Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/323830343a356638383a3a2f33342d3334203d3e20323639313037.roa
File:                     323830343a356638383a3a2f33342d3334203d3e20323639313037.roa (raw, json)
Hash identifier:          phqbYlKSmQDqClLZiIb1B1lSQiOAfexIUFwAABhCGD4=
Subject key identifier:   CE:C9:D7:17:E0:30:2E:EE:69:EF:33:92:2A:8E:31:6E:EE:0D:4C:1A
Certificate issuer:       /CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
Certificate serial:       2E6BA576F6A4DA0F90DF93840FBDB248C6EF4CA5
Authority key identifier: 2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/323830343a356638383a3a2f33342d3334203d3e20323639313037.roa
Signing time:             Mon 15 Jun 2026 22:00:01 +0000
ROA not before:           Mon 15 Jun 2026 21:55:01 +0000
ROA not after:            Mon 14 Jun 2027 22:00:01 +0000
asID:                     269107
IP address blocks:        2804:5f88::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl
                          rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:6b:a5:76:f6:a4:da:0f:90:df:93:84:0f:bd:b2:48:c6:ef:4c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
        Validity
            Not Before: Jun 15 21:55:01 2026 GMT
            Not After : Jun 14 22:00:01 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:09:43:f1:0d:49:7f:4d:0b:96:e7:2e:25:9d:
                    bc:58:f1:b6:ac:bc:f6:da:b7:99:14:30:06:bc:c8:
                    3c:cc:28:3c:60:b0:2b:2e:0c:44:c7:34:c0:cb:3d:
                    94:86:e1:99:34:20:92:e8:d3:34:d7:3a:ad:ff:40:
                    b2:12:07:fa:94:96:6f:9d:ea:a5:2c:89:cd:03:d9:
                    1b:8a:d0:7a:71:ca:d3:3f:89:3e:7e:77:05:3f:96:
                    bc:78:ac:fa:94:88:5e:e6:a3:e4:d7:53:0e:53:8d:
                    f1:5a:c8:95:40:ee:be:24:49:05:cb:87:01:20:17:
                    4d:4e:f6:4c:6f:29:06:24:a4:56:16:85:24:79:67:
                    cd:b9:8b:29:02:25:82:a7:d3:ee:06:f7:4a:39:af:
                    23:bc:e2:fa:a0:dc:cc:db:1c:8f:72:e8:de:86:69:
                    76:41:67:26:09:25:b2:90:33:ee:b7:9c:92:18:82:
                    10:90:ef:bb:e0:59:93:4b:93:29:28:89:23:38:0c:
                    04:dd:35:c9:0e:9c:1c:6a:00:10:0a:5c:51:8d:64:
                    64:37:83:c1:95:6e:d1:a5:d7:64:56:38:59:57:22:
                    80:43:94:2d:34:02:32:df:af:53:43:e1:86:45:36:
                    d4:cf:94:94:95:fc:82:72:31:59:90:94:11:da:3c:
                    34:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C9:D7:17:E0:30:2E:EE:69:EF:33:92:2A:8E:31:6E:EE:0D:4C:1A
            X509v3 Authority Key Identifier:
                keyid:2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/323830343a356638383a3a2f33342d3334203d3e20323639313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f88::/34

    Signature Algorithm: sha256WithRSAEncryption
         2b:78:25:25:7b:3b:42:b3:e8:f6:46:9a:ec:56:b1:10:11:48:
         38:f8:63:f3:ec:bb:e8:07:5b:3e:f1:44:bc:01:ad:dd:09:b0:
         b3:e9:1a:0e:a2:14:0f:da:37:4e:85:ed:e1:60:4b:df:01:d1:
         5d:96:2b:6b:17:a0:06:99:bb:bc:00:8e:98:2a:3b:b2:66:53:
         59:8b:8f:98:13:56:2f:98:35:3f:ff:9e:8a:eb:24:c1:2b:22:
         21:96:5b:79:31:1b:e0:2f:95:04:82:26:e5:ef:bc:42:7b:56:
         8d:a6:91:a7:28:58:b2:1a:4c:62:64:c1:a8:83:81:11:cd:9d:
         b5:80:05:cd:ad:33:69:0c:89:17:df:c8:9b:79:58:d2:ea:cf:
         9b:3d:a3:23:8e:02:48:f0:b5:e0:02:de:ee:03:73:57:0e:3f:
         d8:6f:bb:7a:ec:9f:f7:aa:19:91:16:7f:08:68:6e:c9:e9:60:
         f4:9d:43:2c:9a:58:9a:1e:6a:bb:5e:5a:64:f1:b7:34:5a:ef:
         7b:65:3a:f5:6b:81:92:c6:0f:6a:8b:70:61:0d:ec:dc:b8:7f:
         09:c0:95:28:45:c9:b9:e2:25:10:40:fc:95:54:45:10:c8:62:
         e6:17:9d:cf:12:62:0d:0a:a5:3b:a0:e5:ce:6b:6f:a9:ef:8f:
         5c:d3:9f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 20:18:12 2026 by rpki-client