Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/323830343a346333383a6236303a3a2f34332d3433203d3e20323637333537.roa
File:                     323830343a346333383a6236303a3a2f34332d3433203d3e20323637333537.roa (raw, json)
Hash identifier:          UcaySJloYZjIojOd1N6u6rVUaEPT94nvnbw8He2Xcas=
Subject key identifier:   4D:7B:F3:DA:E1:68:39:8F:92:E9:29:EB:1A:7C:A6:20:30:B4:2E:20
Certificate issuer:       /CN=22003C7E7945DDECEA49DB4BC81112456EF56BF6
Certificate serial:       0B2E0FBECC4A85312F2F792FD218F4B7EE27A338
Authority key identifier: 22:00:3C:7E:79:45:DD:EC:EA:49:DB:4B:C8:11:12:45:6E:F5:6B:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22003C7E7945DDECEA49DB4BC81112456EF56BF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/323830343a346333383a6236303a3a2f34332d3433203d3e20323637333537.roa
Signing time:             Thu 02 Jul 2026 13:26:21 +0000
ROA not before:           Thu 02 Jul 2026 13:21:21 +0000
ROA not after:            Thu 01 Jul 2027 13:26:21 +0000
asID:                     267357
IP address blocks:        2804:4c38:b60::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/22003C7E7945DDECEA49DB4BC81112456EF56BF6.crl
                          rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/22003C7E7945DDECEA49DB4BC81112456EF56BF6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22003C7E7945DDECEA49DB4BC81112456EF56BF6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 11:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:2e:0f:be:cc:4a:85:31:2f:2f:79:2f:d2:18:f4:b7:ee:27:a3:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22003C7E7945DDECEA49DB4BC81112456EF56BF6
        Validity
            Not Before: Jul  2 13:21:21 2026 GMT
            Not After : Jul  1 13:26:21 2027 GMT
        Subject: CN=4D7BF3DAE168398F92E929EB1A7CA62030B42E20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a6:c4:c2:37:68:0a:59:28:14:de:6d:95:e1:
                    cf:dc:ef:75:89:8e:39:cd:53:24:f2:ca:2e:c7:57:
                    ce:f5:a3:1f:3c:e4:64:15:bf:ee:ff:72:83:58:1d:
                    66:78:f4:a5:d0:a8:24:17:d7:40:06:05:2a:41:a1:
                    af:33:0a:17:fd:2a:52:79:cb:55:66:99:a2:39:1a:
                    1a:e2:5b:9f:1d:11:c3:40:7a:94:7a:d0:99:e5:72:
                    97:4e:e5:3d:b7:88:17:1a:35:81:1b:03:e2:07:22:
                    64:b0:34:b1:e8:74:0e:ce:d8:17:1f:09:c3:ef:cd:
                    a3:c8:33:b3:a1:e6:12:ad:20:c9:31:1d:b4:45:8b:
                    b9:81:e1:9d:e7:51:f9:42:e7:15:60:4b:3c:35:54:
                    09:6b:a1:a1:c0:c3:5d:ef:a7:85:a0:ee:8e:90:32:
                    14:ba:a2:21:a7:2e:bd:38:f5:30:22:8d:40:3d:83:
                    19:88:ac:53:bd:a4:d5:ff:02:76:86:0b:78:c4:ee:
                    ef:59:d2:0b:33:0b:22:be:06:1f:f5:60:ee:1d:eb:
                    e5:10:a9:94:c0:de:f4:82:f2:59:c9:3f:c4:27:c2:
                    08:9e:90:b2:f0:0f:fd:d3:44:67:63:60:86:d0:33:
                    c0:6b:3f:00:e9:98:32:ad:f9:ba:83:c1:e0:93:bd:
                    4c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:7B:F3:DA:E1:68:39:8F:92:E9:29:EB:1A:7C:A6:20:30:B4:2E:20
            X509v3 Authority Key Identifier:
                keyid:22:00:3C:7E:79:45:DD:EC:EA:49:DB:4B:C8:11:12:45:6E:F5:6B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/22003C7E7945DDECEA49DB4BC81112456EF56BF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22003C7E7945DDECEA49DB4BC81112456EF56BF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/323830343a346333383a6236303a3a2f34332d3433203d3e20323637333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c38:b60::/43

    Signature Algorithm: sha256WithRSAEncryption
         17:15:79:78:e1:60:37:b3:68:99:92:47:09:61:ca:2f:92:62:
         fb:a6:0c:93:5b:de:7f:04:ca:38:f8:f0:66:e2:ed:47:8d:1a:
         b6:39:ad:36:b3:69:b0:6d:b4:22:35:b4:cf:54:ad:19:a9:b4:
         55:54:9b:a3:fa:e1:54:53:a0:0b:24:20:94:b3:94:de:4f:d3:
         1b:0b:27:d2:f0:d8:3c:43:2e:7e:d8:76:4e:80:ed:a7:53:4a:
         9e:50:6c:96:8d:b1:00:34:65:c5:d0:cb:77:ab:58:12:1b:23:
         73:c6:66:93:24:f4:d0:88:39:b1:73:5a:af:49:0a:6c:8a:e1:
         03:83:05:df:aa:82:84:56:5a:15:df:c3:9a:ac:2f:d2:40:55:
         60:fe:09:92:15:57:25:90:d6:bc:38:20:c2:dc:c0:c4:e5:7c:
         0a:77:00:be:9a:88:5a:60:56:85:20:c7:26:f1:34:e7:75:20:
         80:36:80:b0:a4:4e:2a:a9:74:dd:85:0b:68:ee:6a:5a:6d:c7:
         3e:7f:72:0d:d3:9e:e5:44:2f:68:2c:69:d8:8c:75:9b:48:64:
         61:1c:64:ab:39:99:60:29:e2:32:39:86:1a:9a:95:29:d5:0e:
         24:9f:fb:d2:f0:df:d7:d3:a7:75:71:74:e0:93:88:54:b4:8a:
         3a:0e:04:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:07:52 2026 by rpki-client