Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3rYso9UxzuVQRCvNvFyc3b9VokRquc3NGrVZo2mihkqd/0/323830343a363536343a3a2f33322d3438203d3e20323639343837.roa
File:                     323830343a363536343a3a2f33322d3438203d3e20323639343837.roa (raw, json)
Hash identifier:          4zuRhm2x9aDpjy6HepZNMcfbXJ8gbPuwTAdFPmeIEE4=
Subject key identifier:   A9:93:82:7B:8D:DF:19:48:A7:60:60:3D:5C:3F:3F:2B:74:DC:F0:73
Certificate issuer:       /CN=AC3A83C831E0DC7C8B6A3F9A89EFDC98AE328DD0
Certificate serial:       69F385B4DA8432AC94A9F2238DA75A599E2365BB
Authority key identifier: AC:3A:83:C8:31:E0:DC:7C:8B:6A:3F:9A:89:EF:DC:98:AE:32:8D:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC3A83C831E0DC7C8B6A3F9A89EFDC98AE328DD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rYso9UxzuVQRCvNvFyc3b9VokRquc3NGrVZo2mihkqd/0/323830343a363536343a3a2f33322d3438203d3e20323639343837.roa
Signing time:             Sat 16 May 2026 12:18:54 +0000
ROA not before:           Sat 16 May 2026 12:13:54 +0000
ROA not after:            Sat 15 May 2027 12:18:54 +0000
asID:                     269487
IP address blocks:        2804:6564::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3rYso9UxzuVQRCvNvFyc3b9VokRquc3NGrVZo2mihkqd/0/AC3A83C831E0DC7C8B6A3F9A89EFDC98AE328DD0.crl
                          rsync://rpki-repo.registro.br/repo/3rYso9UxzuVQRCvNvFyc3b9VokRquc3NGrVZo2mihkqd/0/AC3A83C831E0DC7C8B6A3F9A89EFDC98AE328DD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC3A83C831E0DC7C8B6A3F9A89EFDC98AE328DD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 10:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:f3:85:b4:da:84:32:ac:94:a9:f2:23:8d:a7:5a:59:9e:23:65:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC3A83C831E0DC7C8B6A3F9A89EFDC98AE328DD0
        Validity
            Not Before: May 16 12:13:54 2026 GMT
            Not After : May 15 12:18:54 2027 GMT
        Subject: CN=A993827B8DDF1948A760603D5C3F3F2B74DCF073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c9:86:e0:a1:f7:3a:4d:7c:97:01:8f:bc:8d:
                    8b:ae:81:5d:74:0f:57:4a:b2:ea:2b:ab:94:2e:6c:
                    a6:cc:6e:41:bc:5e:9e:58:4d:d1:92:11:ff:4e:ab:
                    b5:50:74:fa:c6:86:dc:dd:9b:30:6c:6c:28:9e:93:
                    2f:3b:30:06:ac:e7:45:7e:46:e8:f0:4c:65:7a:c1:
                    e8:5b:d2:36:fa:5c:4c:83:78:56:1e:d1:e3:c8:36:
                    10:0c:79:8b:81:01:4b:66:74:1a:74:e5:a2:0c:08:
                    f5:51:b9:24:13:fa:47:11:cb:7d:13:3f:d8:ed:c8:
                    ee:ac:0e:7d:ce:08:af:54:ea:83:ea:74:a9:2e:4f:
                    ca:e5:65:70:12:e0:bb:68:c6:a1:e1:d4:b6:0d:bb:
                    7a:e8:ae:f5:91:18:ff:a1:11:72:3d:16:f9:f7:d5:
                    7f:b9:90:e3:97:c8:bf:d8:4c:e9:48:81:6e:cc:f1:
                    28:de:2c:8f:92:90:6b:7a:07:79:a8:47:8d:1a:01:
                    b9:8a:65:1d:2a:ab:33:1c:62:b4:38:91:b2:c1:a3:
                    50:4e:6e:a3:8d:29:b3:86:48:dd:4c:80:95:87:20:
                    0d:aa:92:c9:87:7b:75:3a:f8:e7:b2:ef:2d:7e:2a:
                    3a:15:95:b9:0f:eb:42:d8:cf:e1:c2:50:a7:33:29:
                    bc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:93:82:7B:8D:DF:19:48:A7:60:60:3D:5C:3F:3F:2B:74:DC:F0:73
            X509v3 Authority Key Identifier:
                keyid:AC:3A:83:C8:31:E0:DC:7C:8B:6A:3F:9A:89:EF:DC:98:AE:32:8D:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rYso9UxzuVQRCvNvFyc3b9VokRquc3NGrVZo2mihkqd/0/AC3A83C831E0DC7C8B6A3F9A89EFDC98AE328DD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC3A83C831E0DC7C8B6A3F9A89EFDC98AE328DD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rYso9UxzuVQRCvNvFyc3b9VokRquc3NGrVZo2mihkqd/0/323830343a363536343a3a2f33322d3438203d3e20323639343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6564::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:7c:4a:e4:c0:8b:e4:02:7c:ce:ce:34:84:e3:fa:23:cf:c3:
         b9:41:fa:49:e5:c6:e1:b6:bd:70:80:3c:83:27:07:41:29:95:
         17:2e:d9:ac:b9:23:cd:21:b9:47:12:fc:80:01:15:b2:5c:78:
         fb:80:07:6f:ef:b5:07:2e:42:c0:e6:9d:39:04:de:a2:06:12:
         d3:54:06:5d:8a:d2:b9:b1:59:e8:22:44:ee:19:bc:88:bd:73:
         83:1a:52:07:21:7c:3e:6c:e6:58:86:7c:45:63:43:6c:e4:1e:
         6c:85:7e:72:52:98:fe:4a:4c:7d:91:60:ef:e8:86:32:d2:1e:
         36:40:0f:0f:4b:6a:b0:8e:40:dd:49:c1:d1:74:a5:bf:36:f4:
         ea:e6:fc:9f:c2:28:46:2a:33:b9:a5:73:23:33:ec:a4:ef:7c:
         f4:c2:63:a0:ec:ff:00:b9:84:bb:09:0a:5e:b9:f5:dc:9a:91:
         bc:ba:8d:59:e8:7e:5e:e0:dc:50:57:54:da:7c:ef:f2:70:b9:
         fe:1b:96:88:0a:ea:ef:5b:1f:df:f6:7b:b4:e7:4b:65:fb:f6:
         18:1c:19:6f:6a:55:e9:69:10:36:74:57:43:c7:fd:3e:b0:cb:
         eb:51:66:65:93:e2:b9:e9:de:a6:19:f8:c3:6b:aa:5a:f3:cb:
         49:32:f3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:06:40 2026 by rpki-client