Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/323830343a333066383a3130303a3a2f34382d3438203d3e20323634393834.roa
File:                     323830343a333066383a3130303a3a2f34382d3438203d3e20323634393834.roa (raw, json)
Hash identifier:          jr09upk+exP++0mIDAigNmrBE8R0ylXK/wyN/OUB7/A=
Subject key identifier:   0E:66:75:E7:D6:30:3F:47:4F:26:E0:18:43:8F:D2:D3:96:3F:3A:6F
Certificate issuer:       /CN=42C699479C53A3D36D21D10779B08C5EFF648DD6
Certificate serial:       06D3BC900ED0FD5C9B8C4E0F2DAA7FB7B721F005
Authority key identifier: 42:C6:99:47:9C:53:A3:D3:6D:21:D1:07:79:B0:8C:5E:FF:64:8D:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42C699479C53A3D36D21D10779B08C5EFF648DD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/323830343a333066383a3130303a3a2f34382d3438203d3e20323634393834.roa
Signing time:             Wed 17 Jun 2026 15:17:06 +0000
ROA not before:           Wed 17 Jun 2026 15:12:06 +0000
ROA not after:            Wed 16 Jun 2027 15:17:06 +0000
asID:                     264984
IP address blocks:        2804:30f8:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/42C699479C53A3D36D21D10779B08C5EFF648DD6.crl
                          rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/42C699479C53A3D36D21D10779B08C5EFF648DD6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42C699479C53A3D36D21D10779B08C5EFF648DD6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 07:11:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:d3:bc:90:0e:d0:fd:5c:9b:8c:4e:0f:2d:aa:7f:b7:b7:21:f0:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42C699479C53A3D36D21D10779B08C5EFF648DD6
        Validity
            Not Before: Jun 17 15:12:06 2026 GMT
            Not After : Jun 16 15:17:06 2027 GMT
        Subject: CN=0E6675E7D6303F474F26E018438FD2D3963F3A6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8b:e8:27:b7:79:84:18:01:5f:c7:8f:19:0d:
                    8a:b0:3a:d8:ad:66:b7:96:65:d1:ca:e5:78:41:bf:
                    9d:92:72:f5:2b:0f:28:e4:40:2b:db:30:b9:41:74:
                    0f:85:11:1e:33:0a:3b:bd:fc:76:4a:8b:60:11:5a:
                    db:17:75:77:9b:13:13:99:80:18:06:7e:08:a3:b7:
                    b1:d1:f4:52:0b:84:9d:ba:d1:df:b2:89:3f:e7:d3:
                    0b:be:c3:03:a6:22:01:b2:f7:3c:66:13:96:c8:dc:
                    9f:ec:5e:57:93:fe:ef:f9:48:9f:be:93:d2:65:1a:
                    ce:d4:81:84:6a:cb:2a:d9:fc:64:07:35:86:f0:1a:
                    05:7f:e8:b7:2b:5b:b3:56:ff:fb:9d:d3:c2:eb:98:
                    9d:64:26:19:bc:9b:12:30:54:00:59:08:49:2f:9f:
                    07:ed:70:2d:a4:d9:bc:63:e6:71:cc:bb:d0:0b:fc:
                    80:bf:b5:b0:0f:af:5e:79:0a:80:7a:61:eb:a5:a6:
                    85:59:ea:13:cd:87:f9:6f:ee:1d:47:b0:54:e7:5d:
                    af:a1:53:27:b0:ae:b8:98:8d:22:13:49:26:e0:1e:
                    de:49:c6:fd:da:ec:8b:86:81:e2:23:06:f9:af:33:
                    72:dc:d3:3d:f9:12:55:b7:5b:20:92:bc:ba:30:36:
                    c3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:66:75:E7:D6:30:3F:47:4F:26:E0:18:43:8F:D2:D3:96:3F:3A:6F
            X509v3 Authority Key Identifier:
                keyid:42:C6:99:47:9C:53:A3:D3:6D:21:D1:07:79:B0:8C:5E:FF:64:8D:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/42C699479C53A3D36D21D10779B08C5EFF648DD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42C699479C53A3D36D21D10779B08C5EFF648DD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/323830343a333066383a3130303a3a2f34382d3438203d3e20323634393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:30f8:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:10:a8:4f:38:46:9f:f1:f9:11:09:79:96:8f:b5:cc:76:36:
         91:6b:88:2e:bf:3f:16:19:c5:f3:66:d1:54:0b:6c:3d:a7:42:
         dc:b8:c9:30:b0:21:a2:c1:2f:7f:0b:80:4f:13:c3:c2:2b:35:
         73:a1:c3:e5:69:9e:dd:b1:33:57:83:f7:9b:d6:4e:39:af:a0:
         fe:c1:20:55:a1:28:01:1e:e8:f8:e9:f2:22:fa:df:44:68:38:
         31:c5:33:fd:ff:76:08:09:d4:61:d4:0c:f4:1a:54:98:57:da:
         a4:f0:4b:97:b4:30:2d:60:13:3f:f3:fc:13:bd:65:31:d9:5b:
         01:ae:6d:3e:ca:02:82:bb:bf:f9:8a:21:73:09:00:83:b9:a6:
         dd:00:c2:73:44:dd:4b:b9:f3:f4:65:cf:d0:a4:b3:63:b9:b7:
         92:54:e5:fb:9b:09:e5:ca:91:87:a9:b4:e3:43:3c:09:d4:dd:
         5f:ba:5f:c1:39:b2:b5:a4:19:17:88:6e:82:47:c1:cb:33:40:
         6d:5a:ac:47:1c:fd:41:6c:93:dd:9e:4e:78:90:e3:c8:59:71:
         a6:6c:e0:5e:91:c6:fe:ea:89:a0:b3:39:7d:67:e2:17:a3:f8:
         ad:75:88:71:04:ca:8a:c9:d7:4b:00:d0:72:ac:56:1e:71:75:
         3b:3f:7e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:10:45 2026 by rpki-client