Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a3130303a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a336437343a3130303a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          AnMnNxPWGAJBxPZIRw7JizP4xKffhJhS1r2Z0yf3mtM=
Subject key identifier:   07:7D:2A:9D:0A:6F:0B:C5:BA:80:86:FA:F2:EA:8B:C5:F7:41:70:9A
Certificate issuer:       /CN=C1CB366144D597E5C1773B22449337BACEB7A019
Certificate serial:       03C4DC21155E48F1F568BF177B4DB826568206C3
Authority key identifier: C1:CB:36:61:44:D5:97:E5:C1:77:3B:22:44:93:37:BA:CE:B7:A0:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1CB366144D597E5C1773B22449337BACEB7A019.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a3130303a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Thu 18 Jun 2026 11:39:34 +0000
ROA not before:           Thu 18 Jun 2026 11:34:34 +0000
ROA not after:            Thu 17 Jun 2027 11:39:34 +0000
asID:                     262617
IP address blocks:        2804:3d74:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/C1CB366144D597E5C1773B22449337BACEB7A019.crl
                          rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/C1CB366144D597E5C1773B22449337BACEB7A019.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1CB366144D597E5C1773B22449337BACEB7A019.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 00:18:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c4:dc:21:15:5e:48:f1:f5:68:bf:17:7b:4d:b8:26:56:82:06:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1CB366144D597E5C1773B22449337BACEB7A019
        Validity
            Not Before: Jun 18 11:34:34 2026 GMT
            Not After : Jun 17 11:39:34 2027 GMT
        Subject: CN=077D2A9D0A6F0BC5BA8086FAF2EA8BC5F741709A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:41:e3:fe:60:a4:98:26:94:20:39:a4:81:f5:
                    c5:57:85:04:d4:0a:f2:35:66:96:3e:d4:27:51:dd:
                    03:0e:01:c5:ed:fd:22:f9:17:0f:32:d6:02:86:62:
                    80:f0:bc:59:93:db:60:5f:81:d7:92:39:c6:69:96:
                    e6:70:c8:e9:2c:a0:4d:cf:f2:56:34:0f:db:a9:d1:
                    0a:95:23:18:74:3c:26:5c:29:73:72:1c:63:dd:6a:
                    f7:9f:38:65:c0:82:21:d9:01:d5:29:70:6a:6b:f5:
                    53:07:4f:4d:0a:50:03:e0:0a:60:00:8d:73:c6:06:
                    61:f7:e7:db:59:74:cd:d7:6c:98:6e:af:d9:e9:55:
                    c2:bf:27:0a:4e:85:46:7d:a8:e3:76:4c:35:38:98:
                    7d:32:0e:55:ed:bb:41:18:b7:d7:80:e8:fc:f2:1c:
                    90:4d:17:88:00:2f:e5:16:55:fa:65:d8:04:e2:82:
                    3e:ea:f2:6a:0b:e7:5c:1e:b9:7a:65:72:e9:34:1d:
                    12:2d:36:83:05:85:16:77:d6:cd:47:4b:ff:72:08:
                    35:0c:a0:ae:03:22:44:d1:b6:c7:2a:23:39:57:08:
                    4d:f5:ec:0d:fe:ed:ce:89:e2:d6:87:34:50:30:80:
                    41:fc:75:f4:1d:18:85:6f:78:86:3d:cf:1c:a1:0a:
                    b0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7D:2A:9D:0A:6F:0B:C5:BA:80:86:FA:F2:EA:8B:C5:F7:41:70:9A
            X509v3 Authority Key Identifier:
                keyid:C1:CB:36:61:44:D5:97:E5:C1:77:3B:22:44:93:37:BA:CE:B7:A0:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/C1CB366144D597E5C1773B22449337BACEB7A019.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1CB366144D597E5C1773B22449337BACEB7A019.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a3130303a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d74:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:28:ab:42:52:95:e1:5b:a8:44:84:d3:64:d3:da:0b:d6:80:
         eb:c5:8a:cd:2e:09:e7:38:e4:9b:7c:10:ca:5b:76:08:6a:bb:
         cc:0e:c6:cd:1d:c6:25:59:ce:6b:d9:af:51:f7:9b:bb:df:c5:
         6e:ed:6d:39:6a:f1:58:b9:20:15:94:5f:c2:8e:4e:b0:1a:48:
         1b:a7:4a:09:89:fa:f0:73:d5:83:e9:ce:7e:63:46:08:e1:0b:
         1e:32:29:7a:29:d4:94:9a:20:ad:07:3e:a7:71:ea:4b:34:7a:
         a7:18:41:de:13:d9:99:9f:0d:fe:d2:dd:4c:49:c8:0e:3d:92:
         be:5e:d0:1d:b4:81:32:72:b7:2f:d6:df:b1:6f:21:41:56:81:
         13:07:f0:7b:8c:c3:e7:5c:38:86:61:ac:86:07:5a:1c:5f:a5:
         d6:17:f6:0d:fc:96:71:c0:2c:98:5a:a7:4a:1f:62:5b:24:4f:
         ce:ab:69:61:7a:f1:bf:9a:d5:a7:93:69:f7:b9:f6:5a:ed:d5:
         ae:b5:45:69:17:b7:23:f2:88:23:0b:8b:02:ca:0c:de:0a:2e:
         0b:78:ad:99:6b:be:67:cc:33:d0:38:68:b4:4a:d9:67:49:f8:
         33:3e:8a:4d:cd:9e:f3:85:38:f4:88:a3:6a:f5:74:99:93:98:
         6e:3e:22:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 14:11:22 2026 by rpki-client