Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/323830343a333066383a3330303a3a2f34302d3430203d3e20323634393834.roa
File:                     323830343a333066383a3330303a3a2f34302d3430203d3e20323634393834.roa (raw, json)
Hash identifier:          R8sh86iNXttWo5BYnkPNwGDdWzaPjqHsUfff49IBCbM=
Subject key identifier:   47:52:A3:23:4D:82:CF:53:83:17:50:35:8E:6F:CF:B4:CA:99:57:C8
Certificate issuer:       /CN=42C699479C53A3D36D21D10779B08C5EFF648DD6
Certificate serial:       4D7ADA54D1852905CB0BCC2788B7C2340C70C03F
Authority key identifier: 42:C6:99:47:9C:53:A3:D3:6D:21:D1:07:79:B0:8C:5E:FF:64:8D:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42C699479C53A3D36D21D10779B08C5EFF648DD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/323830343a333066383a3330303a3a2f34302d3430203d3e20323634393834.roa
Signing time:             Wed 17 Jun 2026 15:17:06 +0000
ROA not before:           Wed 17 Jun 2026 15:12:06 +0000
ROA not after:            Wed 16 Jun 2027 15:17:06 +0000
asID:                     264984
IP address blocks:        2804:30f8:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/42C699479C53A3D36D21D10779B08C5EFF648DD6.crl
                          rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/42C699479C53A3D36D21D10779B08C5EFF648DD6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42C699479C53A3D36D21D10779B08C5EFF648DD6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 07:11:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:7a:da:54:d1:85:29:05:cb:0b:cc:27:88:b7:c2:34:0c:70:c0:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42C699479C53A3D36D21D10779B08C5EFF648DD6
        Validity
            Not Before: Jun 17 15:12:06 2026 GMT
            Not After : Jun 16 15:17:06 2027 GMT
        Subject: CN=4752A3234D82CF53831750358E6FCFB4CA9957C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:71:a7:f7:67:5c:ad:5e:cd:d8:e5:ea:08:63:
                    b0:b4:ad:41:34:3f:75:8e:40:dc:c1:0e:67:76:4d:
                    6e:2a:f8:56:9f:3e:7d:41:56:02:76:34:24:99:e1:
                    e1:aa:46:0b:37:42:8e:03:11:d9:f7:e2:a6:d3:61:
                    8a:78:d4:9b:84:ba:16:b0:48:fa:a3:bc:79:17:22:
                    52:fb:a4:50:e1:71:f0:a9:46:47:44:57:3d:a7:0c:
                    6d:76:a3:f4:40:19:4c:ad:b2:3f:55:da:df:77:10:
                    1e:e8:9c:81:8a:ad:91:fc:d2:d9:1f:b5:0d:7b:c3:
                    11:0a:0b:bf:c7:20:bb:70:56:6f:44:cf:9b:37:f7:
                    47:cc:29:cd:6d:93:01:24:f4:6a:d2:af:26:a6:b2:
                    e7:52:5b:4c:6c:88:75:19:df:64:1f:a9:5e:42:f7:
                    f6:ef:eb:6b:58:dd:89:c9:cf:73:d0:c3:96:d1:0e:
                    12:5c:ca:f4:38:99:99:4a:d1:d1:c9:e3:0d:b6:df:
                    f7:36:08:df:08:a3:f4:4a:f9:c4:aa:d0:43:e6:6f:
                    c2:87:17:d5:a4:ad:1a:70:4e:aa:e0:3c:ab:95:db:
                    8a:8e:f9:5c:2a:5d:32:0c:ca:33:f6:ee:ac:42:a7:
                    14:7d:2e:19:6b:ae:e0:53:4e:7e:3b:6c:bb:02:45:
                    78:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:52:A3:23:4D:82:CF:53:83:17:50:35:8E:6F:CF:B4:CA:99:57:C8
            X509v3 Authority Key Identifier:
                keyid:42:C6:99:47:9C:53:A3:D3:6D:21:D1:07:79:B0:8C:5E:FF:64:8D:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/42C699479C53A3D36D21D10779B08C5EFF648DD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42C699479C53A3D36D21D10779B08C5EFF648DD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/323830343a333066383a3330303a3a2f34302d3430203d3e20323634393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:30f8:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         02:e4:19:d0:86:3d:44:4d:5a:ff:f8:e1:20:e6:61:17:52:9e:
         9e:1e:2f:e0:71:86:cb:06:00:ef:23:6f:e1:45:14:db:a4:7b:
         b6:61:f7:95:ad:fd:39:a9:6f:ad:a7:d3:d6:a6:f6:24:e9:00:
         55:07:c8:27:9b:f9:a6:4c:66:49:9c:df:cc:56:23:a6:5b:8e:
         1f:2e:10:48:64:46:ff:cd:27:71:0a:54:f0:2b:fb:8c:71:87:
         3e:06:fe:a6:32:1a:cb:f2:a2:01:eb:b2:87:ec:e6:80:92:25:
         89:60:21:62:3a:e4:04:50:de:9b:d4:b9:cc:a9:a5:15:54:ca:
         49:41:27:dd:e0:5d:ba:cc:f6:98:d4:04:ae:62:cc:a2:5d:3d:
         49:78:60:b9:3a:2a:ba:16:ee:92:7b:ca:69:d6:4d:c7:fa:04:
         f2:39:be:44:ba:05:a8:e0:db:5d:54:f1:cb:9f:66:29:40:b6:
         64:55:b0:d8:6f:86:13:4f:2e:11:ae:3c:32:5a:cf:46:10:6a:
         f7:df:a0:65:8f:63:9a:9e:ce:57:9e:95:09:10:34:69:81:b5:
         19:f0:08:9c:97:69:f3:01:87:09:f2:05:bd:b3:57:d3:40:ee:
         48:19:d1:ab:cd:ee:12:50:0d:25:fd:25:4e:5d:b4:f2:e1:ba:
         a6:32:6e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:10:57 2026 by rpki-client