Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/323830343a383635343a383030303a3a2f33332d3333203d3e20323732363336.roa
File:                     323830343a383635343a383030303a3a2f33332d3333203d3e20323732363336.roa (raw, json)
Hash identifier:          yq2JfeU4riqwSh2sG7rT1D9Ha4OrGzqCVfIMKsM5/ag=
Subject key identifier:   09:58:65:C4:68:C3:89:5B:E5:35:96:59:61:95:B4:AE:8F:6B:70:1B
Certificate issuer:       /CN=F9D7850D070C4CB50D1E75E387695E15A0C47E7E
Certificate serial:       6AACE90932C787D7D0C9E807FC6AF03991553F1F
Authority key identifier: F9:D7:85:0D:07:0C:4C:B5:0D:1E:75:E3:87:69:5E:15:A0:C4:7E:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9D7850D070C4CB50D1E75E387695E15A0C47E7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/323830343a383635343a383030303a3a2f33332d3333203d3e20323732363336.roa
Signing time:             Wed 17 Jun 2026 03:09:03 +0000
ROA not before:           Wed 17 Jun 2026 03:04:03 +0000
ROA not after:            Wed 16 Jun 2027 03:09:03 +0000
asID:                     272636
IP address blocks:        2804:8654:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/F9D7850D070C4CB50D1E75E387695E15A0C47E7E.crl
                          rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/F9D7850D070C4CB50D1E75E387695E15A0C47E7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9D7850D070C4CB50D1E75E387695E15A0C47E7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 09:40:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ac:e9:09:32:c7:87:d7:d0:c9:e8:07:fc:6a:f0:39:91:55:3f:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9D7850D070C4CB50D1E75E387695E15A0C47E7E
        Validity
            Not Before: Jun 17 03:04:03 2026 GMT
            Not After : Jun 16 03:09:03 2027 GMT
        Subject: CN=095865C468C3895BE53596596195B4AE8F6B701B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9b:50:28:98:26:67:82:fd:94:04:1a:8a:c1:
                    ad:95:fe:4f:c9:d4:e8:f0:88:41:9d:30:46:82:d7:
                    f7:11:b7:8f:91:a8:c4:c9:81:4d:a5:ad:f7:f7:c1:
                    e4:f9:a1:80:ac:6a:4b:2e:2a:61:2d:04:4b:86:5f:
                    e6:dd:54:82:1e:eb:ed:fb:51:2e:5e:cf:eb:45:10:
                    84:20:8d:5d:e2:d8:4b:ff:13:03:5a:82:3f:0a:be:
                    bb:94:25:84:26:b4:d8:a7:b9:08:25:83:94:45:f3:
                    92:70:43:d9:bf:41:fb:e4:94:06:39:cd:c7:20:46:
                    53:fb:99:5b:e9:dd:d6:04:94:d2:ba:6c:5b:bf:8b:
                    fe:4a:32:95:2f:e9:d7:3b:37:aa:64:f0:c9:35:6c:
                    40:0c:1e:db:b3:d6:54:bf:db:e9:54:56:69:53:59:
                    9e:3e:f2:05:69:d1:c4:19:04:84:41:6e:20:e6:99:
                    70:17:73:f1:fa:f6:f4:71:09:e3:05:19:d7:d4:1b:
                    64:20:d6:37:28:86:97:86:f4:fc:06:7e:25:1b:51:
                    8d:36:ee:6b:35:85:51:4e:8f:6b:1b:95:d2:7c:9d:
                    09:13:47:16:b4:bf:c6:b9:2b:58:b7:16:5d:6b:2b:
                    1b:f3:a5:61:c3:f1:65:8b:53:51:dd:49:fa:3e:f6:
                    3b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:58:65:C4:68:C3:89:5B:E5:35:96:59:61:95:B4:AE:8F:6B:70:1B
            X509v3 Authority Key Identifier:
                keyid:F9:D7:85:0D:07:0C:4C:B5:0D:1E:75:E3:87:69:5E:15:A0:C4:7E:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/F9D7850D070C4CB50D1E75E387695E15A0C47E7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9D7850D070C4CB50D1E75E387695E15A0C47E7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/323830343a383635343a383030303a3a2f33332d3333203d3e20323732363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8654:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         ac:16:e8:bc:57:bd:60:29:6e:03:fe:29:29:5c:cb:72:b0:6b:
         4f:dd:78:24:cb:6c:54:d5:6a:71:93:e2:40:81:90:51:00:aa:
         4b:dc:86:54:1e:07:e9:0f:49:7e:72:8a:3d:89:78:bc:b1:a9:
         b2:8d:e7:e5:8c:be:1f:05:90:61:d3:45:62:4f:80:bc:a3:61:
         d4:06:72:ec:8a:8d:11:17:77:e3:2c:2a:cf:24:7e:29:2d:55:
         bd:88:53:b5:5a:b5:2f:f6:d8:98:44:4c:77:e7:b4:d1:5d:d4:
         3c:2c:12:d9:2b:a4:b1:2a:2d:73:7f:be:49:0b:65:eb:bf:79:
         72:32:b7:64:ed:67:52:f7:3c:b7:ac:e9:9b:c7:df:aa:52:1e:
         59:4d:50:31:cb:8d:2d:75:06:17:78:0d:da:c4:b0:a7:11:21:
         3d:c3:ae:60:1c:2f:46:8c:6d:d4:f0:7d:90:da:31:31:75:db:
         dd:a5:a1:f8:f8:90:97:a1:1e:79:81:e8:54:ef:cf:5c:c3:4c:
         bf:c3:5a:85:89:84:80:ff:c7:b4:c6:1a:ad:d0:91:77:03:a7:
         30:dd:92:10:7b:a6:ae:77:6b:19:34:a0:59:52:7b:3f:55:e6:
         ae:5e:db:9b:83:1b:4f:c4:4c:26:2f:f7:41:e8:88:2e:ee:ce:
         d7:37:c9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:13:35 2026 by rpki-client