Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ew9vQ2G8pRxX3hPwh3mcxrQcDDw1544b4NPCQCRLzrfV/0/323830343a333830343a3a2f33322d3438203d3e20323636343530.roa
File:                     323830343a333830343a3a2f33322d3438203d3e20323636343530.roa (raw, json)
Hash identifier:          C+Rg+1B7Fjmv0PVYuclE2OodMzTq4eeRAZg8B3PADqA=
Subject key identifier:   BB:B1:D1:29:4F:B0:0C:10:EB:83:AF:3E:D8:76:07:2D:C2:84:4C:32
Certificate issuer:       /CN=6AE448368C78ED5682E4A33DD290326A5194159E
Certificate serial:       233E89654865A805D4312BB83EEEF28DBA7A44E5
Authority key identifier: 6A:E4:48:36:8C:78:ED:56:82:E4:A3:3D:D2:90:32:6A:51:94:15:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AE448368C78ED5682E4A33DD290326A5194159E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ew9vQ2G8pRxX3hPwh3mcxrQcDDw1544b4NPCQCRLzrfV/0/323830343a333830343a3a2f33322d3438203d3e20323636343530.roa
Signing time:             Tue 16 Jun 2026 19:03:00 +0000
ROA not before:           Tue 16 Jun 2026 18:58:00 +0000
ROA not after:            Tue 15 Jun 2027 19:03:00 +0000
asID:                     266450
IP address blocks:        2804:3804::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ew9vQ2G8pRxX3hPwh3mcxrQcDDw1544b4NPCQCRLzrfV/0/6AE448368C78ED5682E4A33DD290326A5194159E.crl
                          rsync://rpki-repo.registro.br/repo/Ew9vQ2G8pRxX3hPwh3mcxrQcDDw1544b4NPCQCRLzrfV/0/6AE448368C78ED5682E4A33DD290326A5194159E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AE448368C78ED5682E4A33DD290326A5194159E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 03:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:3e:89:65:48:65:a8:05:d4:31:2b:b8:3e:ee:f2:8d:ba:7a:44:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AE448368C78ED5682E4A33DD290326A5194159E
        Validity
            Not Before: Jun 16 18:58:00 2026 GMT
            Not After : Jun 15 19:03:00 2027 GMT
        Subject: CN=BBB1D1294FB00C10EB83AF3ED876072DC2844C32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ff:44:78:0a:73:6b:68:0b:4a:d7:8b:4d:57:
                    22:aa:ce:08:28:4d:5b:00:b7:52:02:44:2a:d6:c1:
                    3a:99:f2:93:9b:64:d3:da:c7:27:3a:74:e2:5b:d9:
                    f7:2c:c5:37:33:0a:37:ec:7f:88:c1:c3:ea:58:43:
                    1f:6d:94:fc:09:03:d7:65:18:6e:cf:2b:23:46:a2:
                    a8:2d:85:87:b8:a3:6d:90:63:fb:c9:a1:05:38:97:
                    a0:91:39:dc:31:1f:03:66:e5:ee:79:00:d3:6f:ec:
                    f9:82:16:c2:1a:98:d5:9d:4a:04:a6:22:4c:0b:22:
                    d1:55:fc:c5:19:15:09:73:9b:96:d2:23:a0:2c:eb:
                    ba:8a:7d:2f:ef:64:90:31:31:c3:f9:ca:fd:fa:03:
                    2b:12:c1:97:80:10:0e:2c:5e:fb:4d:5f:d8:67:0d:
                    c5:51:ee:76:5c:7d:81:e9:52:77:ba:ce:71:f7:f5:
                    1e:1b:c6:6d:94:85:1e:2f:18:fa:76:d2:70:b1:91:
                    b2:dc:86:df:34:9e:a4:66:ce:13:4a:bc:96:99:60:
                    89:55:e3:c5:07:e1:7a:7a:59:cf:18:29:ff:71:83:
                    75:2f:d4:8c:21:cd:59:0b:00:f5:12:44:a0:76:03:
                    68:59:a5:78:2d:59:a8:07:3e:5a:40:61:9e:bd:c7:
                    3c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B1:D1:29:4F:B0:0C:10:EB:83:AF:3E:D8:76:07:2D:C2:84:4C:32
            X509v3 Authority Key Identifier:
                keyid:6A:E4:48:36:8C:78:ED:56:82:E4:A3:3D:D2:90:32:6A:51:94:15:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ew9vQ2G8pRxX3hPwh3mcxrQcDDw1544b4NPCQCRLzrfV/0/6AE448368C78ED5682E4A33DD290326A5194159E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AE448368C78ED5682E4A33DD290326A5194159E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ew9vQ2G8pRxX3hPwh3mcxrQcDDw1544b4NPCQCRLzrfV/0/323830343a333830343a3a2f33322d3438203d3e20323636343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3804::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:f2:66:a2:53:c3:d0:d7:5a:36:8e:c6:5d:ad:85:69:78:37:
         a1:34:2f:13:8d:4a:8c:e4:92:7f:9d:3a:cf:1a:41:f8:fc:fa:
         58:17:b1:0f:50:cb:c0:fc:7b:38:fb:3d:64:c4:62:6b:1f:e9:
         6f:b5:71:d3:1b:f0:63:52:b0:9f:3a:d6:66:16:ce:c1:20:2d:
         31:3a:70:6d:68:22:58:38:55:ea:bd:7d:71:32:b7:69:77:d1:
         20:40:43:e3:db:cc:a1:01:fd:13:13:36:4f:5b:7c:18:3a:ee:
         28:60:f5:2f:f9:35:b5:56:06:56:da:02:8b:90:5d:85:d3:fb:
         85:ff:45:fc:0e:19:ae:a6:cf:ba:85:91:77:bf:8e:32:bd:5d:
         43:fa:c1:0e:14:64:61:4e:94:7d:a2:0c:cd:1c:f4:2e:e8:b1:
         54:a5:33:1b:20:1a:02:3c:36:bb:62:fe:1a:45:65:18:11:7e:
         c0:bd:ea:7d:26:1d:3a:2e:4c:29:fe:c1:e1:b4:44:49:41:26:
         ee:73:12:14:3c:41:0a:d3:12:fe:70:7b:a8:1b:ee:4d:a4:cc:
         f5:64:82:ec:4d:d7:80:b1:83:b1:2b:2e:0c:6a:e3:3f:f0:84:
         da:da:07:64:ff:4e:0b:6b:15:82:f3:72:b3:f8:9b:41:7a:82:
         3c:e4:09:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:08:58 2026 by rpki-client