Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/323830343a353761383a3a2f33332d3333203d3e20323638303738.roa
File:                     323830343a353761383a3a2f33332d3333203d3e20323638303738.roa (raw, json)
Hash identifier:          yobgejO/3PGVUha8ATeTO6WAKURgZEw0jukAIIUisMU=
Subject key identifier:   E7:04:85:5C:53:FD:EA:BC:87:0A:1C:9C:79:62:D4:43:89:E7:56:E0
Certificate issuer:       /CN=A6B1E910AAB26349C803DB8D43F18023582E7DD4
Certificate serial:       4DC9157494FEC4CB70BEF22DD003130AF2013FD3
Authority key identifier: A6:B1:E9:10:AA:B2:63:49:C8:03:DB:8D:43:F1:80:23:58:2E:7D:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6B1E910AAB26349C803DB8D43F18023582E7DD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/323830343a353761383a3a2f33332d3333203d3e20323638303738.roa
Signing time:             Mon 15 Jun 2026 17:22:13 +0000
ROA not before:           Mon 15 Jun 2026 17:17:13 +0000
ROA not after:            Mon 14 Jun 2027 17:22:13 +0000
asID:                     268078
IP address blocks:        2804:57a8::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/A6B1E910AAB26349C803DB8D43F18023582E7DD4.crl
                          rsync://rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/A6B1E910AAB26349C803DB8D43F18023582E7DD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6B1E910AAB26349C803DB8D43F18023582E7DD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 02:13:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c9:15:74:94:fe:c4:cb:70:be:f2:2d:d0:03:13:0a:f2:01:3f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6B1E910AAB26349C803DB8D43F18023582E7DD4
        Validity
            Not Before: Jun 15 17:17:13 2026 GMT
            Not After : Jun 14 17:22:13 2027 GMT
        Subject: CN=E704855C53FDEABC870A1C9C7962D44389E756E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9c:fe:ea:0c:27:54:0d:9c:cd:b7:90:a4:d5:
                    9e:7f:63:6d:eb:84:6d:f8:6b:b1:da:5c:96:d9:61:
                    ec:5e:fe:8e:90:b8:f8:5c:5e:cf:b1:9d:e1:a9:9b:
                    f3:9a:a5:bf:55:e4:09:8c:fd:64:f3:e4:6d:c5:61:
                    bb:d1:e5:59:5a:50:75:ab:38:a4:48:3e:3f:a2:47:
                    14:92:c7:df:6e:75:87:1b:b9:0a:2f:c8:58:a6:5d:
                    c1:60:36:47:99:95:9e:c9:44:cb:93:8a:85:37:77:
                    8f:6f:b3:40:d3:19:aa:88:e1:63:18:91:70:1d:87:
                    44:18:51:67:4f:14:bb:6c:e7:6b:74:bd:23:b1:f2:
                    e7:5a:fe:1b:20:0b:1b:31:e7:0b:02:fc:cc:26:f2:
                    47:ce:fc:cf:99:50:80:71:fa:7a:6b:24:d0:d5:78:
                    7e:09:f4:aa:75:89:f5:d3:93:13:13:fb:d7:55:ac:
                    80:26:0d:9c:d4:59:0e:4b:e3:34:43:8d:b5:3b:fc:
                    b3:2d:89:33:5b:82:d2:b5:f9:e1:5f:4b:19:4b:39:
                    00:3c:4f:fd:e4:97:fc:14:9a:4f:c6:5b:3c:ad:f2:
                    87:80:65:5d:09:ce:1b:84:29:bb:ea:54:8e:80:70:
                    dd:dd:74:db:7d:51:35:c8:57:db:f9:24:56:df:3e:
                    09:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:04:85:5C:53:FD:EA:BC:87:0A:1C:9C:79:62:D4:43:89:E7:56:E0
            X509v3 Authority Key Identifier:
                keyid:A6:B1:E9:10:AA:B2:63:49:C8:03:DB:8D:43:F1:80:23:58:2E:7D:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/A6B1E910AAB26349C803DB8D43F18023582E7DD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6B1E910AAB26349C803DB8D43F18023582E7DD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/323830343a353761383a3a2f33332d3333203d3e20323638303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57a8::/33

    Signature Algorithm: sha256WithRSAEncryption
         1d:f8:12:cd:7b:06:21:2c:7c:26:5c:41:1a:d5:6c:e0:aa:d5:
         e2:8a:58:2e:b7:ff:e6:8d:d4:48:a7:73:c0:0c:95:c3:c9:13:
         53:8a:b8:8a:f9:54:92:d7:74:7e:d9:49:e7:98:c2:6e:17:6b:
         c1:5b:39:e3:22:dd:99:db:b5:87:8a:bf:34:16:15:2c:72:8e:
         33:ac:02:3c:08:bb:da:96:8e:28:c3:1a:c7:0a:42:37:b3:79:
         e2:d0:cc:40:b7:a4:16:78:67:cc:be:5b:91:7c:b1:32:8a:40:
         7a:f5:ef:4b:7e:7d:90:b5:8d:c9:ea:88:83:88:89:98:d6:88:
         83:05:bb:af:bd:65:d3:1f:6c:62:32:8f:f9:90:f9:f7:d4:2d:
         e6:bd:0d:0f:89:6c:a4:c4:05:40:46:6f:f5:2d:ee:7e:75:72:
         01:31:5f:70:7c:de:00:af:a4:ec:b9:d2:0d:4f:44:f2:83:17:
         42:ae:cd:7d:00:b7:16:97:e0:35:51:eb:e7:bf:c1:17:c2:a1:
         43:f7:9d:0e:c6:28:ee:9d:0c:f8:aa:6a:88:3b:a4:0f:3b:32:
         e5:1e:7d:df:43:3b:cd:5b:7a:23:42:58:59:d8:a8:1a:c2:7b:
         f6:22:75:c5:d3:4f:f3:a7:e7:d4:bc:19:6e:5f:d7:c8:92:1a:
         fc:63:9b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 14:07:10 2026 by rpki-client