Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a3a2f33322d3332203d3e20323635333834.roa
File:                     323830343a333334303a3a2f33322d3332203d3e20323635333834.roa (raw, json)
Hash identifier:          lUifHTQSgEYGxJDvqtJOAc4vxyx3mxBKu4Lv1keZQhg=
Subject key identifier:   35:55:0F:46:02:54:EE:A5:2E:B6:95:21:6A:4F:53:D7:75:C1:83:04
Certificate issuer:       /CN=D4BB45A596789F22A8674287C2C6BEA21D8321A6
Certificate serial:       13125CE8AFA96FCE5A03A6A8DB54F43299B90F88
Authority key identifier: D4:BB:45:A5:96:78:9F:22:A8:67:42:87:C2:C6:BE:A2:1D:83:21:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BB45A596789F22A8674287C2C6BEA21D8321A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a3a2f33322d3332203d3e20323635333834.roa
Signing time:             Thu 25 Jun 2026 12:07:17 +0000
ROA not before:           Thu 25 Jun 2026 12:02:17 +0000
ROA not after:            Thu 24 Jun 2027 12:07:17 +0000
asID:                     265384
IP address blocks:        2804:3340::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/D4BB45A596789F22A8674287C2C6BEA21D8321A6.crl
                          rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/D4BB45A596789F22A8674287C2C6BEA21D8321A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BB45A596789F22A8674287C2C6BEA21D8321A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 02:37:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:12:5c:e8:af:a9:6f:ce:5a:03:a6:a8:db:54:f4:32:99:b9:0f:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4BB45A596789F22A8674287C2C6BEA21D8321A6
        Validity
            Not Before: Jun 25 12:02:17 2026 GMT
            Not After : Jun 24 12:07:17 2027 GMT
        Subject: CN=35550F460254EEA52EB695216A4F53D775C18304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5b:93:9e:c7:08:c2:13:1b:b8:93:67:66:87:
                    a6:f0:7b:ea:4d:93:15:a1:38:78:4c:ca:90:04:31:
                    48:d1:a3:95:5e:3c:34:32:39:7d:06:d1:42:7c:38:
                    6b:68:08:92:c8:4a:de:52:6b:15:66:73:fb:18:7b:
                    fb:c2:ef:55:d5:81:cf:0c:30:d7:70:60:d1:29:75:
                    2d:c1:e3:35:01:e6:58:2c:53:27:5b:f4:85:cd:f1:
                    53:cc:63:1e:3f:e2:30:71:1a:be:8b:30:7a:10:3f:
                    f7:fd:8f:a3:18:e0:30:7a:25:3b:7d:ca:77:4d:c3:
                    d4:63:68:84:ee:b7:5d:e4:59:83:23:34:60:0e:3e:
                    e7:04:c2:ab:32:42:90:a4:8f:5e:ae:c5:fe:2c:1f:
                    1c:e3:f5:95:ef:ba:03:f3:51:51:33:f2:b1:d1:84:
                    17:90:8c:05:44:28:8b:69:a1:17:5b:f8:83:bc:a7:
                    18:89:37:81:02:8c:2c:46:62:85:fc:9c:78:79:f0:
                    8b:fd:81:36:2c:39:dc:7b:23:93:c9:8b:30:fd:1a:
                    c1:46:98:a7:f5:10:d9:db:86:94:30:2d:c8:d2:9e:
                    20:28:10:c7:30:27:bd:fd:af:44:d9:90:59:70:9e:
                    44:a3:9d:c1:5f:3b:9e:17:b3:31:53:2c:41:83:9c:
                    47:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:55:0F:46:02:54:EE:A5:2E:B6:95:21:6A:4F:53:D7:75:C1:83:04
            X509v3 Authority Key Identifier:
