Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/323830343a6664633a613030303a3a2f33362d3336203d3e20323633363038.roa
File:                     323830343a6664633a613030303a3a2f33362d3336203d3e20323633363038.roa (raw, json)
Hash identifier:          4mFoHiQyDvxT1qJbABY+YYx6zS/6rZCmLtcz6n/y+cc=
Subject key identifier:   C5:C3:27:21:35:5B:0B:D8:AA:28:79:16:01:79:A3:64:1D:08:54:1C
Certificate issuer:       /CN=F62A9E68B6C36D535EB5B57CF3B3846A6603F124
Certificate serial:       501F3C913C759C4945BF5EB6D67D2D6D29557EB0
Authority key identifier: F6:2A:9E:68:B6:C3:6D:53:5E:B5:B5:7C:F3:B3:84:6A:66:03:F1:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62A9E68B6C36D535EB5B57CF3B3846A6603F124.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/323830343a6664633a613030303a3a2f33362d3336203d3e20323633363038.roa
Signing time:             Fri 26 Jun 2026 12:03:31 +0000
ROA not before:           Fri 26 Jun 2026 11:58:31 +0000
ROA not after:            Fri 25 Jun 2027 12:03:31 +0000
asID:                     263608
IP address blocks:        2804:fdc:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F62A9E68B6C36D535EB5B57CF3B3846A6603F124.crl
                          rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F62A9E68B6C36D535EB5B57CF3B3846A6603F124.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62A9E68B6C36D535EB5B57CF3B3846A6603F124.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 18:32:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:1f:3c:91:3c:75:9c:49:45:bf:5e:b6:d6:7d:2d:6d:29:55:7e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F62A9E68B6C36D535EB5B57CF3B3846A6603F124
        Validity
            Not Before: Jun 26 11:58:31 2026 GMT
            Not After : Jun 25 12:03:31 2027 GMT
        Subject: CN=C5C32721355B0BD8AA2879160179A3641D08541C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2e:46:c4:58:19:d2:65:20:aa:19:6d:81:f7:
                    56:d7:2f:c3:d7:62:a3:9c:a4:50:97:85:49:56:e2:
                    08:bb:ef:38:e7:0e:0f:a9:99:0f:c7:c0:4b:bf:96:
                    df:a6:a2:3c:e8:2b:34:29:4d:24:6f:7a:4f:3f:b4:
                    bf:77:98:57:4d:de:96:a1:60:b8:c2:14:f4:13:76:
                    df:7e:88:86:24:96:0c:51:cd:0b:d6:b8:ad:1a:b4:
                    1c:77:a5:4d:b4:25:43:51:32:c4:16:2f:48:12:ec:
                    61:59:b2:3d:fd:20:a2:59:da:2e:e0:0b:a6:ac:3f:
                    40:af:ae:5d:d9:d9:fb:1a:b5:77:a0:06:27:2d:d8:
                    a4:d8:ec:0d:46:8b:c5:7c:62:1a:24:0c:82:72:73:
                    bd:04:e1:36:62:ec:89:46:72:51:d3:9d:7b:d6:4e:
                    46:13:84:dc:0a:e9:ff:d8:c3:02:49:18:21:d3:4d:
                    56:cf:3b:fd:24:99:8c:14:1b:08:a4:e4:30:a4:f0:
                    29:13:fd:0a:82:02:36:f4:d5:3b:9a:a2:58:59:e8:
                    cb:2e:bf:e5:e9:ab:96:f6:59:9c:9a:07:f3:ff:ea:
                    a5:8d:3f:28:ed:a7:46:60:f2:72:61:16:7a:81:ad:
                    4d:52:d7:ba:7a:70:1f:ec:08:e1:82:ad:08:5a:cb:
                    09:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C3:27:21:35:5B:0B:D8:AA:28:79:16:01:79:A3:64:1D:08:54:1C
            X509v3 Authority Key Identifier:
                keyid:F6:2A:9E:68:B6:C3:6D:53:5E:B5:B5:7C:F3:B3:84:6A:66:03:F1:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F62A9E68B6C36D535EB5B57CF3B3846A6603F124.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62A9E68B6C36D535EB5B57CF3B3846A6603F124.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/323830343a6664633a613030303a3a2f33362d3336203d3e20323633363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fdc:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         87:15:0a:c5:9e:85:e4:a2:4a:ee:d9:cc:02:c3:e0:3c:00:52:
         7e:8a:f1:b8:1a:67:bb:13:d2:81:2a:f3:84:c0:2b:e1:7f:6a:
         83:23:49:af:2f:00:b5:a6:ea:49:bb:e2:37:4a:19:e1:72:a3:
         be:3e:de:70:5f:f3:f6:f7:c3:3e:b6:04:c5:8b:fd:47:76:7f:
         9a:e9:b0:4e:1b:9d:b3:52:f0:d1:4d:7b:eb:85:d2:6b:d8:44:
         4e:f9:5b:29:83:18:b4:1e:17:f5:7e:f8:cf:19:b3:2f:ad:fd:
         87:c7:16:26:f4:90:6d:4e:13:87:9d:69:61:b1:11:b3:74:f1:
         f0:01:ec:9d:1b:13:42:79:e5:a3:14:07:9d:09:92:3c:f6:94:
         8c:c1:41:80:98:ae:31:03:94:6b:01:ca:08:d0:c2:75:36:9b:
         60:85:c1:e1:09:aa:69:66:bc:b4:39:25:b7:f0:cc:35:09:90:
         cb:e6:04:ab:54:fd:db:9c:4e:e2:a8:48:01:10:11:6c:83:db:
         6a:d4:f4:cd:f4:1e:3b:0e:3d:2b:47:04:86:98:d5:1b:a3:4e:
         76:54:d4:bc:9c:d2:f2:8a:61:7d:b0:3b:a2:9b:ae:51:67:e1:
         0d:fb:c5:18:e2:f1:58:dc:63:08:9b:d7:d2:ce:19:3f:5d:18:
         f8:17:6c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:15:48 2026 by rpki-client