Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/323830343a3930383a3a2f33322d3438203d3e20323633303437.roa
File:                     323830343a3930383a3a2f33322d3438203d3e20323633303437.roa (raw, json)
Hash identifier:          O3ToXrJZ680Wsd4JMp97ndKX0Pg3aJTUFFZD12TWB8w=
Subject key identifier:   57:48:58:09:06:50:B8:B7:22:1F:75:99:85:68:B3:1A:45:C8:73:DB
Certificate issuer:       /CN=953D3B8F2A529D58CD089958DDC510BFFCC2B0B4
Certificate serial:       433C704AF22B26469FCCE04B095FEB5E31AB8732
Authority key identifier: 95:3D:3B:8F:2A:52:9D:58:CD:08:99:58:DD:C5:10:BF:FC:C2:B0:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/953D3B8F2A529D58CD089958DDC510BFFCC2B0B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/323830343a3930383a3a2f33322d3438203d3e20323633303437.roa
Signing time:             Mon 15 Jun 2026 22:12:00 +0000
ROA not before:           Mon 15 Jun 2026 22:07:00 +0000
ROA not after:            Mon 14 Jun 2027 22:12:00 +0000
asID:                     263047
IP address blocks:        2804:908::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/953D3B8F2A529D58CD089958DDC510BFFCC2B0B4.crl
                          rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/953D3B8F2A529D58CD089958DDC510BFFCC2B0B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/953D3B8F2A529D58CD089958DDC510BFFCC2B0B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 07:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:3c:70:4a:f2:2b:26:46:9f:cc:e0:4b:09:5f:eb:5e:31:ab:87:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=953D3B8F2A529D58CD089958DDC510BFFCC2B0B4
        Validity
            Not Before: Jun 15 22:07:00 2026 GMT
            Not After : Jun 14 22:12:00 2027 GMT
        Subject: CN=574858090650B8B7221F75998568B31A45C873DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a4:b8:50:d6:d0:5c:f7:2b:c9:b6:33:4a:d8:
                    27:9f:3b:86:7b:26:b1:36:b3:7d:7a:78:62:72:d0:
                    03:c0:64:c8:39:48:44:f6:44:97:3f:38:19:73:07:
                    d2:e9:32:5a:b1:2e:66:ea:a3:62:98:94:d8:56:28:
                    04:3f:b6:e6:a8:e2:38:82:a3:40:c0:ca:e0:13:6b:
                    18:32:18:9b:e1:4a:e2:7c:51:e1:94:32:b5:17:78:
                    2d:1f:cd:7a:a4:1d:68:32:c7:47:26:6d:9f:a7:f2:
                    b4:2c:af:9d:b1:ad:4f:c1:be:2e:2c:28:27:ac:93:
                    91:7d:13:b8:b3:b7:f8:72:6a:a9:5f:13:e5:96:8c:
                    ed:f1:0c:7b:90:24:84:07:60:99:b8:d6:0d:ac:70:
                    d0:52:9e:6e:9a:fc:c4:92:c2:90:7f:c4:81:02:f4:
                    69:e3:ff:45:00:b0:52:cf:46:a3:47:1f:87:d8:63:
                    a7:69:c0:16:f1:85:e4:5f:32:e9:86:a3:b7:0d:4a:
                    31:9b:c2:45:a8:16:4c:b9:d4:69:32:74:a9:f1:ba:
                    0d:f2:d1:6e:f5:04:6a:a0:a0:ed:09:81:fc:8c:73:
                    90:52:7d:f1:30:05:6d:70:5c:90:ea:72:2d:6d:cb:
                    75:13:b8:93:8a:5c:fe:a4:7d:61:c9:48:7a:e8:1a:
                    d9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:48:58:09:06:50:B8:B7:22:1F:75:99:85:68:B3:1A:45:C8:73:DB
            X509v3 Authority Key Identifier:
                keyid:95:3D:3B:8F:2A:52:9D:58:CD:08:99:58:DD:C5:10:BF:FC:C2:B0:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/953D3B8F2A529D58CD089958DDC510BFFCC2B0B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/953D3B8F2A529D58CD089958DDC510BFFCC2B0B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/323830343a3930383a3a2f33322d3438203d3e20323633303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:908::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:3f:aa:43:b9:ed:3b:83:87:05:7a:45:e1:8f:9e:88:86:fa:
         16:25:26:f4:eb:c8:75:bc:46:f5:5a:a6:63:8c:8c:5e:e0:1d:
         5d:e3:97:0c:db:54:84:65:57:c9:56:6f:2e:8f:01:8f:8f:73:
         42:34:0a:44:21:eb:6f:91:05:3d:4c:13:4b:e2:54:7f:a6:be:
         07:b5:6a:c6:a6:98:ce:c7:3a:d8:52:db:bb:b0:58:9e:84:d2:
         8b:44:83:01:25:26:49:65:ab:f9:69:29:e4:da:f7:fb:68:e4:
         d6:96:08:4c:d4:cd:18:03:cf:f6:1f:3a:47:f4:d3:95:ea:93:
         1e:78:c0:2f:2e:b3:19:30:c5:7f:2a:d5:23:f9:f3:0e:85:e6:
         fa:21:a0:eb:87:a6:4f:2b:9f:2a:16:79:80:fe:b6:5e:a4:a6:
         2f:01:54:94:95:e9:d8:88:79:87:82:0e:e9:4b:da:dc:4b:66:
         a4:55:bb:f2:de:d2:6e:e0:d3:23:d6:b2:4d:73:76:e1:7c:09:
         82:62:c6:3a:fe:52:df:8d:02:9d:92:7d:36:38:d0:21:0f:d0:
         d8:53:13:99:56:ba:ea:6f:3a:5b:03:33:71:d9:37:8d:81:ba:
         a7:10:4a:db:89:2d:8a:d2:ac:ae:7b:02:e3:f9:40:5f:15:55:
         e8:b4:1b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:10:10 2026 by rpki-client