Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/323830343a363633633a3a2f33322d313238203d3e20323639353335.roa
File:                     323830343a363633633a3a2f33322d313238203d3e20323639353335.roa (raw, json)
Hash identifier:          FKoPNOIwG2O46DQk72BXwge7UJ8xixfqzd0FeHOjkbQ=
Subject key identifier:   F6:89:35:93:B8:09:6C:D4:8C:F3:AF:20:BE:50:1A:2F:AF:2D:EE:9E
Certificate issuer:       /CN=ED21D10C23C2376429733090A859B9263A7A9ADC
Certificate serial:       4184967B9BCE8C37EC6E1AA3054EE9BDD78C2228
Authority key identifier: ED:21:D1:0C:23:C2:37:64:29:73:30:90:A8:59:B9:26:3A:7A:9A:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED21D10C23C2376429733090A859B9263A7A9ADC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/323830343a363633633a3a2f33322d313238203d3e20323639353335.roa
Signing time:             Wed 17 Jun 2026 18:02:30 +0000
ROA not before:           Wed 17 Jun 2026 17:57:30 +0000
ROA not after:            Wed 16 Jun 2027 18:02:30 +0000
asID:                     269535
IP address blocks:        2804:663c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/ED21D10C23C2376429733090A859B9263A7A9ADC.crl
                          rsync://rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/ED21D10C23C2376429733090A859B9263A7A9ADC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED21D10C23C2376429733090A859B9263A7A9ADC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 27 Jun 2026 22:35:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:84:96:7b:9b:ce:8c:37:ec:6e:1a:a3:05:4e:e9:bd:d7:8c:22:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED21D10C23C2376429733090A859B9263A7A9ADC
        Validity
            Not Before: Jun 17 17:57:30 2026 GMT
            Not After : Jun 16 18:02:30 2027 GMT
        Subject: CN=F6893593B8096CD48CF3AF20BE501A2FAF2DEE9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:77:a0:0d:ac:a6:39:4d:1b:42:7e:b0:81:c6:
                    07:e5:de:b7:5f:e1:0b:2d:74:c0:e3:54:e7:6a:ad:
                    38:db:a7:50:2d:1f:cf:1d:77:c8:83:5f:30:f2:d7:
                    5b:98:2a:ca:bf:1e:d6:03:96:48:fc:2e:65:59:41:
                    c6:c0:6a:ae:4c:f7:ec:5e:f2:96:eb:20:b3:d6:98:
                    bb:f0:cc:7a:36:45:78:47:72:02:2e:dc:6e:b6:f5:
                    9a:c4:6f:ea:d7:76:d2:e8:79:18:ba:17:c2:2d:65:
                    10:c8:f2:53:0f:cb:00:4f:6a:09:52:0a:10:4b:5b:
                    6c:81:5d:1b:57:93:d2:da:1d:67:6e:da:f6:97:78:
                    2a:89:59:7f:c7:f5:58:a6:e0:0e:bf:c4:b8:5a:56:
                    e6:95:51:29:9b:3b:e4:3d:fd:8d:13:69:51:9d:92:
                    4a:d9:0b:b9:11:e1:c9:e4:5e:68:0e:2b:5f:55:db:
                    29:f5:ec:89:30:70:58:00:75:40:2b:fd:1e:91:a7:
                    aa:ed:17:68:10:05:51:cb:9e:22:39:9e:35:2a:20:
                    b2:25:f2:be:b7:10:ce:28:4d:03:37:6a:ec:a9:e9:
                    8b:59:00:0b:dd:cf:65:8b:91:09:92:45:ad:e8:5e:
                    ce:7b:a3:b4:40:db:0c:da:a6:74:f5:df:5f:fe:3b:
                    b6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:89:35:93:B8:09:6C:D4:8C:F3:AF:20:BE:50:1A:2F:AF:2D:EE:9E
            X509v3 Authority Key Identifier:
                keyid:ED:21:D1:0C:23:C2:37:64:29:73:30:90:A8:59:B9:26:3A:7A:9A:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/ED21D10C23C2376429733090A859B9263A7A9ADC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED21D10C23C2376429733090A859B9263A7A9ADC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/323830343a363633633a3a2f33322d313238203d3e20323639353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:663c::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:a2:50:fe:73:0e:71:ab:34:8d:45:2a:e0:df:5e:ba:20:e2:
         2c:60:ff:dd:fa:c4:be:cf:e0:03:f2:1b:bd:02:08:8e:8c:69:
         98:93:c1:8f:af:12:1d:82:36:ba:20:a2:b9:31:30:2f:99:f0:
         3b:bb:04:a7:68:67:25:60:8b:34:a1:ed:7e:a0:c4:90:71:38:
         08:d9:ea:f6:9e:fc:12:a0:5f:88:b1:7a:2a:ee:e4:b5:7a:cb:
         2b:20:a8:cb:ef:5d:40:09:ad:6b:6b:bb:26:05:6d:a2:7a:43:
         0d:e0:5e:a9:34:d6:ae:37:39:24:11:54:24:08:4a:f2:94:42:
         fe:94:49:3f:9e:b8:bc:32:f4:3f:1f:04:de:2c:45:28:3b:a3:
         6f:b6:87:05:f4:66:1d:26:84:82:ba:94:3f:06:b7:b6:0e:b6:
         02:a4:a9:bc:74:8b:ec:dd:e4:99:dc:09:cf:78:0d:0f:64:51:
         ee:4d:5c:e8:c8:d9:d7:d7:a2:aa:60:a6:67:c4:11:87:cf:af:
         88:c5:f3:4c:a5:be:44:38:55:f4:a1:70:47:ab:2e:fe:c7:05:
         02:c0:cd:c2:a7:95:46:e4:f4:ca:dd:c4:fb:24:2e:13:97:dc:
         75:52:60:dd:ab:d8:2a:5c:42:3c:df:84:60:b2:fe:c5:57:37:
         46:b5:df:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:29:36 2026 by rpki-client