Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/323830343a346333383a6163303a3a2f34332d3433203d3e20323637333537.roa
File:                     323830343a346333383a6163303a3a2f34332d3433203d3e20323637333537.roa (raw, json)
Hash identifier:          r6stm6b3D5FvzmwlwwQYpe84ASFSOdtfCusPNiyo1MY=
Subject key identifier:   55:96:C8:A0:F5:37:D4:9B:A3:A6:8D:28:C1:61:3A:6F:89:7B:5A:3D
Certificate issuer:       /CN=22003C7E7945DDECEA49DB4BC81112456EF56BF6
Certificate serial:       679D9367D01F1374E28ACC9A8507404B57C019D8
Authority key identifier: 22:00:3C:7E:79:45:DD:EC:EA:49:DB:4B:C8:11:12:45:6E:F5:6B:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22003C7E7945DDECEA49DB4BC81112456EF56BF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/323830343a346333383a6163303a3a2f34332d3433203d3e20323637333537.roa
Signing time:             Thu 02 Jul 2026 13:26:20 +0000
ROA not before:           Thu 02 Jul 2026 13:21:20 +0000
ROA not after:            Thu 01 Jul 2027 13:26:20 +0000
asID:                     267357
IP address blocks:        2804:4c38:ac0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/22003C7E7945DDECEA49DB4BC81112456EF56BF6.crl
                          rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/22003C7E7945DDECEA49DB4BC81112456EF56BF6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22003C7E7945DDECEA49DB4BC81112456EF56BF6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 11:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:9d:93:67:d0:1f:13:74:e2:8a:cc:9a:85:07:40:4b:57:c0:19:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22003C7E7945DDECEA49DB4BC81112456EF56BF6
        Validity
            Not Before: Jul  2 13:21:20 2026 GMT
            Not After : Jul  1 13:26:20 2027 GMT
        Subject: CN=5596C8A0F537D49BA3A68D28C1613A6F897B5A3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:16:60:9e:69:13:c0:45:bc:af:e8:d9:38:30:
                    20:47:d3:f7:31:b4:07:d3:07:8a:62:14:0d:03:24:
                    09:64:55:8a:05:7a:0d:a0:14:ca:40:e6:01:8f:88:
                    27:70:af:d3:42:1c:62:43:26:fb:54:85:47:61:aa:
                    c4:30:84:09:d5:6c:a0:8f:89:f4:ac:5a:21:72:c4:
                    c2:cb:31:b8:9d:ea:06:4c:33:f9:59:64:10:6a:ff:
                    13:f7:bd:8e:64:17:b8:65:a3:46:d8:bd:fe:90:dc:
                    f8:07:b4:8b:c4:3a:95:2a:4c:d5:c9:07:84:ef:92:
                    0b:8e:22:91:9e:2e:15:8a:71:26:b1:79:89:81:ee:
                    a2:91:e9:4c:fe:89:4c:e8:92:f4:62:55:38:00:31:
                    24:55:05:58:46:87:f3:78:8a:69:b6:61:a7:bb:48:
                    62:da:53:cd:16:58:0a:67:ed:8b:82:ca:f2:b1:d7:
                    74:e1:f9:fa:eb:b7:f5:7b:38:cc:95:f3:97:a2:b3:
                    8f:14:de:07:ec:39:e4:ef:54:65:41:8e:f8:ce:19:
                    52:c4:f5:cb:82:21:a1:24:b6:04:4a:c6:0e:98:30:
                    f4:d4:42:0c:c4:68:61:80:31:b0:1b:cd:58:75:b1:
                    72:85:ae:88:0d:57:8d:56:69:95:52:63:70:cd:0a:
                    b6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:96:C8:A0:F5:37:D4:9B:A3:A6:8D:28:C1:61:3A:6F:89:7B:5A:3D
            X509v3 Authority Key Identifier:
                keyid:22:00:3C:7E:79:45:DD:EC:EA:49:DB:4B:C8:11:12:45:6E:F5:6B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/22003C7E7945DDECEA49DB4BC81112456EF56BF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22003C7E7945DDECEA49DB4BC81112456EF56BF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/323830343a346333383a6163303a3a2f34332d3433203d3e20323637333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c38:ac0::/43

    Signature Algorithm: sha256WithRSAEncryption
         06:36:d4:0d:25:01:27:61:24:61:5d:27:a2:79:1e:a1:d7:e6:
         a5:fb:b6:27:9e:21:e9:68:9c:42:5b:b6:f0:fa:9a:3d:fe:3a:
         f5:c9:4f:2a:c8:00:2c:32:3e:7e:7a:76:e6:c5:45:55:a9:22:
         69:31:33:07:17:49:14:b2:61:00:da:34:07:73:51:df:54:db:
         36:3a:d5:9d:ed:af:52:f0:a8:c7:59:b1:1a:60:40:4e:19:62:
         96:d2:b2:4f:df:55:d1:cd:8d:85:de:ff:53:66:fe:ce:ac:f9:
         c9:da:2d:b7:89:a1:93:70:24:39:13:07:a4:79:ae:7c:11:95:
         14:fe:9b:86:34:5d:df:61:2e:4c:10:aa:e3:16:3b:4a:ed:ab:
         6c:ab:92:6b:52:86:e8:9c:cb:05:72:f1:ca:d7:ff:97:f5:d7:
         ba:ed:be:a5:ae:7b:72:87:a0:19:1f:39:33:4e:6b:6a:76:22:
         3d:12:c0:e1:ed:1b:db:61:a4:0e:62:fd:c1:89:75:9b:0e:c2:
         12:9d:7c:d8:ee:46:54:c9:5b:40:4e:85:60:b2:07:e6:25:6e:
         9e:d1:6c:eb:4e:97:86:63:78:8e:4f:4f:2f:71:8f:d3:bd:3b:
         04:e1:da:f8:25:75:ea:1a:cc:a9:2f:c0:6b:79:0c:51:3a:7b:
         f9:80:cc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:10:36 2026 by rpki-client