Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/323830343a353634343a3a2f33332d3333203d3e20323637393837.roa
File:                     323830343a353634343a3a2f33332d3333203d3e20323637393837.roa (raw, json)
Hash identifier:          TPutNCmraZqPsCaGf82jnuG0cqNJcs43EeTOsmkH4Z8=
Subject key identifier:   9A:A7:5A:C8:89:B4:0C:2B:DF:A5:16:42:06:DC:EC:B9:07:D0:08:91
Certificate issuer:       /CN=17D465F2E10B4AC050BBA11926B380E039F8FA2D
Certificate serial:       1AF51BF62E8DDEB6F3B89DB00EDE86D2D0531A3C
Authority key identifier: 17:D4:65:F2:E1:0B:4A:C0:50:BB:A1:19:26:B3:80:E0:39:F8:FA:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17D465F2E10B4AC050BBA11926B380E039F8FA2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/323830343a353634343a3a2f33332d3333203d3e20323637393837.roa
Signing time:             Tue 23 Jun 2026 19:00:24 +0000
ROA not before:           Tue 23 Jun 2026 18:55:24 +0000
ROA not after:            Tue 22 Jun 2027 19:00:24 +0000
asID:                     267987
IP address blocks:        2804:5644::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/17D465F2E10B4AC050BBA11926B380E039F8FA2D.crl
                          rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/17D465F2E10B4AC050BBA11926B380E039F8FA2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17D465F2E10B4AC050BBA11926B380E039F8FA2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 18:42:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f5:1b:f6:2e:8d:de:b6:f3:b8:9d:b0:0e:de:86:d2:d0:53:1a:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17D465F2E10B4AC050BBA11926B380E039F8FA2D
        Validity
            Not Before: Jun 23 18:55:24 2026 GMT
            Not After : Jun 22 19:00:24 2027 GMT
        Subject: CN=9AA75AC889B40C2BDFA5164206DCECB907D00891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:be:71:d9:41:b3:06:cb:de:d1:5e:25:2d:6e:
                    44:d1:ee:4d:8d:90:09:7d:83:e8:f0:d8:af:62:f2:
                    c3:09:f8:7c:33:a4:dd:0b:b5:ad:36:dd:50:51:1b:
                    38:bd:10:39:04:9a:36:0f:9c:a2:30:08:b7:28:b7:
                    1a:4c:7f:f8:1a:d8:5b:c8:64:96:77:ba:5c:a7:f3:
                    0b:22:81:a9:cd:24:5f:40:4d:85:ab:ce:3f:eb:20:
                    78:85:fd:48:5e:d0:c1:8e:7e:9b:55:a2:b6:d2:bb:
                    b5:3c:91:d5:12:e0:22:f6:b1:a5:96:bb:d2:ef:cc:
                    a1:db:d7:d1:0a:ac:a3:05:04:21:3d:55:3b:67:ae:
                    ad:85:70:a2:a4:ae:e0:87:8d:bf:5a:9c:e9:86:c6:
                    16:ed:2f:54:88:9e:c5:43:37:2f:6a:54:fb:c6:64:
                    03:c3:77:11:fa:94:7d:76:3a:e1:0f:3d:61:2a:0b:
                    94:de:86:6a:23:b5:8f:1d:27:53:5f:9b:e2:09:08:
                    af:6e:ae:48:87:ac:96:0a:69:ef:db:89:72:bb:fd:
                    aa:28:48:22:b8:08:15:2d:36:8b:e2:ae:24:4b:92:
                    0b:15:99:ae:b3:60:60:97:9e:d3:bf:09:be:f9:ac:
                    08:05:0b:85:ed:b7:6a:31:b4:da:7d:92:bd:5c:ee:
                    a8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A7:5A:C8:89:B4:0C:2B:DF:A5:16:42:06:DC:EC:B9:07:D0:08:91
            X509v3 Authority Key Identifier:
                keyid:17:D4:65:F2:E1:0B:4A:C0:50:BB:A1:19:26:B3:80:E0:39:F8:FA:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/17D465F2E10B4AC050BBA11926B380E039F8FA2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17D465F2E10B4AC050BBA11926B380E039F8FA2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/323830343a353634343a3a2f33332d3333203d3e20323637393837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5644::/33

    Signature Algorithm: sha256WithRSAEncryption
         0b:e4:b5:0b:52:fb:8b:2f:7f:d9:5e:2f:95:25:e8:e4:41:29:
         aa:72:a1:87:5e:ca:60:3e:9b:7b:a2:b6:2f:21:61:92:9d:cc:
         5a:d2:56:5b:0e:eb:7b:51:03:21:29:20:f2:98:57:8b:75:e6:
         5c:b9:c3:d3:3f:9e:a6:8e:30:93:2b:f6:2c:a1:46:d6:f5:0f:
         e0:23:5e:4a:d0:98:3e:5c:0c:b6:17:3b:42:0c:bb:9a:07:ce:
         fb:a9:ab:50:6b:2f:88:b0:60:5b:c9:32:a9:af:12:f3:c9:81:
         6d:1d:92:a1:34:78:5b:50:d4:4c:7f:53:ca:76:81:a3:25:52:
         d5:68:07:c0:16:7d:99:88:b1:f4:e6:75:3f:9d:bd:9b:e5:e5:
         82:0f:c2:22:61:bd:7d:c0:d7:9a:fd:60:33:54:24:70:62:b7:
         d3:31:1e:44:5a:70:11:53:62:2c:29:6e:48:86:73:3f:dc:9b:
         c5:08:17:90:63:e1:15:6d:91:d2:95:ac:8f:de:35:35:55:dd:
         16:8c:79:0e:db:e4:d9:f0:44:cc:c9:42:e6:c0:b5:40:51:b5:
         cc:1d:80:15:0a:65:ec:87:5c:75:b6:65:bd:df:b7:7e:e3:77:
         ea:5b:00:af:ba:e3:f8:5c:7d:93:5a:94:85:4f:80:1c:22:e0:
         35:a4:14:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:59:17 2026 by rpki-client