Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/323830343a6364303a3a2f33332d3333203d3e203532353537.roa
File:                     323830343a6364303a3a2f33332d3333203d3e203532353537.roa (raw, json)
Hash identifier:          f+kNTGY/buZdWSM1JF9WsaKPxX1bFiRvhzIs1O56LU0=
Subject key identifier:   A1:A5:F5:BD:50:B4:AC:06:75:16:34:C9:4B:BF:24:E6:5B:5E:2A:E2
Certificate issuer:       /CN=FD40F939FDFBA0404DC8406B3AA4C7BC9CBC986C
Certificate serial:       3D0FC63871E08ADA017BA672A39EAAA2645680B7
Authority key identifier: FD:40:F9:39:FD:FB:A0:40:4D:C8:40:6B:3A:A4:C7:BC:9C:BC:98:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD40F939FDFBA0404DC8406B3AA4C7BC9CBC986C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/323830343a6364303a3a2f33332d3333203d3e203532353537.roa
Signing time:             Thu 02 Jul 2026 23:11:09 +0000
ROA not before:           Thu 02 Jul 2026 23:06:09 +0000
ROA not after:            Thu 01 Jul 2027 23:11:09 +0000
asID:                     52557
IP address blocks:        2804:cd0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/FD40F939FDFBA0404DC8406B3AA4C7BC9CBC986C.crl
                          rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/FD40F939FDFBA0404DC8406B3AA4C7BC9CBC986C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD40F939FDFBA0404DC8406B3AA4C7BC9CBC986C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 10:23:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:0f:c6:38:71:e0:8a:da:01:7b:a6:72:a3:9e:aa:a2:64:56:80:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD40F939FDFBA0404DC8406B3AA4C7BC9CBC986C
        Validity
            Not Before: Jul  2 23:06:09 2026 GMT
            Not After : Jul  1 23:11:09 2027 GMT
        Subject: CN=A1A5F5BD50B4AC06751634C94BBF24E65B5E2AE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d7:b7:37:f3:88:ae:c3:5e:46:47:92:56:a9:
                    f5:cf:7e:86:5a:0b:41:73:6c:b5:fc:59:56:59:38:
                    c6:31:39:b1:99:7d:01:0d:10:34:28:d1:d1:5e:4a:
                    d5:2a:87:4b:2f:93:59:bb:0c:e3:cf:53:b1:0c:78:
                    9c:86:28:bb:b5:85:99:2d:d0:0e:58:46:d1:14:13:
                    0d:0b:f2:e4:5c:68:42:cc:f5:8a:9b:ef:eb:a0:12:
                    1a:17:14:c6:f1:60:58:90:f1:14:58:ae:ba:5e:d9:
                    3d:89:77:23:de:28:f4:fc:93:8d:ba:9e:5c:d1:9b:
                    f9:e6:4e:12:ed:06:d4:e4:4e:81:04:76:89:ef:a1:
                    a1:38:1c:31:d5:f3:da:02:70:ad:a1:82:39:3a:65:
                    ec:0d:11:b1:16:09:78:09:81:42:d7:07:ad:fd:28:
                    7d:da:55:82:c9:90:45:3c:99:27:a3:a8:67:11:7b:
                    27:7e:98:2d:65:b0:df:ed:c6:f9:c1:e0:6b:ef:33:
                    67:d6:f8:86:50:94:5f:1c:a4:49:72:00:1b:a8:1a:
                    b0:df:e4:3c:a9:be:f1:34:af:72:4d:db:98:b9:39:
                    1a:7a:5e:cc:19:b4:64:d5:37:35:9c:0b:4d:e4:e4:
                    1e:45:04:f7:85:ce:d0:70:55:ad:2a:7a:27:38:c2:
                    cc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A5:F5:BD:50:B4:AC:06:75:16:34:C9:4B:BF:24:E6:5B:5E:2A:E2
            X509v3 Authority Key Identifier:
                keyid:FD:40:F9:39:FD:FB:A0:40:4D:C8:40:6B:3A:A4:C7:BC:9C:BC:98:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/FD40F939FDFBA0404DC8406B3AA4C7BC9CBC986C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD40F939FDFBA0404DC8406B3AA4C7BC9CBC986C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/323830343a6364303a3a2f33332d3333203d3e203532353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cd0::/33

    Signature Algorithm: sha256WithRSAEncryption
         6f:2b:d5:83:f9:70:a7:a0:3d:fc:ce:a3:9d:85:b2:d3:4a:46:
         d8:83:53:ae:82:7a:b3:3f:cd:4a:81:42:67:5a:15:b6:b4:bb:
         de:41:60:8a:5c:64:d6:8c:1b:13:b1:8c:82:1f:9b:dc:1b:90:
         39:f0:96:08:1b:3a:3d:7c:d6:23:5e:ed:90:cb:59:96:4e:d0:
         ad:9e:4a:ae:be:37:8e:16:34:a8:33:2a:48:b7:4c:69:38:9f:
         1f:2a:de:0e:a3:6d:6a:fa:88:67:00:59:42:40:f8:78:94:25:
         5b:77:e4:4f:35:02:b4:29:8f:02:46:ab:ee:6b:e9:ce:04:9b:
         c9:5d:be:36:c6:20:92:4f:ea:c3:44:f4:13:e9:50:b1:41:b0:
         6e:55:b8:90:0c:ae:2a:c6:36:d3:b8:3e:bc:09:c0:37:b4:20:
         05:9e:84:16:bd:72:a0:d6:a6:81:92:6f:3c:75:45:41:be:aa:
         9a:8a:3e:cf:29:e0:ba:29:6e:2b:73:64:f3:df:2a:7a:02:a1:
         4d:d9:fd:6b:01:c7:13:07:77:90:cc:ec:cb:8e:05:14:36:30:
         51:9a:fb:3f:72:1a:f7:5c:54:ae:75:63:ce:4b:bc:f1:9c:b6:
         32:fb:c5:23:f3:69:5d:50:ec:41:b9:0f:b9:66:12:0a:3c:92:
         a2:7f:f9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:16:19 2026 by rpki-client