Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6UwiQqwv7RAKRPDsUMzagZK2K3cAJRNVNJVSxqBRQXcy/0/323830343a333539383a3a2f33322d3438203d3e20323636323935.roa
File:                     323830343a333539383a3a2f33322d3438203d3e20323636323935.roa (raw, json)
Hash identifier:          /ekLW/NoKnHIktrqhVekL6j8YMHsxexDgd72D/nJlp8=
Subject key identifier:   C0:3A:F9:1A:EC:F3:86:8C:5E:0F:E6:E7:B5:7E:61:0D:5F:36:F1:FF
Certificate issuer:       /CN=8E9ECBE7214F4308F552DCA44B06B34C5B1182B7
Certificate serial:       407231B924F83A35EAF8318849A9924E6740DBC2
Authority key identifier: 8E:9E:CB:E7:21:4F:43:08:F5:52:DC:A4:4B:06:B3:4C:5B:11:82:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E9ECBE7214F4308F552DCA44B06B34C5B1182B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6UwiQqwv7RAKRPDsUMzagZK2K3cAJRNVNJVSxqBRQXcy/0/323830343a333539383a3a2f33322d3438203d3e20323636323935.roa
Signing time:             Wed 01 Jul 2026 19:32:32 +0000
ROA not before:           Wed 01 Jul 2026 19:27:32 +0000
ROA not after:            Wed 30 Jun 2027 19:32:32 +0000
asID:                     266295
IP address blocks:        2804:3598::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6UwiQqwv7RAKRPDsUMzagZK2K3cAJRNVNJVSxqBRQXcy/0/8E9ECBE7214F4308F552DCA44B06B34C5B1182B7.crl
                          rsync://rpki-repo.registro.br/repo/6UwiQqwv7RAKRPDsUMzagZK2K3cAJRNVNJVSxqBRQXcy/0/8E9ECBE7214F4308F552DCA44B06B34C5B1182B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E9ECBE7214F4308F552DCA44B06B34C5B1182B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 15:07:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:72:31:b9:24:f8:3a:35:ea:f8:31:88:49:a9:92:4e:67:40:db:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9ECBE7214F4308F552DCA44B06B34C5B1182B7
        Validity
            Not Before: Jul  1 19:27:32 2026 GMT
            Not After : Jun 30 19:32:32 2027 GMT
        Subject: CN=C03AF91AECF3868C5E0FE6E7B57E610D5F36F1FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:61:28:57:e4:c0:6e:02:07:25:04:7c:40:62:
                    4d:3a:a3:14:c6:3b:f2:14:8c:54:46:40:59:13:38:
                    e8:d4:a1:c5:28:4f:14:ba:00:83:17:79:51:52:97:
                    ae:ec:c8:75:22:0d:d4:56:5f:80:f7:7b:a5:71:34:
                    f4:85:fb:d4:66:d0:f2:fe:ca:22:04:5a:ec:00:12:
                    f7:df:f7:4d:c1:a5:1b:ec:ed:05:f5:61:94:43:b0:
                    d8:ef:f2:8b:bc:45:40:ef:48:0e:41:e7:48:42:df:
                    e7:0d:60:75:ca:17:15:3f:84:e3:5e:59:ce:9b:5c:
                    c4:9b:1b:aa:88:89:b0:b9:32:a0:7c:85:2e:11:82:
                    9d:f7:ec:99:95:9d:e1:28:0d:7d:c0:aa:c8:d0:20:
                    cf:79:92:98:7f:ee:54:39:ba:88:3b:ae:82:34:4f:
                    8f:76:77:05:47:0c:80:ee:40:98:c6:bc:12:ae:21:
                    6f:ee:8a:80:1b:f9:2f:fe:8b:96:62:d7:1a:1b:5a:
                    f1:9a:01:49:8c:3c:9f:79:29:db:ea:5b:09:5d:a5:
                    ec:05:2f:b4:91:4e:b6:d3:cc:e9:40:29:3a:bf:03:
                    48:87:cd:72:56:a9:93:09:85:bb:e0:4d:49:27:d8:
                    e5:db:9e:92:68:66:93:14:e9:03:ae:1d:13:97:1c:
                    7b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3A:F9:1A:EC:F3:86:8C:5E:0F:E6:E7:B5:7E:61:0D:5F:36:F1:FF
            X509v3 Authority Key Identifier:
                keyid:8E:9E:CB:E7:21:4F:43:08:F5:52:DC:A4:4B:06:B3:4C:5B:11:82:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6UwiQqwv7RAKRPDsUMzagZK2K3cAJRNVNJVSxqBRQXcy/0/8E9ECBE7214F4308F552DCA44B06B34C5B1182B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E9ECBE7214F4308F552DCA44B06B34C5B1182B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6UwiQqwv7RAKRPDsUMzagZK2K3cAJRNVNJVSxqBRQXcy/0/323830343a333539383a3a2f33322d3438203d3e20323636323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3598::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:ec:29:d2:e9:2c:d4:ce:bb:fb:b9:52:d4:64:59:5e:e1:ac:
         b9:43:da:c4:83:42:7c:ec:32:5b:bd:75:63:38:cf:23:e9:da:
         3d:50:31:e7:b5:1a:24:78:07:13:76:72:0f:db:c7:92:0d:ae:
         0d:57:02:55:b6:dc:a6:2c:ff:75:ab:7a:c1:07:ac:f7:2f:aa:
         e9:6f:0b:21:50:29:97:bc:cf:8d:62:7f:bf:0f:79:ff:d7:da:
         f1:9a:28:9b:25:99:34:c4:3f:33:8b:3c:9e:ce:cd:b0:a8:cd:
         93:8d:06:f4:5a:ae:b2:df:47:95:b2:1e:dc:23:f9:46:49:e9:
         a4:72:54:c2:ba:e1:98:bd:11:b8:e3:14:2c:aa:0d:01:ff:9c:
         36:81:44:b6:58:8d:02:47:af:7d:fa:8d:bb:43:b8:21:cc:48:
         2f:10:b5:32:d0:5e:49:3b:b2:4d:20:32:e6:8d:bf:d4:a8:3b:
         66:2a:92:62:66:e2:26:b4:92:97:c1:11:1a:ac:74:b4:1c:af:
         2b:81:05:07:74:93:48:06:85:8f:46:a4:de:1b:e0:af:16:e9:
         b2:94:cf:5e:df:e0:d1:11:1a:72:61:3f:6d:9e:24:2a:6b:87:
         48:6c:c5:ce:00:3e:2a:da:e0:86:ee:14:73:52:e9:d4:1c:24:
         2b:ef:1b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:04:38 2026 by rpki-client