Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/323830343a353761383a3a2f33342d3334203d3e20323638303738.roa
File:                     323830343a353761383a3a2f33342d3334203d3e20323638303738.roa (raw, json)
Hash identifier:          TmshZ+Cx7evQo9mg3WwlFCmCXWc5r1whBDXH5Fq83mI=
Subject key identifier:   9A:56:75:B5:76:F7:AF:C2:AD:3A:38:94:31:D0:2D:E3:99:19:A3:70
Certificate issuer:       /CN=A6B1E910AAB26349C803DB8D43F18023582E7DD4
Certificate serial:       255EA1C3E4488D116C2D1346101B949BC9F4515E
Authority key identifier: A6:B1:E9:10:AA:B2:63:49:C8:03:DB:8D:43:F1:80:23:58:2E:7D:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6B1E910AAB26349C803DB8D43F18023582E7DD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/323830343a353761383a3a2f33342d3334203d3e20323638303738.roa
Signing time:             Mon 15 Jun 2026 17:22:14 +0000
ROA not before:           Mon 15 Jun 2026 17:17:14 +0000
ROA not after:            Mon 14 Jun 2027 17:22:14 +0000
asID:                     268078
IP address blocks:        2804:57a8::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/A6B1E910AAB26349C803DB8D43F18023582E7DD4.crl
                          rsync://rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/A6B1E910AAB26349C803DB8D43F18023582E7DD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6B1E910AAB26349C803DB8D43F18023582E7DD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 02:13:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:5e:a1:c3:e4:48:8d:11:6c:2d:13:46:10:1b:94:9b:c9:f4:51:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6B1E910AAB26349C803DB8D43F18023582E7DD4
        Validity
            Not Before: Jun 15 17:17:14 2026 GMT
            Not After : Jun 14 17:22:14 2027 GMT
        Subject: CN=9A5675B576F7AFC2AD3A389431D02DE39919A370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:94:a6:af:7a:14:8d:3c:ab:86:65:15:e5:7f:
                    66:6b:73:29:7b:0e:bf:76:b5:ea:c2:15:71:b8:0e:
                    30:fe:ca:7f:9c:3c:b7:7a:64:df:86:07:a8:56:b3:
                    bd:08:32:30:3b:71:67:37:e3:2f:5d:a5:9f:e6:7d:
                    f6:e9:65:35:db:68:56:8c:f5:75:39:be:d6:ea:1a:
                    fb:5e:c8:69:fc:45:68:43:38:68:10:76:84:56:fc:
                    6e:f5:5d:17:68:e7:29:55:bd:c0:48:3e:8c:8d:6c:
                    e5:a0:34:1a:de:b0:bd:b8:eb:38:3a:3a:e1:5c:27:
                    a0:bb:0a:fc:8d:75:90:a2:f0:17:55:20:4e:40:c5:
                    f6:04:fe:68:a5:f6:11:4c:97:ee:30:95:94:d2:5a:
                    a6:28:25:3d:31:ed:24:ac:b8:66:76:82:f8:c4:5a:
                    d7:13:43:e3:66:cd:b7:3b:aa:f4:b5:33:43:42:2c:
                    cf:23:2f:b3:f8:a6:d9:23:42:dd:40:da:b8:98:f3:
                    5a:88:9f:5f:c9:4d:f4:a6:f5:30:08:64:0f:1a:22:
                    54:16:12:d7:2a:57:8c:dd:86:d7:32:24:32:93:4f:
                    9f:38:8e:f5:1b:50:13:7f:72:01:f5:97:04:f3:b4:
                    2a:e5:f9:f7:5c:a2:37:09:a2:41:dc:65:78:6d:16:
                    89:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:56:75:B5:76:F7:AF:C2:AD:3A:38:94:31:D0:2D:E3:99:19:A3:70
            X509v3 Authority Key Identifier:
                keyid:A6:B1:E9:10:AA:B2:63:49:C8:03:DB:8D:43:F1:80:23:58:2E:7D:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/A6B1E910AAB26349C803DB8D43F18023582E7DD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6B1E910AAB26349C803DB8D43F18023582E7DD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/323830343a353761383a3a2f33342d3334203d3e20323638303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57a8::/34

    Signature Algorithm: sha256WithRSAEncryption
         12:2e:b4:d6:98:60:30:53:4e:93:55:a1:2c:27:80:f1:6e:c6:
         32:b1:6a:af:44:55:1b:87:69:4d:e5:e9:40:a7:98:9c:b3:bd:
         09:cf:02:a7:45:de:5a:f2:e1:d0:ad:3b:71:fb:0b:cf:9c:f7:
         03:4b:5b:85:a8:5f:96:da:b3:13:6f:9e:a8:c2:ab:4e:5a:f5:
         05:37:53:c1:95:f5:0e:53:ac:f0:65:38:53:75:e7:16:58:c7:
         bb:9f:dc:68:99:51:00:4b:4b:bd:2c:a8:59:68:cd:6c:18:8b:
         8e:fe:c8:a4:fd:4d:71:ce:8a:49:0d:4d:48:f1:e0:19:08:ee:
         93:ae:24:3c:5f:76:83:3c:a5:b1:d4:7d:45:f6:1c:2f:4e:90:
         e7:67:f1:c5:0b:e0:61:84:03:98:46:d8:43:4c:00:41:96:45:
         ce:a3:85:51:48:ea:a1:ea:3b:75:fc:17:cb:60:d7:4a:f6:0c:
         d9:f2:8d:b1:f7:4e:b9:8d:57:93:e9:b0:7d:fa:15:62:18:e9:
         bd:6a:9d:ca:5a:9b:1c:84:e3:4c:de:7e:9c:15:6a:99:80:8b:
         43:be:96:f3:7b:af:10:36:c1:26:32:e2:77:fa:8c:12:a5:44:
         b3:48:43:88:0a:f6:8b:21:dd:ba:ae:2d:69:f6:46:ba:c4:2e:
         ca:ba:44:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:08:55 2026 by rpki-client