Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/323830343a323833383a3a2f33322d3438203d3e20323633393438.roa
File:                     323830343a323833383a3a2f33322d3438203d3e20323633393438.roa (raw, json)
Hash identifier:          6ZFFb7xMNGmCXrHM3bnamHOFRMUE4s1jBr/Wtz9vT7I=
Subject key identifier:   88:E6:60:59:C2:E0:8B:54:FE:E6:B8:33:EC:F9:86:BA:A1:FB:D3:9F
Certificate issuer:       /CN=38C55FA85D6155B20099671CFAE5FE5B8BDC10C4
Certificate serial:       59D42F5EDCCC326A38010CF96ADAA5B3DC745B33
Authority key identifier: 38:C5:5F:A8:5D:61:55:B2:00:99:67:1C:FA:E5:FE:5B:8B:DC:10:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38C55FA85D6155B20099671CFAE5FE5B8BDC10C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/323830343a323833383a3a2f33322d3438203d3e20323633393438.roa
Signing time:             Wed 24 Jun 2026 14:33:15 +0000
ROA not before:           Wed 24 Jun 2026 14:28:15 +0000
ROA not after:            Wed 23 Jun 2027 14:33:15 +0000
asID:                     263948
IP address blocks:        2804:2838::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/38C55FA85D6155B20099671CFAE5FE5B8BDC10C4.crl
                          rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/38C55FA85D6155B20099671CFAE5FE5B8BDC10C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38C55FA85D6155B20099671CFAE5FE5B8BDC10C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 11:45:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d4:2f:5e:dc:cc:32:6a:38:01:0c:f9:6a:da:a5:b3:dc:74:5b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38C55FA85D6155B20099671CFAE5FE5B8BDC10C4
        Validity
            Not Before: Jun 24 14:28:15 2026 GMT
            Not After : Jun 23 14:33:15 2027 GMT
        Subject: CN=88E66059C2E08B54FEE6B833ECF986BAA1FBD39F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:aa:86:af:e1:df:ef:72:d8:24:f6:c5:55:26:
                    43:78:3d:b1:c8:d4:8d:c0:94:2d:a9:b2:a5:fd:fb:
                    d1:7d:21:13:7e:fa:de:97:07:a9:25:18:3f:aa:02:
                    57:9c:6c:fe:1f:72:a3:9d:0c:df:71:0d:be:7f:c5:
                    90:61:dc:4f:f2:32:e0:cd:64:2b:02:2b:de:f4:ca:
                    c9:3c:07:56:10:6c:f2:01:4a:48:07:c7:e5:90:68:
                    23:b3:21:52:6e:d7:b8:da:0b:f8:17:b1:5e:97:5f:
                    76:fc:40:50:89:fe:6a:70:b5:e8:6e:6b:db:a2:2f:
                    67:8c:e8:67:12:30:2b:03:6d:43:cc:8b:a4:80:8e:
                    db:63:3c:b2:2b:69:05:11:31:78:13:c8:18:89:e4:
                    24:18:38:1e:30:13:55:cd:19:8d:17:45:25:ae:c1:
                    cc:36:75:65:9e:df:2c:45:08:74:32:46:45:f4:df:
                    4e:c1:0d:f4:db:aa:dc:0e:e8:66:0b:b8:da:79:ae:
                    1b:16:91:54:ff:fc:b1:f6:10:ee:fa:05:92:81:95:
                    00:62:83:1b:d1:19:5e:9a:f2:4e:41:1f:43:9b:2f:
                    94:02:b5:9f:a1:67:95:03:de:42:39:ef:f7:1c:56:
                    ee:93:d1:0a:d9:15:75:bb:e5:13:54:98:f8:64:33:
                    92:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E6:60:59:C2:E0:8B:54:FE:E6:B8:33:EC:F9:86:BA:A1:FB:D3:9F
            X509v3 Authority Key Identifier:
                keyid:38:C5:5F:A8:5D:61:55:B2:00:99:67:1C:FA:E5:FE:5B:8B:DC:10:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/38C55FA85D6155B20099671CFAE5FE5B8BDC10C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38C55FA85D6155B20099671CFAE5FE5B8BDC10C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/323830343a323833383a3a2f33322d3438203d3e20323633393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2838::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:ba:98:c7:ba:d7:70:83:0c:86:3e:68:6a:ee:0b:5e:4b:d3:
         cc:c8:c1:f8:d9:ee:0c:f3:df:6b:4b:93:c0:a1:93:c1:3b:d7:
         f3:f4:42:a5:03:36:a5:93:5e:e7:e9:ab:84:bc:d1:ff:bc:a6:
         6c:43:85:94:b5:80:b7:68:76:cc:35:2e:04:50:d6:86:15:c9:
         21:76:2e:98:d7:7d:06:36:c4:7c:12:3f:7c:b1:32:4f:2c:e1:
         61:44:aa:35:e4:76:8a:57:99:7f:e6:a6:1c:99:24:be:bb:7e:
         58:92:b2:53:47:4d:ec:30:14:b0:7a:2e:39:3e:3d:16:49:54:
         90:f7:85:cc:00:b6:8e:a5:16:cf:8d:89:fd:2e:0a:18:9c:19:
         22:f5:28:85:ac:0f:3b:01:1d:30:e7:78:fa:1c:0b:38:80:e0:
         5d:47:65:30:8b:89:fe:f5:51:2a:be:5d:2a:56:ac:42:f9:ff:
         68:77:e1:c6:46:ce:ae:c2:50:b5:b4:ed:41:06:25:68:07:fa:
         4d:3b:a3:32:e0:91:80:e4:f5:9b:e5:e4:da:03:9f:2a:46:28:
         e1:7c:c1:13:83:31:7a:bc:c9:e7:64:58:e8:de:c6:f9:65:ce:
         fd:fd:34:6c:ed:aa:db:f0:6f:90:52:79:52:9f:ce:f9:72:b9:
         68:ee:59:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:15:59 2026 by rpki-client