Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/323830343a353761383a343030303a3a2f33342d3334203d3e20323638303738.roa
File:                     323830343a353761383a343030303a3a2f33342d3334203d3e20323638303738.roa (raw, json)
Hash identifier:          nFvzu9NQuvS4ADYG7/+QQoRSVRlRihLvyxpiEJGQcn8=
Subject key identifier:   D1:6B:DF:A8:3F:FC:6A:BF:C7:43:FC:D0:D3:11:5C:08:15:A1:B3:5C
Certificate issuer:       /CN=A6B1E910AAB26349C803DB8D43F18023582E7DD4
Certificate serial:       6A7672C432C1A49A56C78FDBC73372C12B3365BE
Authority key identifier: A6:B1:E9:10:AA:B2:63:49:C8:03:DB:8D:43:F1:80:23:58:2E:7D:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6B1E910AAB26349C803DB8D43F18023582E7DD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/323830343a353761383a343030303a3a2f33342d3334203d3e20323638303738.roa
Signing time:             Mon 15 Jun 2026 17:22:15 +0000
ROA not before:           Mon 15 Jun 2026 17:17:15 +0000
ROA not after:            Mon 14 Jun 2027 17:22:15 +0000
asID:                     268078
IP address blocks:        2804:57a8:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/A6B1E910AAB26349C803DB8D43F18023582E7DD4.crl
                          rsync://rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/A6B1E910AAB26349C803DB8D43F18023582E7DD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6B1E910AAB26349C803DB8D43F18023582E7DD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 02:13:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:76:72:c4:32:c1:a4:9a:56:c7:8f:db:c7:33:72:c1:2b:33:65:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6B1E910AAB26349C803DB8D43F18023582E7DD4
        Validity
            Not Before: Jun 15 17:17:15 2026 GMT
            Not After : Jun 14 17:22:15 2027 GMT
        Subject: CN=D16BDFA83FFC6ABFC743FCD0D3115C0815A1B35C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:30:8d:32:10:0b:97:9c:35:d6:70:cc:fa:85:
                    c0:4a:87:ba:43:f1:17:bf:ed:51:15:68:73:8e:b2:
                    d3:01:22:68:9b:df:bd:6d:b7:4c:7d:88:be:72:2d:
                    c5:99:7f:11:49:10:80:12:1b:c5:f2:7b:88:ba:63:
                    a8:b9:5d:9b:47:32:94:4f:77:1d:c6:95:e9:d1:e9:
                    b6:4e:da:a6:96:98:26:f2:17:4e:98:06:6c:94:3e:
                    c5:19:43:fc:fb:35:67:50:34:d0:bb:93:03:e7:43:
                    5b:4b:12:0e:ce:3f:aa:74:f5:7a:f9:eb:bb:eb:af:
                    88:f1:26:6d:d6:cf:6c:9c:e3:18:5f:13:11:60:a8:
                    51:e1:5e:a6:23:f2:4f:69:a5:b1:50:d6:2b:57:05:
                    bd:6c:37:dd:29:83:4e:b7:e4:63:2e:cf:41:e4:ea:
                    ac:31:b6:84:9b:19:79:12:12:0b:62:52:ed:e4:63:
                    a9:58:dc:ef:d9:90:ae:55:51:bd:9c:4e:18:0c:63:
                    86:58:b0:12:73:95:dd:17:4e:b0:ef:c3:84:d8:bb:
                    3c:5e:4f:90:92:2a:c0:72:c3:10:aa:54:da:21:8f:
                    38:12:21:aa:f5:48:63:99:1a:64:9a:f2:ab:06:8a:
                    f8:10:6a:02:11:be:9e:e9:5d:ff:53:19:c9:b4:89:
                    cc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:6B:DF:A8:3F:FC:6A:BF:C7:43:FC:D0:D3:11:5C:08:15:A1:B3:5C
            X509v3 Authority Key Identifier:
                keyid:A6:B1:E9:10:AA:B2:63:49:C8:03:DB:8D:43:F1:80:23:58:2E:7D:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/A6B1E910AAB26349C803DB8D43F18023582E7DD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6B1E910AAB26349C803DB8D43F18023582E7DD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/323830343a353761383a343030303a3a2f33342d3334203d3e20323638303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57a8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         16:9c:83:aa:ca:6a:d7:be:0e:cb:d4:a7:f1:c1:53:c8:39:1e:
         03:8e:6d:f6:66:ed:9b:ee:d0:34:6b:b5:37:2e:48:93:23:45:
         2f:f6:d7:2d:e0:a7:de:2a:40:16:3f:59:85:14:0b:3d:40:fb:
         5c:d0:2a:60:a2:0f:c3:b5:80:f8:07:cc:a4:05:be:14:39:15:
         9f:c2:34:ef:18:ef:f6:6c:c3:07:0d:d9:d5:95:4d:53:49:34:
         b0:fb:8f:de:2f:e1:1c:c5:f8:41:03:85:b8:00:8d:b3:ec:96:
         14:86:59:53:30:9d:88:5e:86:cd:29:6c:c0:39:14:ee:e4:eb:
         ba:55:c4:83:27:05:3d:f4:e2:f9:b6:bf:5c:1a:c5:56:5f:c6:
         b4:2f:15:5b:35:32:5f:d8:90:25:13:03:5a:88:2f:a6:b3:1e:
         9d:b1:c1:04:0d:07:a8:df:29:f6:8f:8d:ee:9c:5f:25:c6:d7:
         ea:c1:d1:51:8f:66:69:16:c4:bb:a6:55:6f:0f:14:7e:11:e3:
         59:c8:75:4c:2a:20:b1:76:5a:b7:4f:20:c0:8f:de:03:40:69:
         1f:b1:36:cf:b8:f3:67:e2:8a:db:19:08:00:50:2f:a2:82:9d:
         06:87:03:35:90:2d:8f:8a:8b:a6:63:61:a6:17:1f:63:81:10:
         ba:48:ed:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 14:08:21 2026 by rpki-client