Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/1/323830343a366332633a3a2f33322d3438203d3e20323730343530.roa
File:                     323830343a366332633a3a2f33322d3438203d3e20323730343530.roa (raw, json)
Hash identifier:          VX17zgC0USLeNCH8+ofUbkRN7c05P45yHliP1QhAFaM=
Subject key identifier:   CE:81:CE:EB:0B:AE:9E:6A:AF:A6:6B:8E:0E:2B:4F:DF:26:06:C6:F7
Certificate issuer:       /CN=51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF
Certificate serial:       2635E1884E6FBA6F954573D4B9E03125A1C9E5B7
Authority key identifier: 51:95:7F:33:8D:0D:F1:C4:9A:0F:AB:7B:E0:86:D4:F2:F6:F0:1D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/1/323830343a366332633a3a2f33322d3438203d3e20323730343530.roa
Signing time:             Wed 17 Jun 2026 23:41:49 +0000
ROA not before:           Wed 17 Jun 2026 23:36:49 +0000
ROA not after:            Wed 16 Jun 2027 23:41:49 +0000
asID:                     270450
IP address blocks:        2804:6c2c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/1/51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF.crl
                          rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/1/51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 11:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:35:e1:88:4e:6f:ba:6f:95:45:73:d4:b9:e0:31:25:a1:c9:e5:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF
        Validity
            Not Before: Jun 17 23:36:49 2026 GMT
            Not After : Jun 16 23:41:49 2027 GMT
        Subject: CN=CE81CEEB0BAE9E6AAFA66B8E0E2B4FDF2606C6F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a8:5a:59:f6:8f:0e:cd:4b:05:fe:8f:09:7a:
                    16:03:fd:c3:0a:3f:5d:5e:db:84:13:6d:03:ac:ca:
                    92:af:71:64:4b:b5:d8:0b:a1:65:69:5f:2e:91:0e:
                    44:96:dd:05:5e:90:ad:72:92:a6:f4:cb:86:96:23:
                    4e:7a:39:bc:06:c7:f9:09:c4:7b:b5:ca:c5:8d:c7:
                    dc:0b:63:33:4c:96:27:b4:37:40:60:07:f8:e0:e4:
                    82:14:31:e1:dc:bd:53:95:d1:13:65:93:a3:79:67:
                    95:3a:4b:f1:b2:94:10:93:d0:90:d4:e2:ee:6d:8a:
                    37:ed:93:53:25:de:97:41:18:75:96:e2:ab:f7:a5:
                    bd:38:ff:a6:ed:e5:86:92:55:02:c4:e3:d7:07:ab:
                    57:c9:13:39:48:15:5f:aa:2b:9d:67:4d:00:0e:8f:
                    6d:83:bd:00:d8:cc:56:2a:60:dc:6e:8d:78:4b:db:
                    da:02:45:17:bd:38:c0:ae:06:e2:77:ad:dd:c7:de:
                    c5:f0:58:a9:31:db:c8:f0:b8:ff:19:81:bc:d3:41:
                    17:0f:b1:8c:eb:1c:a0:78:da:12:23:fc:f9:63:22:
                    6d:4b:d6:c8:df:30:a7:a5:3b:8a:74:27:9b:7e:7a:
                    b4:42:ba:8e:b1:1f:14:f3:33:c5:18:92:f7:25:34:
                    df:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:81:CE:EB:0B:AE:9E:6A:AF:A6:6B:8E:0E:2B:4F:DF:26:06:C6:F7
            X509v3 Authority Key Identifier:
                keyid:51:95:7F:33:8D:0D:F1:C4:9A:0F:AB:7B:E0:86:D4:F2:F6:F0:1D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/1/51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/1/323830343a366332633a3a2f33322d3438203d3e20323730343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:83:e1:b3:45:5e:3a:81:0a:e4:e2:e0:ae:7b:c0:1b:c7:32:
         45:86:ae:e4:cf:a7:8f:44:24:88:9c:04:4c:2e:2e:21:54:3c:
         ce:2d:45:78:a4:29:42:b6:c6:0e:c9:5e:a5:59:90:5d:a3:fe:
         a0:80:be:b1:c8:df:38:a7:6b:7d:c9:a6:4b:18:ce:d1:b0:db:
         7c:2b:bc:42:04:ca:63:59:1e:cc:d6:65:37:26:b2:db:08:0c:
         b9:64:25:d7:5b:cc:fb:74:15:6c:09:37:14:54:24:bf:5a:6a:
         8a:8b:b6:db:f8:ec:00:82:4e:bc:20:0b:62:2a:aa:d1:12:f4:
         35:c2:af:78:0b:27:37:7d:10:46:5a:bd:94:02:50:1f:68:08:
         e3:d4:a3:26:bf:c7:6a:fa:ce:7e:2c:22:9e:32:7c:58:8b:71:
         e9:0d:eb:54:27:d3:f4:38:78:36:4b:46:06:fa:8e:42:87:c3:
         b7:33:01:a0:75:a8:97:a4:9c:de:d5:ba:14:e1:17:39:0a:48:
         70:13:a1:4e:41:08:60:f5:32:c3:0e:de:61:59:7c:c0:81:7e:
         89:51:a1:32:96:07:c6:08:7c:44:45:e2:02:13:67:50:c0:4f:
         52:b3:3d:34:9e:70:22:b9:1b:0d:8b:61:75:40:77:8e:62:80:
         7c:03:9e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:12:52 2026 by rpki-client