Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tqVqfJ2tm6XQn7vuSGz2eoQoj7X1mCfJWmBM42dpaCe/0/323830343a383464303a3a2f33322d3438203d3e20323732353432.roa
File:                     323830343a383464303a3a2f33322d3438203d3e20323732353432.roa (raw, json)
Hash identifier:          oJFlgjW2QoItPyeFcpHUh1XvzADyPxyw5Flre7WzzI8=
Subject key identifier:   16:12:1B:B9:B5:AF:13:E5:D1:2A:50:E4:EA:FF:72:69:A7:C7:14:B8
Certificate issuer:       /CN=03360C354BF0A76D3F0C6022D902E9A4E301E510
Certificate serial:       013C907DAD3E16AE09294601D72F2598CBE584F3
Authority key identifier: 03:36:0C:35:4B:F0:A7:6D:3F:0C:60:22:D9:02:E9:A4:E3:01:E5:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03360C354BF0A76D3F0C6022D902E9A4E301E510.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tqVqfJ2tm6XQn7vuSGz2eoQoj7X1mCfJWmBM42dpaCe/0/323830343a383464303a3a2f33322d3438203d3e20323732353432.roa
Signing time:             Sat 04 Jul 2026 11:27:41 +0000
ROA not before:           Sat 04 Jul 2026 11:22:41 +0000
ROA not after:            Sat 03 Jul 2027 11:27:41 +0000
asID:                     272542
IP address blocks:        2804:84d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tqVqfJ2tm6XQn7vuSGz2eoQoj7X1mCfJWmBM42dpaCe/0/03360C354BF0A76D3F0C6022D902E9A4E301E510.crl
                          rsync://rpki-repo.registro.br/repo/6tqVqfJ2tm6XQn7vuSGz2eoQoj7X1mCfJWmBM42dpaCe/0/03360C354BF0A76D3F0C6022D902E9A4E301E510.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03360C354BF0A76D3F0C6022D902E9A4E301E510.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 07:29:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:3c:90:7d:ad:3e:16:ae:09:29:46:01:d7:2f:25:98:cb:e5:84:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03360C354BF0A76D3F0C6022D902E9A4E301E510
        Validity
            Not Before: Jul  4 11:22:41 2026 GMT
            Not After : Jul  3 11:27:41 2027 GMT
        Subject: CN=16121BB9B5AF13E5D12A50E4EAFF7269A7C714B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fd:27:e9:8d:ca:37:0e:42:87:c9:f1:86:c6:
                    99:e5:83:44:c7:d4:8a:b5:97:f8:14:64:be:13:6c:
                    ae:f3:46:54:80:cc:41:cb:73:bd:20:22:b9:aa:6d:
                    61:be:cb:6f:fc:48:29:a8:e6:54:e2:d5:a1:93:bf:
                    a4:c6:4a:e0:fd:fd:37:e6:ae:cc:ae:94:f7:6b:59:
                    e5:2d:49:50:1d:1f:ce:f5:71:a4:8d:e8:53:bf:18:
                    91:dc:7b:c2:c7:64:c0:e7:68:05:e1:18:53:be:e9:
                    d9:87:a7:88:7d:64:13:3f:bb:d9:cd:fe:7e:7d:8c:
                    14:81:d0:2c:f5:7f:ee:47:92:7b:8a:41:00:d4:36:
                    20:e4:ba:a9:45:c8:85:75:94:68:60:db:b4:47:6c:
                    84:0a:5c:29:0d:97:54:76:4d:63:f4:f1:a5:15:d7:
                    b5:f8:ab:c6:a7:00:23:5c:72:aa:49:57:45:39:90:
                    15:d9:80:0f:9f:33:fb:e0:a0:a8:bd:a4:9e:8b:4f:
                    41:07:19:d6:66:39:de:2b:fe:3c:2d:80:a7:ff:64:
                    a1:88:fe:c4:83:6b:d4:50:40:41:c4:77:eb:4c:00:
                    2c:78:33:7c:06:51:55:47:3f:3a:7e:9d:87:20:35:
                    e5:25:1e:10:b9:79:76:a8:5f:40:99:80:48:4c:4a:
                    7b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:12:1B:B9:B5:AF:13:E5:D1:2A:50:E4:EA:FF:72:69:A7:C7:14:B8
            X509v3 Authority Key Identifier:
                keyid:03:36:0C:35:4B:F0:A7:6D:3F:0C:60:22:D9:02:E9:A4:E3:01:E5:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tqVqfJ2tm6XQn7vuSGz2eoQoj7X1mCfJWmBM42dpaCe/0/03360C354BF0A76D3F0C6022D902E9A4E301E510.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03360C354BF0A76D3F0C6022D902E9A4E301E510.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tqVqfJ2tm6XQn7vuSGz2eoQoj7X1mCfJWmBM42dpaCe/0/323830343a383464303a3a2f33322d3438203d3e20323732353432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:84d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:7b:50:a9:e7:42:1f:d1:af:17:59:d0:fc:24:cf:8c:61:1c:
         eb:4b:36:ed:8d:aa:c6:6a:a2:87:70:a4:c7:af:56:ae:e2:48:
         3d:27:ca:8f:26:b8:aa:5a:d0:e6:b8:08:99:c3:ad:b3:76:75:
         d2:39:5c:29:ea:d6:37:78:27:3a:da:5f:55:be:78:7d:f7:41:
         67:1b:56:90:cb:30:58:88:3b:f3:16:6d:bb:3f:c1:4a:77:9e:
         62:a6:26:86:2d:a4:4e:02:8e:ec:08:a1:f3:73:0c:34:46:c7:
         b4:7c:03:d2:1f:11:0f:73:ed:2a:8c:6b:d8:fe:fd:32:99:3b:
         5f:ef:d6:30:d5:a5:6a:a3:d7:a7:f7:68:74:f9:03:84:66:b8:
         76:de:00:da:c4:e9:be:9a:c9:cd:46:29:29:a4:b7:47:10:02:
         88:2e:69:79:6a:1a:8a:50:4c:64:70:e9:7f:f0:4b:a1:a5:0f:
         c3:e5:38:10:b6:9e:27:7f:ca:8c:8c:14:4e:6d:be:54:f9:61:
         d4:7e:c8:b5:47:1e:cf:6c:0d:d4:e4:ea:c0:6e:40:2d:11:de:
         14:72:5a:86:77:2b:19:a4:37:a7:72:4a:71:2a:66:d4:9e:62:
         b9:43:59:ac:a3:f9:78:4b:d7:8a:05:93:6e:b3:38:28:de:70:
         7d:d4:67:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:08:20 2026 by rpki-client