c:3b:
                    10:28:a3:ae:71:38:27:08:43:72:eb:ea:4e:a4:83:
                    f3:d8:0f:2e:ed:69:b9:90:27:55:14:23:26:87:7b:
                    cc:ab:8e:fb:18:6a:0a:e1:7e:67:8e:91:69:33:6f:
                    0b:94:6c:67:3a:4c:6c:56:68:13:6b:a8:2d:33:13:
                    c4:eb:c6:8e:1b:cd:d9:7f:4f:11:6e:77:40:8d:95:
                    5a:a6:30:70:5a:62:0f:26:c1:8f:41:da:be:21:dd:
                    c1:20:7f:26:dd:ac:15:14:72:d6:de:ad:6f:48:aa:
                    96:ae:ae:32:e5:b7:e1:76:50:64:b4:f9:c2:94:05:
                    ac:94:fa:00:d4:1b:04:4d:71:50:cf:16:e0:26:38:
                    ec:8d:95:c2:1c:7d:c7:0d:be:97:2e:28:dd:c1:d2:
                    a2:3d:8c:41:32:ab:2e:2b:28:f9:00:3b:ab:a4:79:
                    b5:b5:fb:0b:19:f2:66:bb:12:86:e0:44:8b:65:6a:
                    16:a8:8f:23:69:93:86:49:ba:03:0a:70:3b:df:cb:
                    81:72:15:43:b2:d6:76:75:36:36:92:1e:24:5c:94:
                    ed:a6:bd:15:63:13:88:15:88:71:62:8b:5d:76:a4:
                    2a:3c:0d:fd:b4:4c:97:dc:ea:e4:28:eb:26:c4:06:
                    80:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:66:9A:1B:15:1D:0D:03:8F:D9:44:F1:C0:61:C9:8E:28:49:C1:0B
            X509v3 Authority Key Identifier:
                keyid:0A:EC:26:29:5A:21:DF:55:C1:4E:F2:81:31:23:37:47:E6:0E:50:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/13FZ8aVq5AEToR3nsCz4ZUb12TPbW5khVAq9FNGDu47r/0/0AEC26295A21DF55C14EF28131233747E60E500B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AEC26295A21DF55C14EF28131233747E60E500B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/13FZ8aVq5AEToR3nsCz4ZUb12TPbW5khVAq9FNGDu47r/0/323830343a356461303a3a2f33322d3438203d3e20323133343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5da0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:d7:c4:3f:e2:24:1d:37:cc:2c:28:8d:8d:ba:d0:9b:34:54:
         9e:98:77:58:bf:8c:23:cc:e1:7c:96:3c:94:ba:b8:96:ce:5e:
         d5:23:44:af:7e:9e:d2:d2:88:81:27:16:88:fc:88:a1:93:d3:
         d5:06:96:99:82:54:b3:13:b5:9a:5a:f0:09:45:73:0f:a2:eb:
         d8:74:a4:67:03:ee:cc:86:0d:79:7d:2d:20:5b:ef:64:91:93:
         6b:d0:53:e1:0e:5a:00:a4:52:4e:9b:4f:9a:77:5f:7d:0d:25:
         a0:78:2a:97:13:a3:67:ac:8e:ea:ed:9d:b0:f3:99:27:7e:7a:
         1e:b0:29:8b:59:e0:cc:c4:63:52:7c:0e:3a:f8:0b:da:81:57:
         5c:38:f6:2d:4c:65:d2:cd:6b:24:80:3b:c6:fd:cc:9a:5e:6e:
         9c:88:90:72:ee:53:7c:ae:5f:f4:ad:b9:b5:86:c1:fe:20:12:
         63:d6:16:e8:da:d8:a6:67:a1:7f:cc:9b:8a:47:3c:1c:f4:c5:
         f1:27:8b:b1:f2:55:23:a4:e4:ea:61:fc:73:0e:5e:7d:86:db:
         ee:fe:7f:75:38:ed:07:4a:f2:1c:fe:8f:a7:7c:66:55:cd:c3:
         21:de:8a:b8:d7:fb:ff:10:f3:59:d3:ee:34:c7:02:c4:e5:4c:
         59:10:31:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 10:54:41 2026 by rpki-client