Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/323830343a373462303a343030303a3a2f33342d3334203d3e20323730393937.roa
File:                     323830343a373462303a343030303a3a2f33342d3334203d3e20323730393937.roa (raw, json)
Hash identifier:          ANMGkpAp2kipCsrJD71TXNzM4xb/BVS8P08/SkwBoZY=
Subject key identifier:   39:3E:D1:6B:C9:21:87:9F:65:FD:38:7B:B7:92:E4:6D:C5:62:1A:4F
Certificate issuer:       /CN=258338C892819C29299C2555CE03148F8D63A950
Certificate serial:       5DC9E8FCB2A582834F99ABABEA68172C248CC443
Authority key identifier: 25:83:38:C8:92:81:9C:29:29:9C:25:55:CE:03:14:8F:8D:63:A9:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/258338C892819C29299C2555CE03148F8D63A950.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/323830343a373462303a343030303a3a2f33342d3334203d3e20323730393937.roa
Signing time:             Fri 19 Jun 2026 14:13:59 +0000
ROA not before:           Fri 19 Jun 2026 14:08:59 +0000
ROA not after:            Fri 18 Jun 2027 14:13:59 +0000
asID:                     270997
IP address blocks:        2804:74b0:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/258338C892819C29299C2555CE03148F8D63A950.crl
                          rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/258338C892819C29299C2555CE03148F8D63A950.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/258338C892819C29299C2555CE03148F8D63A950.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 13:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:c9:e8:fc:b2:a5:82:83:4f:99:ab:ab:ea:68:17:2c:24:8c:c4:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258338C892819C29299C2555CE03148F8D63A950
        Validity
            Not Before: Jun 19 14:08:59 2026 GMT
            Not After : Jun 18 14:13:59 2027 GMT
        Subject: CN=393ED16BC921879F65FD387BB792E46DC5621A4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5a:9e:08:79:0c:a0:c9:44:3d:79:7b:94:e7:
                    71:4d:ec:88:ab:1f:6c:7b:fb:7d:cb:ce:df:9e:b7:
                    d5:f7:1f:52:3e:19:24:80:47:94:12:3f:ba:bf:44:
                    cb:ae:5f:44:cc:fd:d5:c1:6d:d7:c1:b2:26:1e:57:
                    ea:de:8c:82:66:bf:41:bd:28:16:f6:b4:15:3b:81:
                    e0:e6:32:8a:23:d0:11:58:77:f3:c2:bd:68:55:e0:
                    85:78:2c:6e:b1:9a:8a:28:53:c2:33:e0:7f:8d:9a:
                    84:a7:03:fd:40:73:95:44:d6:1c:5a:d0:9a:db:20:
                    f2:1a:ee:82:ac:1a:10:a4:5b:50:8b:8c:7b:18:dd:
                    eb:c5:dc:58:e9:aa:da:45:d5:d1:7b:65:f2:a0:f3:
                    f9:3f:fc:5a:96:49:71:88:29:a9:d4:54:5b:d6:bc:
                    c4:e3:68:a6:ec:c4:10:30:4c:b9:34:7f:6b:c4:1f:
                    d0:67:82:e5:e0:fa:86:b1:9c:b9:b7:31:bd:ad:50:
                    33:62:f4:e1:08:e1:6f:e5:d9:16:34:3b:35:f1:2a:
                    a8:fa:b7:7e:32:d4:96:17:2f:f8:df:8d:fb:e0:b1:
                    80:a5:71:54:6e:cb:46:c9:6b:5f:bf:91:96:2b:67:
                    21:96:a0:79:29:ef:f9:4f:ce:db:43:fe:34:43:c2:
                    f8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3E:D1:6B:C9:21:87:9F:65:FD:38:7B:B7:92:E4:6D:C5:62:1A:4F
            X509v3 Authority Key Identifier:
                keyid:25:83:38:C8:92:81:9C:29:29:9C:25:55:CE:03:14:8F:8D:63:A9:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/258338C892819C29299C2555CE03148F8D63A950.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/258338C892819C29299C2555CE03148F8D63A950.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/323830343a373462303a343030303a3a2f33342d3334203d3e20323730393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74b0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         44:97:61:76:3b:fd:7b:44:bf:ad:bc:11:9c:e7:a0:18:2b:b1:
         e9:66:cb:0d:ff:ed:ef:5d:df:07:4b:53:f3:cb:05:48:00:2a:
         6e:73:28:b4:bc:62:d7:a1:87:c8:9d:30:42:bb:71:cf:dc:3e:
         93:d7:ed:94:ed:85:3e:85:aa:08:a7:1c:29:9d:64:1d:1c:c3:
         eb:15:a8:4f:2c:6a:c8:82:ad:a0:17:d5:b9:42:44:bf:81:fa:
         f4:72:fa:ec:cf:dd:82:66:51:97:54:da:9d:1a:25:2e:73:fa:
         80:42:d2:17:95:31:b8:cc:3a:7d:4d:e3:e3:06:0a:77:76:e0:
         e6:fb:f0:d1:1b:5c:74:23:2c:19:4d:e6:c2:43:49:da:d4:9b:
         6f:8a:e4:f8:e6:c2:80:01:ae:57:9d:d1:14:c4:cd:ee:d1:59:
         a9:c1:61:42:4a:d5:d7:d7:a9:d9:eb:ed:fb:cc:94:a6:77:92:
         0f:03:85:59:c6:f7:69:5b:4f:f4:33:71:92:e3:3e:ce:df:1e:
         e1:65:38:50:33:00:e2:95:bf:b5:b9:6b:25:d3:a1:0a:c3:7e:
         0c:8f:89:24:d9:b7:c0:79:56:c9:e2:0b:c8:e0:8f:67:5f:58:
         42:77:87:ba:f1:3f:96:e5:73:cb:07:ba:44:04:75:7b:65:52:
         5d:2c:d1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:59:56 2026 by rpki-client