Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/323830343a3936343a3a2f33322d3634203d3e20323633303830.roa
File:                     323830343a3936343a3a2f33322d3634203d3e20323633303830.roa (raw, json)
Hash identifier:          j17zA/l1GvK1Q3E15s6PasYvpmfe/Inr17EsuPQatng=
Subject key identifier:   21:D0:9F:8A:1C:51:67:EA:80:8F:D1:7C:74:D3:48:FB:2E:1D:3C:E0
Certificate issuer:       /CN=883F9EED8D520E746FE5A46BDE2594C335F2E812
Certificate serial:       655AADBCB68AFFEBBAFD63E0A19CBE994F849B2F
Authority key identifier: 88:3F:9E:ED:8D:52:0E:74:6F:E5:A4:6B:DE:25:94:C3:35:F2:E8:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/883F9EED8D520E746FE5A46BDE2594C335F2E812.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/323830343a3936343a3a2f33322d3634203d3e20323633303830.roa
Signing time:             Fri 26 Jun 2026 13:09:19 +0000
ROA not before:           Fri 26 Jun 2026 13:04:19 +0000
ROA not after:            Fri 25 Jun 2027 13:09:19 +0000
asID:                     263080
IP address blocks:        2804:964::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/883F9EED8D520E746FE5A46BDE2594C335F2E812.crl
                          rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/883F9EED8D520E746FE5A46BDE2594C335F2E812.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/883F9EED8D520E746FE5A46BDE2594C335F2E812.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 15:46:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:5a:ad:bc:b6:8a:ff:eb:ba:fd:63:e0:a1:9c:be:99:4f:84:9b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=883F9EED8D520E746FE5A46BDE2594C335F2E812
        Validity
            Not Before: Jun 26 13:04:19 2026 GMT
            Not After : Jun 25 13:09:19 2027 GMT
        Subject: CN=21D09F8A1C5167EA808FD17C74D348FB2E1D3CE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:11:f5:52:87:28:17:6a:b5:30:5b:d3:93:17:
                    23:1a:5a:ba:7a:a3:86:c6:ad:a4:56:02:e3:e3:99:
                    fa:59:20:01:2c:1e:c9:73:ae:87:8e:5c:6b:c8:4d:
                    e7:ba:8b:60:e1:15:fc:37:17:ea:0a:2e:af:33:47:
                    ee:f5:35:4c:7a:41:a7:f9:02:2b:bd:5c:0e:90:ba:
                    72:3a:62:7f:38:b9:34:36:ad:7c:d7:fc:d3:18:95:
                    52:2a:04:9f:ee:d7:72:1e:46:a3:55:a8:51:ba:17:
                    00:eb:52:d0:7d:50:55:f9:f7:64:4f:51:34:17:67:
                    d0:23:9e:22:87:99:22:b8:8b:5b:0c:eb:43:2c:3a:
                    10:38:53:6f:d2:0a:3b:2a:95:d5:8f:28:64:50:63:
                    42:a7:da:38:61:7d:cb:5e:86:24:e5:77:4e:1f:0a:
                    fa:9c:ea:ca:cc:c1:1b:23:d1:a6:c2:eb:69:8b:f5:
                    21:9a:32:0c:5d:99:c6:4f:5a:ea:cb:ec:61:9f:b1:
                    b4:1d:b8:7d:4c:49:4f:70:5b:e4:9b:42:b8:a3:76:
                    f2:7f:04:ba:07:e4:7c:6d:c0:bc:d3:6f:5a:86:c7:
                    0a:1d:4c:90:63:58:47:c2:19:05:c7:bf:fc:2c:ec:
                    e4:fc:50:2b:9b:21:dc:9b:24:8a:99:9c:03:c9:03:
                    ea:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D0:9F:8A:1C:51:67:EA:80:8F:D1:7C:74:D3:48:FB:2E:1D:3C:E0
            X509v3 Authority Key Identifier:
                keyid:88:3F:9E:ED:8D:52:0E:74:6F:E5:A4:6B:DE:25:94:C3:35:F2:E8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/883F9EED8D520E746FE5A46BDE2594C335F2E812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/883F9EED8D520E746FE5A46BDE2594C335F2E812.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/323830343a3936343a3a2f33322d3634203d3e20323633303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:964::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:32:cc:bb:91:e2:5d:08:7c:b2:8a:83:46:1a:28:c3:94:51:
         36:3d:63:3c:b2:9a:3d:dd:f4:3b:16:e2:23:5d:a4:a7:22:fb:
         32:75:8b:ee:59:c6:97:c3:9d:47:31:bd:b9:b9:1d:d2:4b:5e:
         50:85:e2:75:3d:3f:a3:08:0a:76:1c:88:88:6f:d0:b0:f9:91:
         ba:3f:ab:cb:83:78:98:7e:f8:ea:df:8e:b9:11:1f:1b:0b:84:
         ed:13:be:c0:a9:ac:bb:ec:fe:cd:94:96:1e:9a:32:a6:86:88:
         3c:a0:c6:13:ca:c5:07:19:31:7b:53:49:92:6a:98:d9:bd:39:
         da:2c:53:93:f9:4f:08:43:6c:d7:e2:e2:62:45:de:48:74:98:
         c6:15:da:cb:b3:b7:42:6a:5a:dc:c8:42:a0:3c:02:87:5b:e8:
         bd:1a:74:bb:a4:0c:dd:ad:aa:85:f0:2b:7c:26:f0:ab:d5:b9:
         a8:12:89:a7:26:c1:30:88:e4:fa:e1:94:d1:ba:3c:db:32:f6:
         43:48:6c:80:aa:df:4c:ce:e9:61:7b:0d:3a:77:17:e8:cd:dd:
         ca:7d:3e:f2:f4:78:90:c2:67:09:29:20:c2:19:59:c9:fe:83:
         6c:6e:d1:ae:98:e8:7a:61:e5:9a:f1:69:62:84:38:a7:02:d6:
         74:27:a9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:06:18 2026 by rpki-client