Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a323030303a3a2f33362d3336203d3e20323634323437.roa
File:                     323830343a323465343a323030303a3a2f33362d3336203d3e20323634323437.roa (raw, json)
Hash identifier:          GcVjspCIgjroYnv1FcIm7qRELxYajUsozeUcql8DHpQ=
Subject key identifier:   B2:6D:1F:58:7A:73:B4:97:20:C1:1B:F6:6E:D9:24:21:10:98:A3:6B
Certificate issuer:       /CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
Certificate serial:       2B37461B0A8066F8B2E3D22D288EFA7D570ABDF8
Authority key identifier: 12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a323030303a3a2f33362d3336203d3e20323634323437.roa
Signing time:             Tue 23 Jun 2026 12:40:46 +0000
ROA not before:           Tue 23 Jun 2026 12:35:46 +0000
ROA not after:            Tue 22 Jun 2027 12:40:46 +0000
asID:                     264247
IP address blocks:        2804:24e4:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl
                          rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 03:07:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:37:46:1b:0a:80:66:f8:b2:e3:d2:2d:28:8e:fa:7d:57:0a:bd:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
        Validity
            Not Before: Jun 23 12:35:46 2026 GMT
            Not After : Jun 22 12:40:46 2027 GMT
        Subject: CN=B26D1F587A73B49720C11BF66ED924211098A36B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bb:2c:ad:4e:19:0c:c4:12:69:eb:83:e0:2f:
                    c7:eb:34:f0:12:2a:f8:fb:51:c2:a9:74:82:50:0f:
                    e8:66:29:b5:b8:1c:73:b7:c1:01:f8:5c:79:94:40:
                    91:e1:1d:10:a4:8d:36:0d:de:c6:30:ba:a9:cf:e5:
                    b9:29:73:e8:72:42:d3:41:7a:f0:5e:cc:74:7e:3c:
                    47:bb:5c:f1:15:ba:dd:98:a4:53:22:8e:c8:b0:9b:
                    bd:cd:75:32:74:37:18:41:cb:4e:62:f1:8e:11:ab:
                    a3:1f:6b:d3:53:9a:7e:2a:c7:b3:eb:45:95:9a:4f:
                    96:d3:31:25:40:35:c5:1b:a1:da:d4:9a:c1:da:9f:
                    a6:dc:15:a0:fc:8e:77:5b:ba:c0:ca:01:12:4d:fa:
                    7a:59:d8:23:be:77:eb:9c:59:50:e3:9f:7b:5e:4f:
                    91:c2:ba:09:20:55:5d:b3:93:61:07:d3:0f:ec:ad:
                    5a:93:52:01:3e:0f:4d:f4:0d:fd:f6:d6:39:01:e6:
                    37:28:e9:47:34:da:06:90:b2:0d:a0:a2:2a:70:49:
                    f3:06:c3:d2:5d:43:41:13:82:cd:12:c7:d5:68:56:
                    03:45:d8:97:4e:71:4b:c2:a1:0f:d1:f2:d6:ab:e4:
                    e6:7b:d3:ef:76:fd:d9:a1:dc:07:4d:8e:c1:70:85:
                    b1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:6D:1F:58:7A:73:B4:97:20:C1:1B:F6:6E:D9:24:21:10:98:A3:6B
            X509v3 Authority Key Identifier:
                keyid:12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a323030303a3a2f33362d3336203d3e20323634323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24e4:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         35:29:bb:15:3e:09:4c:da:df:8d:b5:f0:c8:50:be:2d:af:7c:
         63:7e:3b:ef:db:6b:ee:50:6a:8c:d0:fc:bf:ce:c4:f3:34:a5:
         2e:d2:e4:02:75:93:60:0e:d9:49:ae:33:53:c5:0d:6e:01:5c:
         d6:61:29:cf:33:5c:56:2a:7e:47:23:c8:af:42:5b:1e:75:7e:
         c5:20:0c:d5:b0:44:8b:09:b3:06:9c:61:2f:f8:96:fd:c7:c9:
         e5:ff:cf:91:73:c8:f1:00:de:b6:91:7a:f1:41:ee:36:86:6f:
         7d:3e:d0:07:82:6e:e9:ae:d6:12:42:20:0b:2f:18:cb:3e:30:
         4a:cf:0b:cc:66:9e:8d:b8:a3:8a:67:2c:13:47:f3:b8:00:0c:
         fa:49:fd:d0:d1:7a:18:b9:7d:8a:e7:2d:0b:e4:73:38:be:11:
         9c:e8:c2:7a:ed:b1:cf:5b:0c:01:8a:3a:0e:d3:30:75:c6:2c:
         77:bd:a2:0e:e3:1a:cd:f9:1a:38:18:92:9c:7a:b4:3f:86:75:
         36:5c:4e:3d:40:d5:a2:f0:49:e8:5f:e3:d8:21:fc:00:dd:74:
         cc:7e:84:39:4a:4e:6d:7e:15:65:09:6d:cf:ce:32:cf:e8:68:
         2e:9a:8c:d1:35:41:c8:92:9d:36:4a:fa:8a:36:d6:0b:b3:06:
         c3:b2:1f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 20:17:35 2026 by rpki-client