Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/323830343a353039343a363030303a3a2f33362d3336203d3e20323638333937.roa
File:                     323830343a353039343a363030303a3a2f33362d3336203d3e20323638333937.roa (raw, json)
Hash identifier:          dZ5lsD5W1RvrJIfV8YsVsS29zX2CJoF9PSmo4pt/Pjc=
Subject key identifier:   12:A9:8D:D3:B5:A4:06:39:AC:AB:CF:3E:CE:A0:BF:CC:64:69:DB:35
Certificate issuer:       /CN=4C7E39342B53D3972022BF5B394E16FA64CCF0C1
Certificate serial:       037A908207ECB2F13ABF036F14C4A4EE84903F80
Authority key identifier: 4C:7E:39:34:2B:53:D3:97:20:22:BF:5B:39:4E:16:FA:64:CC:F0:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/323830343a353039343a363030303a3a2f33362d3336203d3e20323638333937.roa
Signing time:             Wed 24 Jun 2026 01:42:30 +0000
ROA not before:           Wed 24 Jun 2026 01:37:30 +0000
ROA not after:            Wed 23 Jun 2027 01:42:30 +0000
asID:                     268397
IP address blocks:        2804:5094:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.crl
                          rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 04:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:7a:90:82:07:ec:b2:f1:3a:bf:03:6f:14:c4:a4:ee:84:90:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C7E39342B53D3972022BF5B394E16FA64CCF0C1
        Validity
            Not Before: Jun 24 01:37:30 2026 GMT
            Not After : Jun 23 01:42:30 2027 GMT
        Subject: CN=12A98DD3B5A40639ACABCF3ECEA0BFCC6469DB35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d4:e6:d8:91:fd:be:b4:78:87:99:fb:b6:b9:
                    20:1c:98:ce:b7:2b:1c:f2:b4:ee:2d:43:0d:bb:d4:
                    56:4b:95:05:90:03:eb:c7:25:57:9c:d4:b4:9e:4a:
                    21:39:9e:1b:b2:fa:f8:79:79:6e:39:a9:a7:5e:36:
                    c7:cb:e5:4c:ca:fb:4b:48:41:05:4b:7c:e5:19:b4:
                    a7:8e:48:10:03:68:8f:d4:ad:d0:d7:6d:1d:38:dd:
                    71:18:7d:0d:78:19:74:cc:9c:19:64:4c:04:6a:34:
                    4b:4c:31:b5:41:c3:e5:84:e4:ee:2f:1c:d7:ea:1d:
                    b1:39:be:3f:72:bc:b3:2a:24:b5:ce:da:5c:d1:dd:
                    a5:f3:6c:fc:2a:f4:fd:46:4e:bf:20:db:63:44:69:
                    32:02:5a:da:bd:c1:0f:0a:78:0a:bf:32:8c:6d:06:
                    70:66:49:a1:e8:31:55:10:3a:6b:bc:aa:a3:1d:47:
                    17:ad:d3:87:a6:d8:de:02:b5:dd:94:2c:50:c0:c2:
                    c0:90:00:30:81:57:e5:f1:5b:f8:18:a8:e5:2b:d0:
                    8e:2e:75:8c:d1:cb:ce:2b:ce:b1:31:5f:c9:26:8c:
                    1a:81:ff:c9:df:30:db:a1:c1:c7:de:ec:38:43:48:
                    f5:36:07:a1:75:14:61:d3:73:dd:cc:79:80:64:47:
                    cb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A9:8D:D3:B5:A4:06:39:AC:AB:CF:3E:CE:A0:BF:CC:64:69:DB:35
            X509v3 Authority Key Identifier:
                keyid:4C:7E:39:34:2B:53:D3:97:20:22:BF:5B:39:4E:16:FA:64:CC:F0:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/323830343a353039343a363030303a3a2f33362d3336203d3e20323638333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5094:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         81:18:bb:c6:f7:93:00:ec:e7:03:a6:df:d7:97:86:93:3f:ed:
         ca:f4:dc:9a:5b:0c:c5:8e:87:c6:f9:23:db:d2:59:9d:e4:b7:
         de:0c:8a:b4:bb:d1:42:26:51:5a:7f:91:f0:e4:9f:ea:79:13:
         cd:48:6b:fb:e2:d0:d4:5d:7b:d2:f8:a7:14:a1:d1:5d:ba:a8:
         5f:77:7c:e5:a2:49:bc:36:b4:5a:a1:c8:84:e9:82:35:32:78:
         82:7b:79:48:30:a2:2b:7d:bf:d7:7f:09:dc:cb:fc:3f:10:63:
         b6:ff:cf:0d:5f:2c:0a:f4:3f:5d:1f:8f:9a:87:cf:26:00:5f:
         12:43:11:a2:0e:7b:33:e6:d5:30:f5:a2:ed:e4:9a:f8:3f:32:
         cf:ba:a7:34:69:13:7d:76:a4:72:4f:e2:be:5a:9b:a7:6e:f0:
         87:dd:e1:2f:e3:47:06:e3:83:31:67:b9:a2:f2:06:96:90:b9:
         44:7f:85:cb:97:c3:c6:6c:26:ca:74:cc:7f:ae:e4:dd:28:e2:
         1c:65:85:b6:d4:50:ee:d3:e4:a2:3b:c5:48:17:b9:95:44:c4:
         f2:01:c2:c8:9a:5d:66:83:72:38:b3:1f:a8:39:c1:f9:03:0f:
         62:88:7f:23:23:90:81:94:3b:58:24:55:ea:af:32:2d:53:48:
         c1:fc:14:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 14:05:57 2026 by rpki-client