Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/323830343a326336343a3a2f33322d3438203d3e20323635323135.roa
File:                     323830343a326336343a3a2f33322d3438203d3e20323635323135.roa (raw, json)
Hash identifier:          WANm1F6sSBsFTOfUmiHGg4ICR4rvlqK0ssG6KDIYLoc=
Subject key identifier:   7D:12:81:E2:77:17:DB:35:5B:F6:D2:19:9A:E2:71:4F:10:D2:C3:CF
Certificate issuer:       /CN=CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691
Certificate serial:       560E8AF326A98DCDD8D574A7E8F93640F20E3FA8
Authority key identifier: CA:3B:4A:24:30:DC:6A:1E:6D:28:1B:34:BA:D2:FA:E5:FC:41:46:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/323830343a326336343a3a2f33322d3438203d3e20323635323135.roa
Signing time:             Tue 16 Jun 2026 19:09:49 +0000
ROA not before:           Tue 16 Jun 2026 19:04:49 +0000
ROA not after:            Tue 15 Jun 2027 19:09:49 +0000
asID:                     265215
IP address blocks:        2804:2c64::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.crl
                          rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 07:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:0e:8a:f3:26:a9:8d:cd:d8:d5:74:a7:e8:f9:36:40:f2:0e:3f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691
        Validity
            Not Before: Jun 16 19:04:49 2026 GMT
            Not After : Jun 15 19:09:49 2027 GMT
        Subject: CN=7D1281E27717DB355BF6D2199AE2714F10D2C3CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0a:18:5b:6b:ce:25:59:4a:66:13:a6:61:63:
                    fc:90:f8:e2:f5:59:56:aa:f3:70:de:c4:bb:f2:b4:
                    c7:83:08:92:5f:d0:4a:68:d4:ef:fc:e9:e6:f6:08:
                    45:cd:a8:88:4e:d0:8d:75:48:60:95:ad:83:0b:f1:
                    8a:1a:3d:da:99:f2:3b:0f:86:8f:2f:44:59:46:b9:
                    8e:08:96:2b:cb:b7:7f:18:20:bf:9f:37:aa:25:33:
                    00:e8:78:1c:ae:4c:53:c7:7f:5e:fb:c3:51:f4:12:
                    7b:a5:22:ee:b6:66:20:7f:be:c1:91:f8:9f:b0:b6:
                    0f:8a:45:ed:7d:2b:42:bc:86:c2:8a:ca:05:33:45:
                    37:56:8d:6d:e2:41:e7:30:cb:30:30:7b:ae:ae:5b:
                    64:97:5b:e7:8a:fd:b7:f2:e4:24:03:99:55:35:66:
                    12:86:08:52:5f:f4:8d:71:59:bd:93:81:7d:45:0b:
                    b6:60:ef:bc:3c:87:0e:02:31:ca:57:87:c1:e1:64:
                    c8:36:15:29:3d:ae:1e:0a:73:0c:1b:bd:fa:59:ae:
                    a5:8a:19:71:c5:9c:ea:4c:f4:a3:94:e1:42:a7:93:
                    9e:6c:b5:90:a9:ed:7c:a9:22:81:17:f5:13:0e:51:
                    c0:19:fc:bb:74:72:1e:00:33:35:da:5b:dc:4f:0e:
                    ac:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:12:81:E2:77:17:DB:35:5B:F6:D2:19:9A:E2:71:4F:10:D2:C3:CF
            X509v3 Authority Key Identifier:
                keyid:CA:3B:4A:24:30:DC:6A:1E:6D:28:1B:34:BA:D2:FA:E5:FC:41:46:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/323830343a326336343a3a2f33322d3438203d3e20323635323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c64::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:95:b3:17:45:25:e9:b3:55:e9:e6:5f:c5:d0:86:bc:b4:c8:
         af:4a:37:7c:5a:d9:5a:14:7a:98:a6:93:3f:3d:40:e6:f0:57:
         6d:0f:2f:7c:51:f4:67:d5:93:6b:ee:93:6d:96:52:81:0a:e5:
         58:b9:b4:b5:5e:99:a3:c2:0a:91:36:87:82:9c:98:4a:b9:15:
         cf:76:9e:5d:a2:f4:19:0a:0d:ec:8f:da:0d:38:c8:63:d4:03:
         23:29:59:db:1a:1f:35:8e:b2:66:40:f1:1f:56:1a:50:7b:ab:
         3e:45:e6:1b:dd:a8:b8:aa:06:b9:3b:2e:e7:87:7d:9e:b9:13:
         63:40:18:0e:f8:db:3d:4f:88:e5:11:e4:3e:8a:58:d1:2e:22:
         73:ce:c6:a2:f2:74:98:d7:e0:29:f1:20:cd:ee:30:a8:62:8d:
         72:b7:aa:09:8f:50:d5:29:48:be:fd:f2:4c:18:06:eb:43:4d:
         55:a1:4e:84:ea:c3:97:67:76:3c:91:fc:64:9f:bc:51:02:2f:
         d7:60:70:9c:d2:9c:4a:0f:af:e1:60:69:1a:70:7c:2c:04:c5:
         1d:06:37:12:ea:a6:4b:a1:bd:74:b6:3a:97:51:49:b7:c2:d7:
         08:4e:9e:48:9c:46:f4:a3:d4:00:45:67:b5:6c:fc:e6:9b:19:
         c4:69:41:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:10:47 2026 by rpki-client