Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/323830343a353634343a3a2f33342d3334203d3e20323637393837.roa
File:                     323830343a353634343a3a2f33342d3334203d3e20323637393837.roa (raw, json)
Hash identifier:          dZVAZWavy66OmjT9cLnerabFYKR4OuFmcCWJE9Bzcr4=
Subject key identifier:   5E:DA:4F:1E:B1:CA:9C:1D:5B:D6:6E:D2:41:ED:2F:56:0E:E5:E5:E0
Certificate issuer:       /CN=17D465F2E10B4AC050BBA11926B380E039F8FA2D
Certificate serial:       4892589DC5E338D34C70AAEEAB33456CC667EEEC
Authority key identifier: 17:D4:65:F2:E1:0B:4A:C0:50:BB:A1:19:26:B3:80:E0:39:F8:FA:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17D465F2E10B4AC050BBA11926B380E039F8FA2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/323830343a353634343a3a2f33342d3334203d3e20323637393837.roa
Signing time:             Tue 23 Jun 2026 19:00:24 +0000
ROA not before:           Tue 23 Jun 2026 18:55:24 +0000
ROA not after:            Tue 22 Jun 2027 19:00:24 +0000
asID:                     267987
IP address blocks:        2804:5644::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/17D465F2E10B4AC050BBA11926B380E039F8FA2D.crl
                          rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/17D465F2E10B4AC050BBA11926B380E039F8FA2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17D465F2E10B4AC050BBA11926B380E039F8FA2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 18:42:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:92:58:9d:c5:e3:38:d3:4c:70:aa:ee:ab:33:45:6c:c6:67:ee:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17D465F2E10B4AC050BBA11926B380E039F8FA2D
        Validity
            Not Before: Jun 23 18:55:24 2026 GMT
            Not After : Jun 22 19:00:24 2027 GMT
        Subject: CN=5EDA4F1EB1CA9C1D5BD66ED241ED2F560EE5E5E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7c:d7:20:4c:00:76:57:80:ae:e2:87:d2:a6:
                    35:e4:c9:ee:0e:5a:97:ef:51:32:66:28:6f:d0:2d:
                    73:ff:dc:05:4b:f1:11:be:e6:0f:2d:bf:7c:97:df:
                    d9:e0:27:8c:17:ce:5c:d0:43:27:70:a6:c3:16:a2:
                    32:a2:f9:e9:13:a4:48:a2:1e:95:12:19:21:fc:35:
                    e4:42:d7:29:55:60:a7:2e:67:d5:e1:cc:24:f8:61:
                    0b:67:5a:37:d9:5a:42:28:a8:60:f6:42:f6:e5:38:
                    fa:a8:7b:1f:92:ca:85:f0:b5:c8:88:49:bf:90:05:
                    b5:3a:aa:c2:e6:8d:73:a2:14:0c:12:71:0c:cc:2f:
                    76:f2:10:e2:7f:57:af:1c:a1:38:3d:4d:65:88:1e:
                    58:73:e3:12:49:43:06:9c:3d:ca:2e:5f:90:4c:fb:
                    94:92:ec:1c:1a:42:82:28:7d:98:77:05:6c:4e:59:
                    6b:f8:0a:47:60:9c:d7:86:ae:8f:a3:19:46:9d:6e:
                    3a:af:5e:c6:94:d8:aa:76:01:00:8b:9f:bc:b8:66:
                    0a:a1:84:40:22:65:84:35:ab:48:d1:a4:9d:7a:53:
                    5e:16:0d:3f:4a:e8:87:69:c3:ef:15:5c:32:0b:7d:
                    b4:9b:b3:a1:9e:e7:52:d6:70:55:c7:94:76:6a:a3:
                    49:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DA:4F:1E:B1:CA:9C:1D:5B:D6:6E:D2:41:ED:2F:56:0E:E5:E5:E0
            X509v3 Authority Key Identifier:
                keyid:17:D4:65:F2:E1:0B:4A:C0:50:BB:A1:19:26:B3:80:E0:39:F8:FA:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/17D465F2E10B4AC050BBA11926B380E039F8FA2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17D465F2E10B4AC050BBA11926B380E039F8FA2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/323830343a353634343a3a2f33342d3334203d3e20323637393837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5644::/34

    Signature Algorithm: sha256WithRSAEncryption
         b2:42:b8:86:70:47:ee:50:76:45:c4:bb:f3:da:90:86:ba:44:
         b8:0c:82:2a:e0:a5:57:0f:29:3f:ac:e6:f5:5b:c1:9c:57:e8:
         67:27:0d:4e:8a:fc:97:20:a7:1f:9f:4a:74:92:6b:44:dc:16:
         b7:45:bd:ad:ce:6c:3b:73:d4:c7:dd:69:a6:e7:ea:7b:dc:e5:
         33:44:e9:2b:d4:09:83:9f:36:5d:a2:fb:ac:27:45:f2:fc:6e:
         2c:04:83:f3:fa:d3:56:87:7f:63:3d:5e:0b:3e:f8:fb:00:c5:
         85:af:80:3c:56:27:f1:31:21:7f:fe:35:b5:f8:2d:7e:b4:a8:
         6b:34:0a:10:08:dd:3e:4c:11:e1:12:f4:91:dd:cd:ce:3c:22:
         8c:2c:5c:0e:24:01:80:37:93:6b:59:a1:3e:a0:ef:54:8c:ec:
         24:b3:41:84:7a:bd:b8:56:14:41:ba:e0:27:b8:7d:af:c5:b4:
         ee:36:b3:62:f8:8a:5f:bc:c1:c1:39:01:27:2d:5e:e1:06:a1:
         a6:4c:37:1c:48:a2:15:88:9d:6b:fe:c8:32:42:05:3e:15:0d:
         2a:8c:38:4c:84:e4:80:a9:5c:12:46:95:a9:d8:de:77:60:fe:
         e3:20:9e:76:3c:02:bc:5a:e0:c7:73:13:ff:ee:41:cc:b1:f9:
         a3:d3:4f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:58:52 2026 by rpki-client