Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/323830343a353634343a343030303a3a2f33342d3334203d3e20323637393837.roa
File:                     323830343a353634343a343030303a3a2f33342d3334203d3e20323637393837.roa (raw, json)
Hash identifier:          QVQVJTQhgok47vwcP8OjCLxOXH+KGnYj7iMWvP0e30o=
Subject key identifier:   9B:AA:69:58:FB:D3:33:B1:10:A6:4D:D0:E0:ED:BA:82:16:8D:5B:CE
Certificate issuer:       /CN=17D465F2E10B4AC050BBA11926B380E039F8FA2D
Certificate serial:       496D67D97CDB3CEB82E7AAD022B0C0CDA28A6711
Authority key identifier: 17:D4:65:F2:E1:0B:4A:C0:50:BB:A1:19:26:B3:80:E0:39:F8:FA:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17D465F2E10B4AC050BBA11926B380E039F8FA2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/323830343a353634343a343030303a3a2f33342d3334203d3e20323637393837.roa
Signing time:             Tue 23 Jun 2026 19:00:26 +0000
ROA not before:           Tue 23 Jun 2026 18:55:26 +0000
ROA not after:            Tue 22 Jun 2027 19:00:26 +0000
asID:                     267987
IP address blocks:        2804:5644:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/17D465F2E10B4AC050BBA11926B380E039F8FA2D.crl
                          rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/17D465F2E10B4AC050BBA11926B380E039F8FA2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17D465F2E10B4AC050BBA11926B380E039F8FA2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 18:42:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:6d:67:d9:7c:db:3c:eb:82:e7:aa:d0:22:b0:c0:cd:a2:8a:67:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17D465F2E10B4AC050BBA11926B380E039F8FA2D
        Validity
            Not Before: Jun 23 18:55:26 2026 GMT
            Not After : Jun 22 19:00:26 2027 GMT
        Subject: CN=9BAA6958FBD333B110A64DD0E0EDBA82168D5BCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ff:4f:a3:5b:c6:87:a0:98:55:c8:a2:1c:17:
                    fa:09:78:bc:0a:5d:4e:55:8e:0b:68:89:42:f3:19:
                    1d:83:69:3f:c0:73:d6:3c:75:50:dd:0c:ba:e6:28:
                    aa:30:5a:ad:76:c3:5b:89:30:f5:37:1d:af:6e:c4:
                    0a:e0:f7:97:f2:29:62:34:44:5e:82:2c:e0:1f:78:
                    45:5d:72:9c:dd:0a:b5:47:c5:d0:59:eb:04:b3:93:
                    db:82:73:3c:67:0b:7c:2d:97:cb:d6:e2:4b:20:4b:
                    d3:e8:12:9a:d5:f2:48:fd:e4:3e:2f:f0:3e:bb:0c:
                    50:b5:8d:bc:83:48:70:5d:15:3d:a1:55:a4:20:d0:
                    04:fc:0c:c7:e1:a1:2e:c0:43:e5:82:9e:d7:2d:13:
                    9e:bb:25:88:31:4d:ba:78:ca:64:72:05:a8:f6:81:
                    c6:a7:d6:65:87:98:8d:30:27:04:aa:e3:02:24:8d:
                    58:33:2e:54:9f:80:11:e7:2c:92:55:41:ae:76:fc:
                    b1:13:f4:18:22:23:3d:84:c2:36:ae:5c:d7:dc:c7:
                    8f:a5:64:9b:a7:24:8d:14:62:6f:f9:3d:e4:8a:4e:
                    0e:fb:ef:ae:d1:29:05:80:7b:55:ea:6c:9d:85:24:
                    86:77:eb:4b:e0:63:f9:e0:44:a5:62:b7:ab:bc:e4:
                    4d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AA:69:58:FB:D3:33:B1:10:A6:4D:D0:E0:ED:BA:82:16:8D:5B:CE
            X509v3 Authority Key Identifier:
                keyid:17:D4:65:F2:E1:0B:4A:C0:50:BB:A1:19:26:B3:80:E0:39:F8:FA:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/17D465F2E10B4AC050BBA11926B380E039F8FA2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17D465F2E10B4AC050BBA11926B380E039F8FA2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/323830343a353634343a343030303a3a2f33342d3334203d3e20323637393837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5644:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5c:d7:29:9a:80:d9:93:57:16:d4:e2:60:70:b6:31:80:ab:f1:
         89:71:6f:4a:d4:20:8b:a9:d9:38:79:6c:4d:21:cd:96:07:f5:
         81:57:bc:fa:fe:d6:46:07:30:09:e5:8b:a7:72:47:d3:45:ff:
         ea:ab:c6:55:ae:bd:45:30:5f:53:8e:18:67:20:43:e0:0e:bb:
         63:11:6f:88:93:52:2c:72:b1:41:ec:a4:15:f8:d3:4c:9f:61:
         89:87:3b:4f:00:c9:0e:46:62:86:69:e7:48:50:03:30:17:2a:
         b9:04:b4:72:ec:31:10:0e:1c:67:c1:e0:35:85:59:38:55:95:
         44:48:c3:de:6c:ce:a0:97:c4:09:50:34:c7:4b:4f:64:94:e8:
         0b:1d:52:36:ef:2d:81:e9:bc:6e:f6:67:4c:dc:75:77:44:8e:
         00:ec:03:de:2d:7c:74:b9:0b:07:f4:13:3c:84:05:6a:51:08:
         b7:f1:fe:6f:5f:7f:38:4a:40:a2:ba:ed:75:11:47:9b:25:db:
         e0:10:ef:6a:66:66:0e:67:82:f4:fa:d1:4c:1d:20:67:d3:ce:
         46:4f:6a:49:b0:54:50:02:c1:68:8e:11:5a:d6:c4:51:f2:c1:
         03:cf:23:b3:8e:cc:9a:d5:79:7f:72:1e:16:6c:b7:01:1c:45:
         73:97:15:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:59:23 2026 by rpki-client