Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/323830343a313266383a3a2f33322d3438203d3e20323633353037.roa
File:                     323830343a313266383a3a2f33322d3438203d3e20323633353037.roa (raw, json)
Hash identifier:          Xy6FbPYaEBWCIbCSrhPXqPzba0+6aiz/vHDBfXK/Fhs=
Subject key identifier:   B0:7D:5B:75:68:D9:09:7F:E0:20:A6:1E:CE:FE:B3:A1:9D:B4:14:6F
Certificate issuer:       /CN=383F00CFEBB36741056246E209D3A5BBAC5663A5
Certificate serial:       03469A5BF48BFD6BC714BF72836DB2903F3A5D07
Authority key identifier: 38:3F:00:CF:EB:B3:67:41:05:62:46:E2:09:D3:A5:BB:AC:56:63:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/383F00CFEBB36741056246E209D3A5BBAC5663A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/323830343a313266383a3a2f33322d3438203d3e20323633353037.roa
Signing time:             Tue 16 Jun 2026 19:14:05 +0000
ROA not before:           Tue 16 Jun 2026 19:09:05 +0000
ROA not after:            Tue 15 Jun 2027 19:14:05 +0000
asID:                     263507
IP address blocks:        2804:12f8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/383F00CFEBB36741056246E209D3A5BBAC5663A5.crl
                          rsync://rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/383F00CFEBB36741056246E209D3A5BBAC5663A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/383F00CFEBB36741056246E209D3A5BBAC5663A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 09:06:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:46:9a:5b:f4:8b:fd:6b:c7:14:bf:72:83:6d:b2:90:3f:3a:5d:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=383F00CFEBB36741056246E209D3A5BBAC5663A5
        Validity
            Not Before: Jun 16 19:09:05 2026 GMT
            Not After : Jun 15 19:14:05 2027 GMT
        Subject: CN=B07D5B7568D9097FE020A61ECEFEB3A19DB4146F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:97:7c:7a:4b:ad:24:56:3d:47:75:27:ce:a9:
                    80:4f:14:87:0e:c4:be:05:ec:70:20:7f:6a:d4:b9:
                    64:9a:d8:c3:3e:58:9e:f8:8a:aa:cc:79:b7:9c:d0:
                    eb:99:06:09:a0:f4:34:f6:15:4e:5e:f0:aa:f4:22:
                    4d:9c:29:f8:91:ff:25:a6:c4:90:ca:93:49:02:e2:
                    e4:b1:3b:fb:26:0d:c6:c7:54:2f:c9:e8:8b:b2:2d:
                    1d:d5:9d:19:e2:df:1d:44:3a:cf:7a:02:f6:ff:2a:
                    32:91:83:7d:c5:89:e3:5a:e8:e0:34:2f:29:82:64:
                    89:59:b7:be:da:2f:29:92:6f:e3:90:15:83:a9:ca:
                    20:45:a7:72:85:4d:cc:4e:a8:1c:54:1e:e3:b2:0f:
                    c5:89:3a:af:f9:77:af:fa:55:9b:06:c3:50:79:9b:
                    a3:d5:f4:f5:3c:14:1d:7d:bf:6b:87:c5:f2:14:da:
                    48:d4:18:f5:ea:7b:ef:00:5f:44:3e:81:86:ed:4b:
                    2a:b6:34:c3:ea:9c:a5:bc:0e:ea:84:82:36:09:88:
                    e8:94:e9:9e:e5:1a:bb:6d:20:58:0e:0e:10:fd:2d:
                    ae:4a:60:45:38:31:20:b4:0a:79:5d:30:92:97:9c:
                    c9:40:80:93:e2:5d:dd:ed:c5:a9:e7:9a:cc:ba:57:
                    13:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:7D:5B:75:68:D9:09:7F:E0:20:A6:1E:CE:FE:B3:A1:9D:B4:14:6F
            X509v3 Authority Key Identifier:
                keyid:38:3F:00:CF:EB:B3:67:41:05:62:46:E2:09:D3:A5:BB:AC:56:63:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/383F00CFEBB36741056246E209D3A5BBAC5663A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/383F00CFEBB36741056246E209D3A5BBAC5663A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/323830343a313266383a3a2f33322d3438203d3e20323633353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:17:7d:6e:92:65:34:49:2b:d2:79:47:ab:70:d2:95:2e:2c:
         70:58:16:60:ce:f5:55:7f:48:11:3a:20:1f:96:c0:bb:1d:3f:
         29:3b:cc:b1:66:97:00:22:8e:ee:a2:49:15:b5:d4:08:59:3c:
         7a:02:06:d8:3b:32:44:4e:d4:81:20:86:e9:e6:03:c9:47:54:
         3e:d7:5c:0f:8c:0b:ed:50:2e:d0:3b:29:45:8c:cd:5d:64:df:
         df:dc:31:e9:df:c4:37:29:12:78:64:26:f5:00:b9:1b:38:d1:
         2f:0e:21:e3:3c:33:4e:54:d1:a7:1a:f5:71:b1:6b:45:40:cc:
         e7:a7:e2:bd:cb:66:af:a1:0c:f7:a5:ac:d0:60:d1:1f:13:8f:
         f2:d0:9d:06:48:0f:26:16:43:8c:48:1e:1d:42:88:e3:ec:bf:
         01:d6:cd:0b:12:a8:a4:70:4c:69:f4:7b:bf:77:3d:a2:e8:b9:
         59:da:27:de:f2:f4:c4:91:cc:42:00:42:a3:f0:55:14:8a:fa:
         0e:53:a7:f5:27:bb:9a:be:ec:ec:7e:43:8b:d5:8b:49:61:d2:
         a6:58:e3:36:98:52:23:4a:d0:69:83:14:c8:a4:0a:a6:3a:42:
         03:3d:00:b4:cd:09:5f:c8:2b:48:21:2e:8f:5a:f0:c2:fc:f3:
         4f:0b:08:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 14:32:09 2026 by rpki-client