Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/323830343a346333383a3a2f33322d3332203d3e20323637333537.roa
File:                     323830343a346333383a3a2f33322d3332203d3e20323637333537.roa (raw, json)
Hash identifier:          eH8Os4s2Nso6zYenZGaOmsKkIHuaQC0ocgUFKgNI4Lk=
Subject key identifier:   5B:D2:62:40:E7:DE:64:1D:D6:5E:F0:23:A8:0B:FB:FD:4E:3B:A2:A7
Certificate issuer:       /CN=22003C7E7945DDECEA49DB4BC81112456EF56BF6
Certificate serial:       585664D44BB5231CBA1D90E9419D09E50051AD46
Authority key identifier: 22:00:3C:7E:79:45:DD:EC:EA:49:DB:4B:C8:11:12:45:6E:F5:6B:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22003C7E7945DDECEA49DB4BC81112456EF56BF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/323830343a346333383a3a2f33322d3332203d3e20323637333537.roa
Signing time:             Thu 02 Jul 2026 13:26:19 +0000
ROA not before:           Thu 02 Jul 2026 13:21:19 +0000
ROA not after:            Thu 01 Jul 2027 13:26:19 +0000
asID:                     267357
IP address blocks:        2804:4c38::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/22003C7E7945DDECEA49DB4BC81112456EF56BF6.crl
                          rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/22003C7E7945DDECEA49DB4BC81112456EF56BF6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22003C7E7945DDECEA49DB4BC81112456EF56BF6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 11:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:56:64:d4:4b:b5:23:1c:ba:1d:90:e9:41:9d:09:e5:00:51:ad:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22003C7E7945DDECEA49DB4BC81112456EF56BF6
        Validity
            Not Before: Jul  2 13:21:19 2026 GMT
            Not After : Jul  1 13:26:19 2027 GMT
        Subject: CN=5BD26240E7DE641DD65EF023A80BFBFD4E3BA2A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7f:ec:ed:b9:54:91:1c:d8:28:b9:af:5b:83:
                    2c:11:04:fd:46:04:f8:ba:99:47:8e:44:aa:49:fd:
                    31:f2:49:1b:40:ce:1b:cd:48:45:22:55:da:0c:b8:
                    02:a3:0a:ec:ce:00:31:86:a8:76:a3:4d:a1:0f:5a:
                    c3:62:2f:26:cd:3a:35:b4:94:58:1d:d0:84:aa:c7:
                    91:48:7a:3f:17:19:53:1a:d3:bc:56:7a:dd:bd:20:
                    13:3a:f1:94:53:cb:c3:75:bf:d3:59:57:7f:c9:fa:
                    86:01:a4:5f:c2:ca:e7:53:17:6e:3a:8a:10:93:e0:
                    e4:94:a9:cb:cd:6d:6b:61:3d:e7:d8:50:55:c0:9f:
                    20:c6:26:08:1f:2f:6f:7a:69:2f:57:6b:98:94:2c:
                    e5:b3:68:d9:d0:2b:4a:29:87:8b:27:34:4e:f9:2a:
                    33:be:eb:28:f7:16:56:88:bc:92:d8:bb:ad:29:a7:
                    e4:83:2a:23:06:dc:82:89:a6:7c:fc:ea:24:06:1b:
                    3d:37:84:f7:52:46:a6:1c:4f:2f:96:af:a3:5b:14:
                    21:d4:02:19:22:1c:7f:72:29:7d:13:4f:08:87:47:
                    94:81:d5:60:bc:40:7b:d5:e0:46:35:b8:43:9e:c8:
                    d1:6e:f0:98:8f:f7:4c:91:b6:14:98:b9:95:4b:70:
                    f7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D2:62:40:E7:DE:64:1D:D6:5E:F0:23:A8:0B:FB:FD:4E:3B:A2:A7
            X509v3 Authority Key Identifier:
                keyid:22:00:3C:7E:79:45:DD:EC:EA:49:DB:4B:C8:11:12:45:6E:F5:6B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/22003C7E7945DDECEA49DB4BC81112456EF56BF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22003C7E7945DDECEA49DB4BC81112456EF56BF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/323830343a346333383a3a2f33322d3332203d3e20323637333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c38::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:7b:a1:eb:af:5a:c1:75:d5:a2:67:90:23:f3:95:5b:52:82:
         78:6e:68:39:a7:9d:90:aa:1c:b1:27:09:c1:9b:30:21:50:4d:
         a3:de:e7:8a:0b:3b:8d:ad:91:ef:1e:07:08:42:3e:72:81:82:
         81:a9:59:1b:ca:c8:80:75:f5:2a:05:c7:09:df:00:d6:a4:65:
         f4:08:8f:30:be:6a:49:8a:43:37:3a:48:eb:38:93:d7:23:e3:
         d0:50:a0:88:9d:cf:e2:fb:30:48:ba:bb:f5:3b:5b:c0:51:2b:
         40:c4:8e:9a:56:34:0b:24:14:14:0d:a5:8b:cf:40:09:4f:fb:
         53:63:66:ca:70:80:2f:78:48:1d:32:13:f7:cc:07:dd:fc:0f:
         e7:f9:e4:c3:ee:13:71:d3:7e:c9:58:fd:b9:5d:bc:f2:8a:75:
         e7:ca:eb:9d:7c:4f:2b:5d:ef:b5:a2:35:f7:ce:6c:56:9a:5d:
         65:3e:44:6e:b5:4e:08:07:4f:ef:29:9f:20:f1:18:61:89:c5:
         27:60:79:86:fa:78:de:b3:9e:4c:1d:49:0e:3e:8b:66:9f:71:
         6d:b4:a7:98:8d:04:07:ce:41:00:06:f2:0f:87:6a:aa:aa:4a:
         99:b5:4b:0f:88:65:8c:35:9a:f5:03:54:e0:0c:25:78:89:79:
         89:05:b8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:09:28 2026 by rpki-client