Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/0/323830343a353834303a3a2f33322d3332203d3e20323638313136.roa
File:                     323830343a353834303a3a2f33322d3332203d3e20323638313136.roa (raw, json)
Hash identifier:          Gok3LU6jo4SUlaA4tB6Lmkw93VlC4k4X7Cnz39DmHN8=
Subject key identifier:   E5:20:07:AB:04:14:67:3A:BA:BF:8D:93:4F:9D:B9:34:35:3C:85:B1
Certificate issuer:       /CN=E84CD4F4D98BE445EC05B340638A58497D066F35
Certificate serial:       52CA50885DE7540148B618712D24D28AE08722F1
Authority key identifier: E8:4C:D4:F4:D9:8B:E4:45:EC:05:B3:40:63:8A:58:49:7D:06:6F:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E84CD4F4D98BE445EC05B340638A58497D066F35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/0/323830343a353834303a3a2f33322d3332203d3e20323638313136.roa
Signing time:             Wed 08 Jul 2026 01:56:39 +0000
ROA not before:           Wed 08 Jul 2026 01:51:39 +0000
ROA not after:            Wed 07 Jul 2027 01:56:39 +0000
asID:                     268116
IP address blocks:        2804:5840::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/0/E84CD4F4D98BE445EC05B340638A58497D066F35.crl
                          rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/0/E84CD4F4D98BE445EC05B340638A58497D066F35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E84CD4F4D98BE445EC05B340638A58497D066F35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 04:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ca:50:88:5d:e7:54:01:48:b6:18:71:2d:24:d2:8a:e0:87:22:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E84CD4F4D98BE445EC05B340638A58497D066F35
        Validity
            Not Before: Jul  8 01:51:39 2026 GMT
            Not After : Jul  7 01:56:39 2027 GMT
        Subject: CN=E52007AB0414673ABABF8D934F9DB934353C85B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:36:c1:d8:9a:15:14:09:79:cd:f9:ba:f7:24:
                    2c:f3:3c:c6:6a:6f:4c:fa:6e:f0:77:7c:1b:b0:c3:
                    6f:60:fb:50:38:75:ac:26:fb:f5:a7:83:6c:97:4d:
                    07:41:cd:b4:16:16:a4:45:77:61:de:30:5a:c9:b8:
                    9e:e9:7e:2b:9d:df:da:4a:f8:10:9f:13:bf:66:61:
                    69:5f:2d:81:6a:f2:e5:78:9a:a1:0d:a0:cc:5f:30:
                    d0:49:e8:56:9d:5d:6a:98:78:ee:20:79:12:0c:b2:
                    3a:e7:7c:a2:6a:81:5e:f3:61:27:af:56:d8:f3:29:
                    fc:21:79:74:cb:1f:1a:76:36:2d:2f:c2:7b:60:b1:
                    6e:6e:5c:31:14:a3:0d:f8:4f:6f:0e:c5:1b:a1:4c:
                    da:13:b4:e6:14:63:66:98:fe:95:32:ed:fe:49:95:
                    fe:3f:8d:4c:61:fe:47:5a:82:57:7e:8a:b2:b7:c7:
                    38:1d:d5:71:83:eb:80:50:a8:14:8d:ed:60:c7:76:
                    c3:60:13:db:ed:d9:1a:cf:9f:9a:b4:35:2b:df:78:
                    bd:68:56:2a:2e:ca:b5:33:09:7a:a1:b8:d2:b2:72:
                    d2:c6:08:88:90:10:fc:1c:8e:27:12:2f:c0:93:b4:
                    b6:1d:3d:a5:45:90:e1:72:c5:3f:e5:d4:10:a1:90:
                    64:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:20:07:AB:04:14:67:3A:BA:BF:8D:93:4F:9D:B9:34:35:3C:85:B1
            X509v3 Authority Key Identifier:
                keyid:E8:4C:D4:F4:D9:8B:E4:45:EC:05:B3:40:63:8A:58:49:7D:06:6F:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/0/E84CD4F4D98BE445EC05B340638A58497D066F35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E84CD4F4D98BE445EC05B340638A58497D066F35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/0/323830343a353834303a3a2f33322d3332203d3e20323638313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5840::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:f3:9e:91:3c:24:c7:8e:37:73:46:f1:98:64:27:35:be:b3:
         2b:a4:69:50:d7:2e:e8:0f:1d:1f:ef:d6:f4:c1:05:5c:be:04:
         51:22:f9:7c:74:09:ef:bb:6a:92:6e:53:65:0c:ba:53:29:a3:
         11:95:0f:89:c4:3b:d8:43:7a:e9:c7:ed:36:91:fa:23:22:fc:
         82:75:69:65:48:68:af:d7:31:f4:59:aa:4f:d3:c8:68:18:64:
         5b:e4:84:69:76:24:bc:8c:69:57:d6:f3:1f:0d:cc:ab:67:7d:
         44:d2:7d:50:21:14:c1:ef:40:a0:17:2f:d0:8d:35:b7:3c:99:
         a8:dd:a3:2d:25:84:e3:07:42:ae:93:fe:83:e0:31:a8:b5:6a:
         ac:7f:bb:94:7d:8a:7e:95:e3:f1:de:91:0b:31:ec:2c:1c:78:
         6c:ef:30:7a:d2:70:a0:ca:68:9c:6c:cf:66:69:40:6e:ea:a3:
         4c:29:4b:b0:eb:e4:be:10:e4:1b:3b:bc:00:3e:49:c2:8d:1d:
         a6:6b:ef:e9:9a:0c:8e:6c:e4:1f:24:a4:f9:7b:8b:52:c1:f5:
         1a:31:e3:f1:08:a0:e7:67:02:20:2c:96:28:a8:ba:4f:27:a0:
         90:44:57:33:f7:6a:6c:c6:f1:cd:e9:81:c5:d5:32:54:6b:46:
         a8:f5:d2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:09:11 2026 by rpki-client