Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/323830343a346333383a6234303a3a2f34332d3433203d3e20323637333537.roa
File:                     323830343a346333383a6234303a3a2f34332d3433203d3e20323637333537.roa (raw, json)
Hash identifier:          SZtclxBNgFfomsVzc50lb+XevGsx11ihNC4YYAbnxTo=
Subject key identifier:   5B:F7:CC:93:60:1F:4E:5C:B2:9E:C2:61:0A:CF:49:04:D9:2E:90:43
Certificate issuer:       /CN=22003C7E7945DDECEA49DB4BC81112456EF56BF6
Certificate serial:       6689303FD99C3C89E32C6FB75C52425D1E29A2CE
Authority key identifier: 22:00:3C:7E:79:45:DD:EC:EA:49:DB:4B:C8:11:12:45:6E:F5:6B:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22003C7E7945DDECEA49DB4BC81112456EF56BF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/323830343a346333383a6234303a3a2f34332d3433203d3e20323637333537.roa
Signing time:             Thu 02 Jul 2026 13:26:19 +0000
ROA not before:           Thu 02 Jul 2026 13:21:19 +0000
ROA not after:            Thu 01 Jul 2027 13:26:19 +0000
asID:                     267357
IP address blocks:        2804:4c38:b40::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/22003C7E7945DDECEA49DB4BC81112456EF56BF6.crl
                          rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/22003C7E7945DDECEA49DB4BC81112456EF56BF6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22003C7E7945DDECEA49DB4BC81112456EF56BF6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 11:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:89:30:3f:d9:9c:3c:89:e3:2c:6f:b7:5c:52:42:5d:1e:29:a2:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22003C7E7945DDECEA49DB4BC81112456EF56BF6
        Validity
            Not Before: Jul  2 13:21:19 2026 GMT
            Not After : Jul  1 13:26:19 2027 GMT
        Subject: CN=5BF7CC93601F4E5CB29EC2610ACF4904D92E9043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:65:80:54:d4:4f:f7:eb:d3:76:83:a7:98:c8:
                    5c:32:b9:59:52:d2:19:7e:8d:c8:fe:51:e7:d7:4f:
                    be:05:b7:2e:4c:14:b7:c4:19:84:3d:e6:da:e3:5b:
                    58:58:f4:cc:84:33:3b:67:30:d9:9a:a6:84:33:85:
                    4d:f8:ee:5d:65:43:53:83:9a:b3:81:b3:6a:2f:73:
                    19:be:90:e0:22:3f:a1:1f:f5:15:1d:5f:ad:16:4f:
                    38:27:b6:30:85:c2:88:1d:5a:54:9e:c6:8e:ef:77:
                    f0:9b:54:0b:08:ba:ee:b2:4c:3a:2e:e9:9a:9e:b0:
                    65:bb:4c:fa:9b:7e:e9:e6:be:a9:8d:ac:c6:cf:d6:
                    cf:1b:fd:a2:77:d9:b1:8c:49:3e:4f:13:69:f1:dd:
                    8e:cc:ae:33:4b:bf:18:61:64:cd:49:8b:a9:17:24:
                    6a:f2:54:25:11:63:2b:88:2c:35:3b:57:03:a9:35:
                    f1:ca:3c:6b:6a:c2:2d:3d:ae:55:32:d2:8a:39:0b:
                    45:2f:32:19:52:da:9f:01:3c:0e:8f:79:aa:fe:0c:
                    d2:06:7e:f2:e6:cf:eb:73:8a:f0:15:6c:fe:0c:4c:
                    59:66:14:bd:3c:59:b4:56:40:64:09:fd:74:ab:c0:
                    4b:05:fe:06:ab:fa:5c:bd:e3:33:4b:f5:eb:a3:da:
                    25:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F7:CC:93:60:1F:4E:5C:B2:9E:C2:61:0A:CF:49:04:D9:2E:90:43
            X509v3 Authority Key Identifier:
                keyid:22:00:3C:7E:79:45:DD:EC:EA:49:DB:4B:C8:11:12:45:6E:F5:6B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/22003C7E7945DDECEA49DB4BC81112456EF56BF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22003C7E7945DDECEA49DB4BC81112456EF56BF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/323830343a346333383a6234303a3a2f34332d3433203d3e20323637333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c38:b40::/43

    Signature Algorithm: sha256WithRSAEncryption
         4c:13:45:93:32:66:da:4d:d8:f2:9c:31:4b:cd:8e:6b:2d:c0:
         4c:98:40:42:54:13:87:c0:b3:e2:62:2f:ba:d1:27:88:95:4e:
         31:2a:ef:9a:73:87:03:f7:72:bd:46:33:32:48:fb:17:73:00:
         50:45:07:78:4f:e6:a8:22:f2:72:eb:36:f5:80:65:66:49:09:
         52:d0:e3:8a:db:ee:18:16:8c:b2:95:e1:e2:11:2e:0a:d5:ff:
         89:61:f5:94:fb:4f:5b:1f:10:92:73:51:cf:c7:76:48:73:59:
         de:08:57:2e:ee:4b:45:e1:ea:bb:f2:d5:22:13:e4:b3:35:3f:
         20:e1:a3:fd:98:ed:6c:ae:70:2e:53:6e:e6:75:24:7a:58:05:
         cc:2a:7b:94:22:41:cd:69:7a:d1:eb:1a:14:86:64:4c:b7:0a:
         64:c0:c7:1e:21:cc:75:81:12:d0:b7:59:9d:ae:cf:44:60:e0:
         8d:26:08:83:b9:47:d3:81:a0:ca:28:de:8e:40:19:b9:40:7f:
         c6:67:ac:51:e3:76:61:a0:8d:0c:8a:d7:93:6a:f2:80:43:b7:
         02:01:b8:e9:52:8d:55:06:92:78:e4:ab:70:f9:d9:f7:65:df:
         21:11:2b:a7:b4:6e:87:6b:bd:b4:55:40:9a:ae:ad:7e:20:0f:
         27:4a:c8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:10:41 2026 by rpki-client