Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/323830343a333066383a313830303a3a2f33382d3338203d3e20323634393834.roa
File:                     323830343a333066383a313830303a3a2f33382d3338203d3e20323634393834.roa (raw, json)
Hash identifier:          S2A4GacqyZFSNQJS/yE/omx5+PXcrl2nqJzi6hfu/9A=
Subject key identifier:   67:6B:C3:C5:D8:91:5F:B5:4C:F0:6B:5E:ED:5A:A4:1C:6A:EE:FD:F9
Certificate issuer:       /CN=42C699479C53A3D36D21D10779B08C5EFF648DD6
Certificate serial:       5D1D3E100F54F017902003A62DFA8E72AD88801E
Authority key identifier: 42:C6:99:47:9C:53:A3:D3:6D:21:D1:07:79:B0:8C:5E:FF:64:8D:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42C699479C53A3D36D21D10779B08C5EFF648DD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/323830343a333066383a313830303a3a2f33382d3338203d3e20323634393834.roa
Signing time:             Wed 17 Jun 2026 15:17:07 +0000
ROA not before:           Wed 17 Jun 2026 15:12:07 +0000
ROA not after:            Wed 16 Jun 2027 15:17:07 +0000
asID:                     264984
IP address blocks:        2804:30f8:1800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/42C699479C53A3D36D21D10779B08C5EFF648DD6.crl
                          rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/42C699479C53A3D36D21D10779B08C5EFF648DD6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42C699479C53A3D36D21D10779B08C5EFF648DD6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 07:11:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:1d:3e:10:0f:54:f0:17:90:20:03:a6:2d:fa:8e:72:ad:88:80:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42C699479C53A3D36D21D10779B08C5EFF648DD6
        Validity
            Not Before: Jun 17 15:12:07 2026 GMT
            Not After : Jun 16 15:17:07 2027 GMT
        Subject: CN=676BC3C5D8915FB54CF06B5EED5AA41C6AEEFDF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e4:50:91:c4:c5:cb:c7:e9:af:2f:a0:1c:f7:
                    31:86:e5:e8:ad:2c:69:c8:1a:9a:08:cc:08:cf:4c:
                    d0:d0:c5:62:3c:36:7a:9c:7b:5f:c1:a4:51:ed:51:
                    ad:a6:ad:c4:87:27:32:c9:b2:ed:91:41:9a:be:30:
                    a2:aa:8b:36:14:67:9b:69:0e:41:66:51:52:c6:37:
                    b4:59:60:c6:75:23:38:92:af:04:64:c3:b0:c6:97:
                    6d:17:18:a6:9f:3a:ea:17:5b:ab:ac:ed:90:f1:15:
                    11:e9:62:9c:cb:29:83:8a:82:6d:ec:bc:e0:67:2c:
                    08:a3:16:fd:80:92:80:d9:ba:cc:0e:93:30:59:4d:
                    15:db:66:a7:35:42:a9:9d:3a:4e:15:13:2c:5b:0e:
                    4c:47:5d:10:ab:e5:e1:72:2e:85:5e:15:4f:b6:d4:
                    7c:25:e4:a5:09:75:c4:c3:71:9f:20:05:6c:cc:d4:
                    31:04:31:3f:9a:89:b6:fa:68:be:57:1d:6d:6f:d9:
                    d9:27:d6:69:22:d7:05:7d:1b:f0:ef:e8:22:a7:32:
                    76:80:84:07:6e:ae:1a:cc:a7:f0:6f:82:bb:76:fa:
                    a7:10:28:c2:df:57:8c:fd:d5:90:89:66:83:5f:eb:
                    04:c9:36:4d:bb:04:39:41:3e:80:e9:60:19:19:91:
                    82:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6B:C3:C5:D8:91:5F:B5:4C:F0:6B:5E:ED:5A:A4:1C:6A:EE:FD:F9
            X509v3 Authority Key Identifier:
                keyid:42:C6:99:47:9C:53:A3:D3:6D:21:D1:07:79:B0:8C:5E:FF:64:8D:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/42C699479C53A3D36D21D10779B08C5EFF648DD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42C699479C53A3D36D21D10779B08C5EFF648DD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/323830343a333066383a313830303a3a2f33382d3338203d3e20323634393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:30f8:1800::/38

    Signature Algorithm: sha256WithRSAEncryption
         73:7b:72:93:43:15:2a:d9:b0:6d:49:63:ec:59:56:48:f4:25:
         d1:4c:b0:96:7c:41:5c:72:a3:53:72:48:88:89:9b:8b:56:85:
         ed:f5:4f:74:ef:51:4e:a0:d9:84:64:fa:0d:d2:a9:bf:a5:51:
         c1:25:4d:83:eb:99:ed:55:63:6b:ab:9e:83:f3:f9:1a:3b:1b:
         62:7e:a0:e6:46:57:7e:d0:a6:be:b8:6d:06:31:cb:a8:49:98:
         e8:c8:d0:ae:98:f1:50:79:36:50:8b:c6:fe:37:bf:4e:38:55:
         94:0c:cf:f9:e2:eb:c5:42:e5:59:5b:ce:ba:01:2a:c4:9e:97:
         19:aa:e4:b7:3b:7d:ab:ad:ae:b6:19:9a:f1:ca:60:99:77:ed:
         e0:fd:fb:93:d6:28:8b:45:45:13:a6:85:39:33:cf:cc:89:7c:
         36:8a:a4:7e:2d:74:69:c3:b4:42:65:b9:c7:18:70:b5:9d:26:
         3c:3a:2e:dc:66:ad:0f:9b:3f:4f:c8:0e:1d:25:f7:f7:0b:f2:
         e5:de:3e:66:c5:5a:28:97:95:58:b8:e2:27:bc:20:88:90:d4:
         61:8d:d0:af:12:f7:85:9d:0a:fe:f5:06:ba:b6:c9:bd:74:a8:
         60:72:44:7d:d8:8d:ed:f1:5d:75:bf:d8:54:f9:92:04:47:5d:
         0e:50:86:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:10:46 2026 by rpki-client