Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/323830343a353032633a3a2f33322d3334203d3e20323638333733.roa
File:                     323830343a353032633a3a2f33322d3334203d3e20323638333733.roa (raw, json)
Hash identifier:          HuoIzDwi1TYAthRrOzhb3wlCFV18J9U+x5Dh4LmZ5IU=
Subject key identifier:   8E:8D:C8:DF:56:FA:9D:DE:EC:14:75:CC:00:3B:57:1D:DE:31:96:C0
Certificate issuer:       /CN=8E2334D7F435218178622D970251CC10EE3F159C
Certificate serial:       2B8DD179129549876FC204BFA45C6FA6753D53B6
Authority key identifier: 8E:23:34:D7:F4:35:21:81:78:62:2D:97:02:51:CC:10:EE:3F:15:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E2334D7F435218178622D970251CC10EE3F159C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/323830343a353032633a3a2f33322d3334203d3e20323638333733.roa
Signing time:             Tue 16 Jun 2026 19:26:20 +0000
ROA not before:           Tue 16 Jun 2026 19:21:20 +0000
ROA not after:            Tue 15 Jun 2027 19:26:20 +0000
asID:                     268373
IP address blocks:        2804:502c::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/8E2334D7F435218178622D970251CC10EE3F159C.crl
                          rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/8E2334D7F435218178622D970251CC10EE3F159C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E2334D7F435218178622D970251CC10EE3F159C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 27 Jun 2026 20:04:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:8d:d1:79:12:95:49:87:6f:c2:04:bf:a4:5c:6f:a6:75:3d:53:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E2334D7F435218178622D970251CC10EE3F159C
        Validity
            Not Before: Jun 16 19:21:20 2026 GMT
            Not After : Jun 15 19:26:20 2027 GMT
        Subject: CN=8E8DC8DF56FA9DDEEC1475CC003B571DDE3196C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:de:1c:44:ca:d4:57:14:60:f6:56:c0:28:14:
                    f3:9d:b4:8b:db:21:d4:10:78:d0:9b:d1:40:dc:14:
                    17:aa:20:1a:c9:c0:82:42:04:e4:1d:3c:cf:d8:51:
                    27:8c:c6:d9:3c:2e:a7:38:e1:1f:6f:cc:88:81:af:
                    33:5b:48:c2:8f:95:51:28:5d:4c:09:85:e9:42:fb:
                    db:22:82:ed:c4:a2:96:ee:31:03:12:b0:ce:81:b5:
                    a4:57:61:66:0b:15:32:16:c6:74:f4:53:ca:dc:fc:
                    ac:27:54:fd:a4:ee:3f:e7:a5:af:49:f9:56:f2:70:
                    ad:19:6d:4b:7e:b7:1b:2d:5a:b4:9a:41:3b:da:2b:
                    90:62:ba:db:9f:e4:6a:05:17:b8:06:28:1a:85:53:
                    4a:bd:ed:4c:fb:38:eb:12:0e:12:09:00:e1:16:ef:
                    fb:15:66:e2:d8:8e:76:f0:83:e1:66:89:d7:5e:a9:
                    30:16:9c:d8:c4:ed:70:4d:ec:d5:04:90:58:b3:8a:
                    e7:be:2a:24:df:32:32:ac:de:10:1b:ba:67:9c:cf:
                    c9:85:f8:cb:bc:0a:38:0c:3a:5e:3d:26:44:19:18:
                    bd:3d:9f:bc:4e:53:5a:06:9d:2a:80:64:52:d6:ae:
                    ec:ae:41:5b:c7:18:93:0b:85:b7:b1:96:fb:9e:e6:
                    b3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8D:C8:DF:56:FA:9D:DE:EC:14:75:CC:00:3B:57:1D:DE:31:96:C0
            X509v3 Authority Key Identifier:
                keyid:8E:23:34:D7:F4:35:21:81:78:62:2D:97:02:51:CC:10:EE:3F:15:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/8E2334D7F435218178622D970251CC10EE3F159C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E2334D7F435218178622D970251CC10EE3F159C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/323830343a353032633a3a2f33322d3334203d3e20323638333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:502c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:2f:d3:39:20:de:2e:b9:c0:eb:13:65:51:f9:66:b0:79:9d:
         f3:58:e3:86:38:db:d6:f3:cd:b8:3b:af:c5:31:f8:3b:bc:a4:
         03:b9:64:6f:3f:ea:61:e1:50:b0:18:02:1d:8a:74:86:39:db:
         31:a6:e6:10:83:01:cf:d8:ba:e1:bc:d5:51:31:56:aa:5d:2f:
         ab:f0:20:69:b4:41:4d:d0:73:22:7e:80:c5:27:8d:f4:47:b7:
         05:57:12:a4:14:6c:6b:7d:09:41:27:2f:19:f3:2d:e6:0c:ae:
         fc:5e:e7:43:82:54:ac:83:ec:63:57:b0:21:0b:24:d4:aa:4d:
         03:2d:25:86:9b:d0:f7:72:71:7c:16:a3:38:7d:db:ee:d2:f4:
         40:a5:fa:66:43:ca:60:d5:88:a6:fd:02:56:18:86:1d:d0:f1:
         6d:9d:b6:95:cb:3f:2f:aa:6b:73:fc:93:fc:11:c0:19:15:3e:
         9d:c2:d4:f8:34:f0:ab:11:a0:b1:26:83:5a:20:ea:9c:0d:6f:
         1d:07:20:0c:7f:ad:2a:0c:81:80:3a:5b:2a:fa:55:5c:61:b2:
         35:42:19:70:ac:45:fb:11:b3:1c:fe:84:33:b7:57:47:f8:c8:
         bc:df:26:53:48:57:0c:66:a5:a8:9e:6b:2e:56:4b:48:c3:ce:
         67:ab:95:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:10:57 2026 by rpki-client