Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dxv4gs8o8EaBTs4ee5484Rp7bFT671RNztYcDTaAs9mx/0/323830343a313136343a3a2f33322d3338203d3e20323633363734.roa
File:                     323830343a313136343a3a2f33322d3338203d3e20323633363734.roa (raw, json)
Hash identifier:          YAn5r4t4EaBkEOHbqE7ZAmMpn1TzTMGyQQFvGgKxkSU=
Subject key identifier:   25:73:F6:BB:6B:A2:73:FC:E9:D3:4D:AD:A8:FD:46:2E:11:6F:97:93
Certificate issuer:       /CN=9C6E160A0540900A187D4B0B8D8AC7AAB39528DC
Certificate serial:       63D698858915E639DF78DEEFE750615A9C5E7756
Authority key identifier: 9C:6E:16:0A:05:40:90:0A:18:7D:4B:0B:8D:8A:C7:AA:B3:95:28:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C6E160A0540900A187D4B0B8D8AC7AAB39528DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dxv4gs8o8EaBTs4ee5484Rp7bFT671RNztYcDTaAs9mx/0/323830343a313136343a3a2f33322d3338203d3e20323633363734.roa
Signing time:             Mon 22 Jun 2026 19:12:26 +0000
ROA not before:           Mon 22 Jun 2026 19:07:26 +0000
ROA not after:            Mon 21 Jun 2027 19:12:26 +0000
asID:                     263674
IP address blocks:        2804:1164::/32 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dxv4gs8o8EaBTs4ee5484Rp7bFT671RNztYcDTaAs9mx/0/9C6E160A0540900A187D4B0B8D8AC7AAB39528DC.crl
                          rsync://rpki-repo.registro.br/repo/Dxv4gs8o8EaBTs4ee5484Rp7bFT671RNztYcDTaAs9mx/0/9C6E160A0540900A187D4B0B8D8AC7AAB39528DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C6E160A0540900A187D4B0B8D8AC7AAB39528DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 12:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:d6:98:85:89:15:e6:39:df:78:de:ef:e7:50:61:5a:9c:5e:77:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C6E160A0540900A187D4B0B8D8AC7AAB39528DC
        Validity
            Not Before: Jun 22 19:07:26 2026 GMT
            Not After : Jun 21 19:12:26 2027 GMT
        Subject: CN=2573F6BB6BA273FCE9D34DADA8FD462E116F9793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:af:49:2d:9f:f4:01:d5:0e:98:e0:a7:ad:53:
                    1c:7e:ed:fd:74:c8:6d:cd:6a:47:c8:80:83:20:fb:
                    6d:56:d5:e9:dc:ef:80:74:9d:6f:1e:7b:2a:02:2d:
                    40:70:37:08:62:2c:15:95:c6:d1:6e:c1:b8:c2:40:
                    7f:59:49:34:7a:28:7f:ad:27:37:b8:1c:c1:2d:9f:
                    08:6c:c1:05:c4:d5:2f:92:86:e9:50:bf:a5:ec:67:
                    2d:ee:6e:03:c1:58:e4:dd:68:ec:cb:50:d2:51:fa:
                    69:e5:b6:9e:f4:61:d5:61:9a:9c:c5:33:56:4d:d2:
                    3b:c7:a8:1d:ab:fa:eb:64:91:f9:99:30:92:bf:39:
                    c9:b4:a5:19:43:8b:60:6c:23:3f:7d:2a:66:89:8e:
                    c6:55:5a:b2:91:ba:5e:be:c4:41:d3:4e:3a:d7:b5:
                    97:36:b7:6b:cd:9e:04:9d:41:7a:12:a3:f4:4e:d7:
                    b1:23:b1:b1:f6:06:a0:ae:de:50:db:d3:a5:b3:46:
                    b9:7f:ba:c5:c8:0d:15:94:54:58:92:12:40:bb:6a:
                    d2:f3:f5:b0:ff:e9:f6:db:ae:21:e6:88:4f:e6:94:
                    d5:5a:00:c3:ee:c5:00:15:c9:41:25:55:2d:e5:10:
                    7e:ee:ec:bf:ee:06:0d:ae:a7:ca:4b:23:35:64:24:
                    f6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:73:F6:BB:6B:A2:73:FC:E9:D3:4D:AD:A8:FD:46:2E:11:6F:97:93
            X509v3 Authority Key Identifier:
                keyid:9C:6E:16:0A:05:40:90:0A:18:7D:4B:0B:8D:8A:C7:AA:B3:95:28:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dxv4gs8o8EaBTs4ee5484Rp7bFT671RNztYcDTaAs9mx/0/9C6E160A0540900A187D4B0B8D8AC7AAB39528DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C6E160A0540900A187D4B0B8D8AC7AAB39528DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dxv4gs8o8EaBTs4ee5484Rp7bFT671RNztYcDTaAs9mx/0/323830343a313136343a3a2f33322d3338203d3e20323633363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1164::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:73:45:03:ab:ed:13:b7:b2:06:f5:d4:59:bb:5b:c2:10:a8:
         6d:a2:d9:80:44:00:ed:7f:fb:b4:9e:da:f6:1b:39:76:cd:00:
         c2:b6:c3:23:26:3f:e5:7b:fb:1c:2c:b8:cd:66:ba:e4:a3:31:
         5b:4b:37:83:95:48:ce:f0:a4:42:e3:c6:78:2a:25:a4:64:80:
         86:4c:9c:e5:3f:cd:99:16:6a:62:f1:ad:27:65:0b:b3:d6:4d:
         04:ff:00:7c:1c:5f:f1:c6:77:6d:24:04:8b:2d:89:b4:92:11:
         73:07:2b:b0:31:d9:d6:9f:e2:e6:fa:8d:4c:54:4c:4f:f5:8d:
         65:49:ac:27:85:ae:0b:54:a1:aa:a2:2f:ce:dc:b9:a6:52:f7:
         8e:77:50:c3:34:83:a0:c4:3e:a8:d1:df:fb:db:d6:f5:12:a1:
         e5:79:b2:7f:3e:22:6c:d7:31:bc:40:69:90:ba:e3:34:dd:c0:
         b1:60:e0:76:84:0b:a7:e2:09:63:9e:18:6f:47:08:8d:76:55:
         37:48:fd:4a:52:1e:02:ee:ff:d1:09:d7:ce:14:e2:c4:ce:d3:
         55:fa:f5:bf:fe:7f:cf:ce:fd:74:f3:e7:10:3c:3b:92:32:50:
         f2:dc:d3:10:80:53:07:b3:be:85:fa:a7:b9:b3:04:f0:10:22:
         53:81:93:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:55:33 2026 by rpki-client