Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/323830343a313431343a3a2f33322d3334203d3e20323633333131.roa
File:                     323830343a313431343a3a2f33322d3334203d3e20323633333131.roa (raw, json)
Hash identifier:          uUtAbBZpaxUWsdOCRPlaa5Qt1orZI2dEH0WTAjZlWgo=
Subject key identifier:   05:BF:93:C5:8C:FF:E4:F7:EB:F5:67:62:B4:D7:8C:05:03:CD:53:14
Certificate issuer:       /CN=9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B
Certificate serial:       5CDDD2C12793B7990F4F041DEF779FBD32C954
Authority key identifier: 9F:FA:BF:FA:1B:28:AB:A1:D0:51:EC:CB:BE:57:DE:91:57:6D:3F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/323830343a313431343a3a2f33322d3334203d3e20323633333131.roa
Signing time:             Tue 23 Jun 2026 02:14:33 +0000
ROA not before:           Tue 23 Jun 2026 02:09:33 +0000
ROA not after:            Tue 22 Jun 2027 02:14:33 +0000
asID:                     263311
IP address blocks:        2804:1414::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.crl
                          rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 27 Jun 2026 23:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:dd:d2:c1:27:93:b7:99:0f:4f:04:1d:ef:77:9f:bd:32:c9:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B
        Validity
            Not Before: Jun 23 02:09:33 2026 GMT
            Not After : Jun 22 02:14:33 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9c:91:6b:b6:58:88:b5:51:eb:f0:49:f5:f6:
                    1a:30:2b:fa:06:c4:86:bc:d1:98:31:b9:1b:42:21:
                    d5:51:9e:2a:c9:91:c5:04:7e:d3:c2:82:9e:b4:09:
                    e2:20:38:9c:73:c4:56:26:08:d3:10:43:8c:63:0f:
                    78:b1:5e:92:54:40:de:cb:89:bb:a7:6b:a9:6b:9d:
                    0a:f0:f6:be:ba:ae:44:23:18:07:0e:a7:e9:6c:6a:
                    3f:63:d0:c8:c7:e5:1d:88:df:48:c1:74:90:26:47:
                    be:ce:35:87:12:29:12:61:2c:a4:8f:ed:2d:26:75:
                    46:c3:0b:2e:72:ab:d0:29:9c:81:d5:5f:f7:24:20:
                    e5:ea:69:f1:85:35:17:c0:67:86:e1:30:40:4e:de:
                    64:9f:0c:8f:bb:9a:10:f3:8e:e3:44:0a:40:63:0e:
                    c2:30:5e:2e:39:a3:05:ae:4f:0d:5e:68:5d:22:98:
                    e7:43:55:59:70:40:46:80:6c:0a:ee:29:c7:1f:a1:
                    35:49:43:51:71:93:27:1e:46:3b:62:f4:9e:5b:b1:
                    23:25:66:3c:cf:1e:c8:b2:5f:21:7d:f8:34:39:e3:
                    21:7a:72:5d:a9:c0:2a:21:c3:4f:34:37:ee:21:6e:
                    93:b2:a9:e1:1a:99:9f:81:77:dc:97:6e:bb:d2:1a:
                    a3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BF:93:C5:8C:FF:E4:F7:EB:F5:67:62:B4:D7:8C:05:03:CD:53:14
            X509v3 Authority Key Identifier:
                keyid:9F:FA:BF:FA:1B:28:AB:A1:D0:51:EC:CB:BE:57:DE:91:57:6D:3F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/323830343a313431343a3a2f33322d3334203d3e20323633333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1414::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:1f:66:3b:f8:41:12:fd:32:e6:22:ed:2b:69:f5:59:06:92:
         fb:8c:ca:22:65:81:e3:d7:fa:d4:1a:ad:06:04:0c:06:5c:fe:
         49:4b:f7:56:4b:f8:77:5d:69:49:a2:72:0b:38:6c:a7:a5:9d:
         d5:87:b1:aa:6a:12:20:11:c3:3b:33:91:7d:78:3d:e4:3c:76:
         ca:ab:d2:08:75:ea:70:74:59:63:5b:02:93:1b:47:8f:e7:83:
         59:49:2e:0c:87:2b:02:3a:d4:1a:8f:7a:d7:96:6c:ac:4f:4b:
         32:fc:e5:99:5b:b0:90:d1:32:d7:36:7c:e8:04:98:ca:16:b1:
         d1:4e:8f:ca:96:9f:64:a4:b6:a3:76:ac:4f:ea:c3:b3:0d:e4:
         b5:2d:cc:78:3b:71:a2:d7:2c:76:44:08:7c:ce:a2:3d:f5:80:
         6f:4a:78:80:28:2c:2f:9d:65:b3:78:81:40:ba:74:69:f8:be:
         3b:ec:70:f6:80:73:5f:50:76:dd:ef:bc:68:dc:ec:36:25:82:
         1c:de:3c:c4:91:87:1b:77:88:29:be:94:f2:e0:72:57:66:92:
         9c:a9:a2:d2:c6:c4:e9:e0:e6:4d:44:82:a7:3c:d4:53:ba:03:
         62:45:ff:c2:f6:7f:9b:99:14:b6:2b:26:40:d7:fd:42:d2:0f:
         ae:4d:9c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:09:58 2026 by rpki-client