Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/323830343a366138343a3a2f33352d3335203d3e20323730333431.roa
File:                     323830343a366138343a3a2f33352d3335203d3e20323730333431.roa (raw, json)
Hash identifier:          40gILZoKq4RuvTnDJCGwS2W9j2MFSNkzuhJpD7LXKYk=
Subject key identifier:   F3:66:85:06:83:D0:B3:49:03:2E:3F:21:92:B0:73:2C:EB:78:4C:10
Certificate issuer:       /CN=D4CE1443D6786421014CB2B08469ADBFF750F303
Certificate serial:       130DD9248342465C4FC41593FF29EA10391F233A
Authority key identifier: D4:CE:14:43:D6:78:64:21:01:4C:B2:B0:84:69:AD:BF:F7:50:F3:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4CE1443D6786421014CB2B08469ADBFF750F303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/323830343a366138343a3a2f33352d3335203d3e20323730333431.roa
Signing time:             Thu 02 Jul 2026 15:09:07 +0000
ROA not before:           Thu 02 Jul 2026 15:04:07 +0000
ROA not after:            Thu 01 Jul 2027 15:09:07 +0000
asID:                     270341
IP address blocks:        2804:6a84::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/D4CE1443D6786421014CB2B08469ADBFF750F303.crl
                          rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/D4CE1443D6786421014CB2B08469ADBFF750F303.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4CE1443D6786421014CB2B08469ADBFF750F303.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 18:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:0d:d9:24:83:42:46:5c:4f:c4:15:93:ff:29:ea:10:39:1f:23:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4CE1443D6786421014CB2B08469ADBFF750F303
        Validity
            Not Before: Jul  2 15:04:07 2026 GMT
            Not After : Jul  1 15:09:07 2027 GMT
        Subject: CN=F366850683D0B349032E3F2192B0732CEB784C10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:65:57:5a:7c:f9:59:84:47:8f:4d:36:89:d2:
                    65:7d:fd:dd:31:90:7b:1f:92:74:51:7b:bd:ac:8c:
                    50:a1:11:3c:83:84:26:7a:23:b8:dd:e4:0a:e7:b0:
                    52:03:b5:7e:71:ad:92:a1:84:c8:95:0c:2d:b1:44:
                    db:67:3a:fb:6e:3c:40:41:85:92:94:58:3b:ca:24:
                    dd:19:5e:cf:6b:97:fd:60:6d:0b:a1:70:9d:7a:6d:
                    86:b6:9e:45:62:1a:66:07:86:d8:5d:ce:f1:69:c2:
                    16:1a:ca:8b:02:f8:a4:d7:fd:34:94:4f:8a:35:c7:
                    62:6d:0b:a7:d7:7d:cd:01:5f:b2:fd:bd:19:1c:fe:
                    53:17:bb:32:47:ba:8a:23:da:29:53:a4:c1:e1:5d:
                    97:69:94:86:30:43:2e:fd:3f:9d:ed:aa:b6:c4:88:
                    59:b3:56:2c:5e:19:5f:b5:2b:ab:fd:83:9c:bf:9f:
                    38:0a:bd:e2:6e:35:3b:81:40:ae:01:6c:f9:cf:81:
                    40:92:d9:9b:c5:38:d9:88:6d:b5:3e:0f:a0:ca:b6:
                    a3:c4:9b:a7:a8:c3:f4:ea:d4:69:a1:db:97:ba:2e:
                    40:c4:18:14:5f:d9:7f:bf:c5:3c:f6:be:d3:9b:9b:
                    61:e5:b9:db:bb:72:42:1d:a0:0b:de:9f:d7:55:8f:
                    1d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:66:85:06:83:D0:B3:49:03:2E:3F:21:92:B0:73:2C:EB:78:4C:10
            X509v3 Authority Key Identifier:
                keyid:D4:CE:14:43:D6:78:64:21:01:4C:B2:B0:84:69:AD:BF:F7:50:F3:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/D4CE1443D6786421014CB2B08469ADBFF750F303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4CE1443D6786421014CB2B08469ADBFF750F303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/323830343a366138343a3a2f33352d3335203d3e20323730333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a84::/35

    Signature Algorithm: sha256WithRSAEncryption
         38:ab:9c:64:fe:a6:6d:e1:19:65:3a:01:e9:58:d8:54:57:2a:
         fa:d7:47:c3:d4:62:ce:51:38:a5:e7:48:57:31:e8:7f:a9:92:
         22:e2:d0:43:53:7d:a4:9d:5b:c3:f1:c0:62:2a:6c:df:0e:c4:
         c2:e9:a1:48:9a:36:80:b1:d6:db:23:7a:e2:16:4c:af:4b:fc:
         b8:6c:4a:d8:a9:67:38:40:20:9b:85:c2:11:8d:b4:88:58:96:
         0a:60:1c:78:95:42:1e:85:87:e4:3f:2c:bf:32:f4:a3:ad:21:
         57:f3:45:44:0e:aa:84:c6:b4:65:36:eb:34:0f:87:d4:7a:21:
         9f:59:e6:aa:77:1c:5f:59:d9:5d:a1:54:9f:90:1a:4c:e5:01:
         94:d7:38:05:86:9e:4d:74:bf:70:ec:0f:d1:08:9e:65:8c:9a:
         01:c2:b1:7b:3d:b2:da:7e:ca:d6:d7:1c:4a:4c:11:33:29:3c:
         21:82:4c:29:a8:bd:40:7c:97:39:28:1c:a2:6e:a3:a0:01:56:
         b4:88:77:f4:a2:3c:da:ce:f9:1c:ca:ee:2b:ff:d9:e3:b1:a6:
         bf:27:74:84:47:c5:86:c6:61:ac:1c:25:5b:cb:db:87:63:6e:
         f9:3c:7b:94:c1:4e:aa:ba:c8:7f:45:78:19:70:d0:e5:bd:af:
         75:35:92:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:01:11 2026 by rpki-client