Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/932y4LNeNTjz62TqFVizhW86XdpQ5AX9rvYvp2E6YKWy/0/323830343a336536633a343030303a3a2f33342d3334203d3e20323636353935.roa
File:                     323830343a336536633a343030303a3a2f33342d3334203d3e20323636353935.roa (raw, json)
Hash identifier:          BIjcWnP3SCNp6gqJIje7dutf2X0j5o2a1NvkwHj4NZE=
Subject key identifier:   68:58:A1:ED:AB:A7:F9:88:9D:46:7B:2D:C6:F6:9E:6D:C8:7E:1A:82
Certificate issuer:       /CN=D4EBD516EDA5695A312080AA7A8A1FD3DC9CC18A
Certificate serial:       3EFAD7DDECBA96C0D3AF15F0ECCF1105F5ED5E96
Authority key identifier: D4:EB:D5:16:ED:A5:69:5A:31:20:80:AA:7A:8A:1F:D3:DC:9C:C1:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4EBD516EDA5695A312080AA7A8A1FD3DC9CC18A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/932y4LNeNTjz62TqFVizhW86XdpQ5AX9rvYvp2E6YKWy/0/323830343a336536633a343030303a3a2f33342d3334203d3e20323636353935.roa
Signing time:             Wed 13 May 2026 19:32:09 +0000
ROA not before:           Wed 13 May 2026 19:27:09 +0000
ROA not after:            Wed 12 May 2027 19:32:09 +0000
asID:                     266595
IP address blocks:        2804:3e6c:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/932y4LNeNTjz62TqFVizhW86XdpQ5AX9rvYvp2E6YKWy/0/D4EBD516EDA5695A312080AA7A8A1FD3DC9CC18A.crl
                          rsync://rpki-repo.registro.br/repo/932y4LNeNTjz62TqFVizhW86XdpQ5AX9rvYvp2E6YKWy/0/D4EBD516EDA5695A312080AA7A8A1FD3DC9CC18A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4EBD516EDA5695A312080AA7A8A1FD3DC9CC18A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 12:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:fa:d7:dd:ec:ba:96:c0:d3:af:15:f0:ec:cf:11:05:f5:ed:5e:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4EBD516EDA5695A312080AA7A8A1FD3DC9CC18A
        Validity
            Not Before: May 13 19:27:09 2026 GMT
            Not After : May 12 19:32:09 2027 GMT
        Subject: CN=6858A1EDABA7F9889D467B2DC6F69E6DC87E1A82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:86:87:07:38:d3:ae:bb:9c:e8:8f:6d:57:83:
                    e6:4e:dc:75:4e:b1:e7:5c:54:e3:a6:8f:51:69:c5:
                    f7:2d:a9:3e:db:89:71:34:0e:df:f7:03:02:f7:19:
                    4f:77:19:e4:05:a8:4c:32:a2:3b:f7:5a:99:6d:4f:
                    bf:af:fa:da:d3:53:f9:22:54:64:e5:a8:90:12:20:
                    7b:94:ac:7e:b9:b1:45:1c:cc:62:e8:02:32:45:50:
                    5e:0e:76:2a:2b:cf:fa:c1:49:e4:54:1f:8d:16:e1:
                    6a:80:0f:f1:7e:fe:ea:5e:ae:0a:85:10:5e:b8:31:
                    d7:65:31:cd:15:fc:39:93:07:1d:72:0a:a1:ff:9a:
                    67:9a:fd:d8:53:4d:fc:28:19:27:6e:f7:4a:84:e2:
                    7a:28:d8:94:66:2e:94:ad:b4:7b:b3:61:0d:d6:78:
                    48:5d:df:8c:7c:19:3a:e7:f6:6a:02:57:09:28:eb:
                    dc:a1:64:26:6d:d7:22:cc:ba:59:fe:f3:0a:da:38:
                    61:49:a6:7c:04:18:c4:38:d6:ec:42:73:e8:d2:fa:
                    25:a1:27:de:82:63:0c:4c:b6:f4:7f:34:91:0b:48:
                    d1:8f:af:7a:e1:7d:d7:c2:41:62:25:e5:95:8f:b3:
                    7a:ff:61:d7:b6:fe:9e:c2:fb:53:59:bc:d5:f0:6b:
                    ea:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:58:A1:ED:AB:A7:F9:88:9D:46:7B:2D:C6:F6:9E:6D:C8:7E:1A:82
            X509v3 Authority Key Identifier:
                keyid:D4:EB:D5:16:ED:A5:69:5A:31:20:80:AA:7A:8A:1F:D3:DC:9C:C1:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/932y4LNeNTjz62TqFVizhW86XdpQ5AX9rvYvp2E6YKWy/0/D4EBD516EDA5695A312080AA7A8A1FD3DC9CC18A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4EBD516EDA5695A312080AA7A8A1FD3DC9CC18A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/932y4LNeNTjz62TqFVizhW86XdpQ5AX9rvYvp2E6YKWy/0/323830343a336536633a343030303a3a2f33342d3334203d3e20323636353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e6c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         cd:da:d9:f7:b3:2e:d4:48:47:77:eb:cf:b4:08:bb:36:28:05:
         c1:2f:81:46:a3:82:28:ee:40:cd:09:09:60:14:7f:ec:03:40:
         3d:47:c6:c1:fa:ed:83:eb:ad:0c:be:51:b5:2f:63:6e:34:21:
         f0:35:42:50:05:08:92:5d:53:a2:dc:fd:b1:78:0a:48:30:6c:
         9d:01:97:57:98:41:e2:c5:b5:0e:e8:2b:16:82:8d:76:38:72:
         d6:4c:31:08:7b:15:6d:b5:c4:46:62:90:bb:1d:5f:93:eb:25:
         dd:3e:23:39:b5:7c:15:3c:8e:86:7b:44:5d:83:4c:5f:00:0f:
         76:b0:e5:16:f3:ea:66:64:72:c6:9f:bd:8d:eb:6e:38:97:39:
         4c:32:7d:3f:e0:ee:d8:ce:90:52:27:5e:8d:7d:26:b1:fd:e3:
         0b:b6:1c:1c:d6:f0:dd:3c:b3:bf:6e:fd:3e:1f:e6:82:d1:55:
         95:9e:ca:f7:9c:e7:6d:d9:ae:d3:91:e8:41:be:da:81:80:41:
         f0:b1:e4:f2:8a:19:01:48:04:f2:c9:47:c5:45:f7:0d:b7:1b:
         d5:bd:6b:54:8c:56:9a:94:e3:4c:13:3e:b2:96:4d:1d:c6:85:
         9d:6a:0e:f9:ab:bb:e4:93:3e:c3:e0:e2:1f:22:ef:c6:a5:6d:
         ac:83:f2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:07:01 2026 by rpki-client