Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4gq3SDQcuJcmQwTzNmgf5o3zY9oHw7bFNN7netiuizMm/1/323830343a366465303a633030303a3a2f33342d3334203d3e20323730353631.roa
File:                     323830343a366465303a633030303a3a2f33342d3334203d3e20323730353631.roa (raw, json)
Hash identifier:          /3nFB9suTFnA4XroM0cFZ8LA+frtjcpoi7dO9SWEQfk=
Subject key identifier:   66:86:E5:E6:20:65:27:E0:68:03:39:26:E1:3B:62:F1:4C:B0:30:E7
Certificate issuer:       /CN=E4CC883D424B3F78EF4AE46288059D5FB1F48DB7
Certificate serial:       11AD99CDE8614ED956A2F6B3025EE8BCBDA831A4
Authority key identifier: E4:CC:88:3D:42:4B:3F:78:EF:4A:E4:62:88:05:9D:5F:B1:F4:8D:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4CC883D424B3F78EF4AE46288059D5FB1F48DB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4gq3SDQcuJcmQwTzNmgf5o3zY9oHw7bFNN7netiuizMm/1/323830343a366465303a633030303a3a2f33342d3334203d3e20323730353631.roa
Signing time:             Wed 20 May 2026 12:10:31 +0000
ROA not before:           Wed 20 May 2026 12:05:31 +0000
ROA not after:            Wed 19 May 2027 12:10:31 +0000
asID:                     270561
IP address blocks:        2804:6de0:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4gq3SDQcuJcmQwTzNmgf5o3zY9oHw7bFNN7netiuizMm/1/E4CC883D424B3F78EF4AE46288059D5FB1F48DB7.crl
                          rsync://rpki-repo.registro.br/repo/4gq3SDQcuJcmQwTzNmgf5o3zY9oHw7bFNN7netiuizMm/1/E4CC883D424B3F78EF4AE46288059D5FB1F48DB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4CC883D424B3F78EF4AE46288059D5FB1F48DB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Jun 2026 03:05:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ad:99:cd:e8:61:4e:d9:56:a2:f6:b3:02:5e:e8:bc:bd:a8:31:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4CC883D424B3F78EF4AE46288059D5FB1F48DB7
        Validity
            Not Before: May 20 12:05:31 2026 GMT
            Not After : May 19 12:10:31 2027 GMT
        Subject: CN=6686E5E6206527E068033926E13B62F14CB030E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f1:bc:25:46:14:44:d0:7f:88:cf:26:11:7a:
                    09:ad:7a:70:67:7e:51:5a:39:a1:6d:77:80:4c:e7:
                    a3:f5:2b:17:de:72:df:b8:ac:0f:66:cf:b0:9d:05:
                    09:b0:f4:08:12:42:83:08:58:b8:3c:4b:c4:20:80:
                    44:5c:ee:e0:c4:b9:ae:a1:cb:a8:d2:78:a3:f2:60:
                    75:f4:52:a2:03:9d:8b:ec:29:39:b3:8f:56:36:c9:
                    94:43:a8:86:33:cd:1a:7d:f0:ab:54:78:ea:41:b4:
                    73:cd:5a:9c:32:bb:3b:f7:80:c7:89:2d:14:bd:fd:
                    62:f1:26:10:83:ed:24:52:a4:89:d1:34:4a:97:2c:
                    be:70:1e:9b:c1:18:36:1c:5c:55:77:4f:e5:e6:70:
                    0c:e7:b2:c2:20:63:23:55:39:be:6b:ca:0b:34:fe:
                    b4:c2:e1:4b:8a:e0:99:79:ea:50:2a:b7:29:54:49:
                    38:1f:d4:1c:2e:27:aa:ca:7d:3a:6c:6a:b4:96:5a:
                    ee:8d:9f:54:76:ac:73:31:f6:19:07:39:31:0c:f6:
                    3c:76:57:e7:2f:63:18:b9:9b:98:fc:35:ae:68:b1:
                    79:bc:0e:f5:9e:3f:de:b9:eb:79:44:da:30:84:13:
                    6d:c4:89:c3:84:82:f0:96:06:40:6e:a4:82:35:78:
                    52:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:86:E5:E6:20:65:27:E0:68:03:39:26:E1:3B:62:F1:4C:B0:30:E7
            X509v3 Authority Key Identifier:
                keyid:E4:CC:88:3D:42:4B:3F:78:EF:4A:E4:62:88:05:9D:5F:B1:F4:8D:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4gq3SDQcuJcmQwTzNmgf5o3zY9oHw7bFNN7netiuizMm/1/E4CC883D424B3F78EF4AE46288059D5FB1F48DB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4CC883D424B3F78EF4AE46288059D5FB1F48DB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4gq3SDQcuJcmQwTzNmgf5o3zY9oHw7bFNN7netiuizMm/1/323830343a366465303a633030303a3a2f33342d3334203d3e20323730353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6de0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         56:9f:6f:65:20:cd:5b:79:bd:7f:99:f9:8e:63:86:13:69:cb:
         58:60:05:0f:fe:e9:f2:47:ba:38:b2:db:d8:fa:c6:cc:35:d0:
         1c:08:08:50:77:fe:fe:0a:00:a1:bf:b1:8b:90:3d:29:5e:c6:
         b3:cf:4a:ec:29:63:ee:26:e5:74:17:3b:6f:ee:4b:07:92:65:
         8f:2f:2e:4c:ac:c3:e7:68:38:32:5a:de:af:c0:1e:cc:4c:2e:
         99:67:3c:de:50:42:11:34:63:59:60:97:b9:db:aa:22:09:b9:
         76:1c:db:3a:6e:27:7a:54:8a:2f:3b:07:18:7f:21:2b:fd:f6:
         38:bd:02:47:b2:82:92:47:de:dd:dc:b2:ee:a3:6e:9b:e4:63:
         a0:65:22:0b:2f:68:ba:ab:e0:41:a3:b2:f2:25:6e:64:cf:35:
         d0:41:8d:00:b7:10:7a:fa:d5:01:31:fd:d2:6f:fd:1d:78:c8:
         88:0b:95:b3:2d:ce:25:f1:f2:7e:6c:cf:8b:e6:0c:9b:a7:d0:
         6c:9e:16:8f:9c:5a:fb:1a:d1:7d:c1:a4:77:28:eb:48:cf:f2:
         eb:70:25:8e:0c:01:b2:5c:3f:3b:20:c2:6f:06:c2:9e:72:58:
         06:17:8c:78:b0:67:07:62:57:81:81:b8:32:21:a9:69:2c:ee:
         45:36:91:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 06:26:59 2026 by rpki-client