Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/323830343a363662633a3a2f33322d313238203d3e20323639353739.roa
File:                     323830343a363662633a3a2f33322d313238203d3e20323639353739.roa (raw, json)
Hash identifier:          +6TFg5M8nNiyvQ8t4gF8xqb9XzNkflPyfLrKnhIE/zk=
Subject key identifier:   83:D1:38:9C:75:2E:AC:CD:93:09:74:D2:AE:1B:4A:F9:DD:4E:0F:F5
Certificate issuer:       /CN=48D67A5AC0D94B2E1DE02826CDADEAC58D57D1D8
Certificate serial:       674C077234940DF5CB6697468A1F812836BC2F97
Authority key identifier: 48:D6:7A:5A:C0:D9:4B:2E:1D:E0:28:26:CD:AD:EA:C5:8D:57:D1:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48D67A5AC0D94B2E1DE02826CDADEAC58D57D1D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/323830343a363662633a3a2f33322d313238203d3e20323639353739.roa
Signing time:             Fri 19 Jun 2026 14:12:59 +0000
ROA not before:           Fri 19 Jun 2026 14:07:59 +0000
ROA not after:            Fri 18 Jun 2027 14:12:59 +0000
asID:                     269579
IP address blocks:        2804:66bc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/48D67A5AC0D94B2E1DE02826CDADEAC58D57D1D8.crl
                          rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/48D67A5AC0D94B2E1DE02826CDADEAC58D57D1D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48D67A5AC0D94B2E1DE02826CDADEAC58D57D1D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 06:39:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:4c:07:72:34:94:0d:f5:cb:66:97:46:8a:1f:81:28:36:bc:2f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48D67A5AC0D94B2E1DE02826CDADEAC58D57D1D8
        Validity
            Not Before: Jun 19 14:07:59 2026 GMT
            Not After : Jun 18 14:12:59 2027 GMT
        Subject: CN=83D1389C752EACCD930974D2AE1B4AF9DD4E0FF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:14:86:79:71:6d:32:51:0d:e9:5f:36:61:a4:
                    51:67:f7:3d:04:ab:65:c5:9f:72:63:aa:05:4c:cc:
                    8a:50:87:32:60:39:bf:ac:ba:26:de:59:9f:88:ac:
                    20:3e:40:0f:b0:ff:63:58:97:98:94:be:81:ad:b0:
                    7d:4f:e2:7f:38:57:d0:32:0b:59:84:b8:70:33:15:
                    ec:ca:a3:47:b0:83:eb:cd:a2:e5:6b:85:20:49:84:
                    6e:65:5b:6c:2e:22:23:b7:b4:84:38:06:26:18:d1:
                    f1:eb:d0:aa:3a:bf:09:25:7d:96:29:99:12:6d:7f:
                    da:f6:8b:dc:d7:24:fc:f1:c0:7a:f7:74:4e:c9:be:
                    37:13:f7:e3:42:46:71:15:1c:40:c7:05:af:22:3b:
                    39:48:0a:61:e2:a5:25:77:2a:cc:ef:84:39:bc:86:
                    1f:77:a5:af:f6:13:e5:6c:bc:f3:2e:9b:bc:2c:96:
                    d5:1c:81:cd:09:d5:42:a7:74:80:12:95:aa:df:69:
                    27:a9:3d:78:66:59:aa:16:85:24:68:42:6e:a6:6d:
                    7f:3b:8b:20:81:dd:23:82:2b:cd:7e:48:96:a8:16:
                    cb:25:f4:3f:9d:b4:3d:33:ac:a9:02:3d:0f:68:b6:
                    21:46:a1:90:ef:df:92:5c:12:07:d8:67:67:2b:42:
                    eb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D1:38:9C:75:2E:AC:CD:93:09:74:D2:AE:1B:4A:F9:DD:4E:0F:F5
            X509v3 Authority Key Identifier:
                keyid:48:D6:7A:5A:C0:D9:4B:2E:1D:E0:28:26:CD:AD:EA:C5:8D:57:D1:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/48D67A5AC0D94B2E1DE02826CDADEAC58D57D1D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48D67A5AC0D94B2E1DE02826CDADEAC58D57D1D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/323830343a363662633a3a2f33322d313238203d3e20323639353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:66bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:43:02:44:4d:79:e6:98:15:24:32:49:6f:db:ae:55:fc:64:
         05:68:4e:1e:c5:1e:b7:17:27:2a:47:b3:a9:49:42:9c:70:b0:
         3d:e7:7c:8e:7a:fc:fb:f8:9a:aa:20:2f:59:ad:a3:7b:80:a4:
         dc:bc:9d:7f:12:ea:9c:55:75:5a:3f:3e:ce:26:90:d7:04:aa:
         40:22:7e:5c:58:7f:28:53:7d:b5:9a:24:e0:18:b0:75:49:ac:
         c1:8b:76:b6:c3:66:5c:92:54:84:cc:68:2d:6f:2d:a5:3f:ce:
         b5:64:ce:c9:18:ad:b8:e9:9e:77:1b:88:5d:5b:29:3d:ae:9d:
         5d:c0:e7:45:a7:30:da:8d:e7:6a:fc:84:03:00:fa:fc:7f:10:
         50:a8:00:8e:98:3f:2f:32:5b:cc:64:2a:a3:77:21:54:57:08:
         68:04:f4:38:06:e4:77:5c:a0:85:90:b5:27:97:45:7a:8e:7a:
         bd:0d:7b:ec:c2:e3:e4:d9:7e:08:52:ab:81:ea:81:0a:f0:69:
         ba:3d:d1:e9:91:48:2e:1b:fd:4d:1f:86:1a:40:c5:a7:f6:b4:
         0f:64:ba:ee:2d:7c:ec:1a:17:fb:b9:61:48:41:4d:df:12:92:
         23:33:d7:04:23:b1:12:89:56:b1:c4:02:4f:8a:84:a4:ed:21:
         ec:51:45:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:09:00 2026 by rpki-client