Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G1qfcPZPy5YYoV1gY81dH4JkQUGZvD1vhuVgffrFiQ3L/2/323830343a323638383a3a2f33322d3438203d3e20323632343832.roa
File:                     323830343a323638383a3a2f33322d3438203d3e20323632343832.roa (raw, json)
Hash identifier:          xSIClYPhhn3U1wmQicf1IkodAbIhAF5WH3husAz5iPk=
Subject key identifier:   DE:D4:F3:E1:78:EE:E1:27:17:89:DC:1B:C7:01:61:BE:FE:C3:E2:29
Certificate issuer:       /CN=A096C66C522750DD8B28AE26182F90FE99954BFF
Certificate serial:       39B00AC08EB9EFDBE5BF13D55522BA4E6885E669
Authority key identifier: A0:96:C6:6C:52:27:50:DD:8B:28:AE:26:18:2F:90:FE:99:95:4B:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A096C66C522750DD8B28AE26182F90FE99954BFF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G1qfcPZPy5YYoV1gY81dH4JkQUGZvD1vhuVgffrFiQ3L/2/323830343a323638383a3a2f33322d3438203d3e20323632343832.roa
Signing time:             Wed 17 Jun 2026 14:58:13 +0000
ROA not before:           Wed 17 Jun 2026 14:53:13 +0000
ROA not after:            Wed 16 Jun 2027 14:58:13 +0000
asID:                     262482
IP address blocks:        2804:2688::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G1qfcPZPy5YYoV1gY81dH4JkQUGZvD1vhuVgffrFiQ3L/2/A096C66C522750DD8B28AE26182F90FE99954BFF.crl
                          rsync://rpki-repo.registro.br/repo/G1qfcPZPy5YYoV1gY81dH4JkQUGZvD1vhuVgffrFiQ3L/2/A096C66C522750DD8B28AE26182F90FE99954BFF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A096C66C522750DD8B28AE26182F90FE99954BFF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 08:39:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b0:0a:c0:8e:b9:ef:db:e5:bf:13:d5:55:22:ba:4e:68:85:e6:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A096C66C522750DD8B28AE26182F90FE99954BFF
        Validity
            Not Before: Jun 17 14:53:13 2026 GMT
            Not After : Jun 16 14:58:13 2027 GMT
        Subject: CN=DED4F3E178EEE1271789DC1BC70161BEFEC3E229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:55:5f:87:5b:65:63:82:5a:8b:f3:03:8e:e6:
                    a1:4c:fd:8f:88:56:87:12:2a:14:4e:e8:c5:11:1c:
                    38:0a:7a:75:f7:04:74:dc:74:b4:8f:76:55:e0:f2:
                    20:ef:8e:12:86:14:fb:aa:bc:08:74:fd:05:c2:fd:
                    95:ba:d9:2f:27:86:3e:a6:27:d9:fd:af:1b:0a:e2:
                    f0:44:70:29:14:3c:af:85:c1:1b:57:8b:b6:aa:df:
                    09:67:36:50:a9:fe:07:9c:e9:9a:cf:67:97:b7:4c:
                    a2:7a:21:f6:32:74:d2:d3:25:cf:60:61:be:de:4b:
                    90:61:94:68:e0:93:25:ec:c8:09:62:c3:71:b0:b1:
                    db:52:a1:06:4e:83:12:15:5f:f5:f8:be:57:a1:21:
                    8b:14:9b:ca:f4:03:5c:97:20:77:64:0c:6b:10:1c:
                    ce:fc:af:ae:a6:f0:52:f3:39:96:9e:0d:39:e3:6e:
                    93:51:de:4d:53:05:ab:69:e8:1b:47:0b:5e:31:03:
                    82:f1:94:31:90:e2:0d:fc:8d:6e:a7:66:3c:6c:3c:
                    9a:9f:44:c4:5f:21:89:ad:35:cf:12:5c:35:3c:cb:
                    f4:7b:94:2d:a4:81:d2:27:c0:6a:ee:a1:13:b8:b2:
                    8f:4d:0f:50:29:14:b1:6c:26:0d:e4:90:ed:d9:10:
                    ef:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D4:F3:E1:78:EE:E1:27:17:89:DC:1B:C7:01:61:BE:FE:C3:E2:29
            X509v3 Authority Key Identifier:
                keyid:A0:96:C6:6C:52:27:50:DD:8B:28:AE:26:18:2F:90:FE:99:95:4B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G1qfcPZPy5YYoV1gY81dH4JkQUGZvD1vhuVgffrFiQ3L/2/A096C66C522750DD8B28AE26182F90FE99954BFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A096C66C522750DD8B28AE26182F90FE99954BFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G1qfcPZPy5YYoV1gY81dH4JkQUGZvD1vhuVgffrFiQ3L/2/323830343a323638383a3a2f33322d3438203d3e20323632343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2688::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:0f:9b:7f:59:d4:82:1d:c6:4a:20:b3:b1:a5:44:c5:81:0c:
         dc:34:76:7d:22:ad:57:82:6a:e8:91:db:f2:74:29:33:cb:9d:
         ae:d8:53:f0:cd:e3:2d:71:82:55:a7:e4:40:f5:c2:56:72:78:
         4e:40:c6:97:fc:64:77:2f:b4:b7:9e:b1:10:31:87:b2:a9:e5:
         38:1a:a5:91:a9:71:18:0b:70:99:54:af:21:04:e8:35:ef:b2:
         b7:ed:21:1c:98:b3:69:23:aa:2d:f7:2c:b5:ea:0b:69:96:e7:
         56:3e:25:41:50:46:d7:10:1f:23:fe:ed:5a:82:13:42:8e:65:
         f6:0c:12:c5:4a:9b:bf:f6:b9:e3:e1:11:32:65:35:f2:1b:bc:
         1a:e1:6f:07:ed:2d:a0:39:74:c9:1e:14:61:37:80:e4:0d:14:
         eb:ab:4e:44:05:37:2d:ef:a3:c4:97:8a:4d:8d:21:ec:e2:10:
         fe:94:91:4e:17:68:0e:bf:57:f4:6f:e7:14:2f:32:8a:76:c9:
         b6:49:b2:fb:f6:ea:a1:ac:74:12:a3:97:53:30:e8:5c:f7:60:
         d0:af:f4:70:f0:89:90:19:32:73:27:3b:d1:38:4d:dc:d6:09:
         63:9e:2c:67:ac:a5:77:dc:cf:85:08:38:7c:1e:6d:39:8f:a1:
         a4:fe:cc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 14:08:54 2026 by rpki-client