                keyid:D4:BB:45:A5:96:78:9F:22:A8:67:42:87:C2:C6:BE:A2:1D:83:21:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/D4BB45A596789F22A8674287C2C6BEA21D8321A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BB45A596789F22A8674287C2C6BEA21D8321A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a3a2f33322d3332203d3e20323635333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3340::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:ef:f2:02:e6:5f:25:9a:ba:ce:c1:0c:bc:73:f8:d5:cd:7e:
         71:3f:12:e3:2a:ee:e5:a4:3c:07:12:e6:04:f4:76:6b:84:42:
         d2:7d:70:fb:d6:c5:c0:00:f5:7b:a9:c6:31:b4:37:89:f8:88:
         18:08:ea:8f:e7:f6:ee:5e:f1:f6:c7:9b:ae:09:ce:3d:77:28:
         77:74:3d:05:de:2e:63:95:3a:28:ea:27:5b:51:d6:31:a0:67:
         8b:2c:7c:d3:f5:e1:7c:72:cc:64:52:9f:e2:7e:96:7a:c5:77:
         0a:da:8b:3d:b2:67:29:bb:25:f5:3f:15:08:0d:24:fd:08:9b:
         59:09:4d:f7:fc:0c:d0:34:88:e6:7e:57:bf:3a:d7:ab:b5:be:
         47:58:c7:72:6e:d3:cd:2b:cc:46:0b:39:68:5d:7c:f5:a1:17:
         df:78:ca:da:4d:a5:fe:53:7d:5f:de:ad:d1:b9:bc:a9:26:9f:
         c8:bf:6c:d8:91:1d:3b:64:f1:5b:e7:0c:8d:74:4a:bf:ab:91:
         56:a8:0d:b9:80:f5:c4:9c:54:92:b1:ce:a7:2a:49:18:05:2e:
         bf:e8:35:52:01:30:84:3a:91:58:c1:b0:6f:e2:7d:69:55:b8:
         47:74:0b:9b:ac:c0:11:30:b2:0b:3b:57:d8:75:8c:c3:d0:ba:
         e4:f8:04:bd
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUExJc6K+pb85aA6ao21T0Mpm5D4gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDRCQjQ1QTU5Njc4OUYyMkE4Njc0Mjg3QzJDNkJFQTIx
RDgzMjFBNjAeFw0yNjA2MjUxMjAyMTdaFw0yNzA2MjQxMjA3MTdaMDMxMTAvBgNV
BAMTKDM1NTUwRjQ2MDI1NEVFQTUyRUI2OTUyMTZBNEY1M0Q3NzVDMTgzMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClW5OexwjCExu4k2dmh6bwe+pN
kxWhOHhMypAEMUjRo5VePDQyOX0G0UJ8OGtoCJLISt5SaxVmc/sYe/vC71XVgc8M
MNdwYNEpdS3B4zUB5lgsUydb9IXN8VPMYx4/4jBxGr6LMHoQP/f9j6MY4DB6JTt9
yndNw9RjaITut13kWYMjNGAOPucEwqsyQpCkj16uxf4sHxzj9ZXvugPzUVEz8rHR
hBeQjAVEKItpoRdb+IO8pxiJN4ECjCxGYoX8nHh58Iv9gTYsOdx7I5PJizD9GsFG
mKf1ENnbhpQwLcjSniAoEMcwJ739r0TZkFlwnkSjncFfO54XszFTLEGDnEcnAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUNVUPRgJU7qUutpUhak9T13XBgwQwHwYDVR0j
BBgwFoAU1LtFpZZ4nyKoZ0KHwsa+oh2DIaYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk5QOGNQRDQ0VGp3ZlBXUER2cFJVM3pTeGdZSjlZVkVXQ2phaWdmY2VR
cHQvMC9ENEJCNDVBNTk2Nzg5RjIyQTg2NzQyODdDMkM2QkVBMjFEODMyMUE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0QkI0NUE1OTY3ODlGMjJB
ODY3NDI4N0MyQzZCRUEyMUQ4MzIxQTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJOUDhjUEQ0NFRqd2ZQV1BEdnBSVTN6U3hnWUo5WVZFV0NqYWlnZmNlUXB0LzAv
MzIzODMwMzQzYTMzMzMzNDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzMzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQzQDANBgkqhkiG9w0BAQsFAAOCAQEAAO/yAuZf
JZq6zsEMvHP41c1+cT8S4yru5aQ8BxLmBPR2a4RC0n1w+9bFwAD1e6nGMbQ3ifiI
GAjqj+f27l7x9sebrgnOPXcod3Q9Bd4uY5U6KOonW1HWMaBniyx80/XhfHLMZFKf
4n6WesV3CtqLPbJnKbsl9T8VCA0k/QibWQlN9/wM0DSI5n5XvzrXq7W+R1jHcm7T
zSvMRgs5aF189aEX33jK2k2l/lN9X96t0bm8qSafyL9s2JEdO2TxW+cMjXRKv6uR
VqgNuYD1xJxUkrHOpypJGAUuv+g1UgEwhDqRWMGwb+J9aVW4R3QLm6zAETCyCztX
2HWMw9C65PgEvQ==
-----END CERTIFICATE-----
Generated at Sat Jun 27 13:26:34 2026 by rpki-client