Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/323830343a353039343a613030303a3a2f33352d3335203d3e20323638333937.roa
File:                     323830343a353039343a613030303a3a2f33352d3335203d3e20323638333937.roa (raw, json)
Hash identifier:          kku0AN9dlQLPw5nw9Byh9uNXHtDhk2I94WJSJZsxs3Y=
Subject key identifier:   F7:71:15:F9:EB:AC:4F:D1:ED:B7:6B:65:A1:9D:24:FD:F2:BC:36:08
Certificate issuer:       /CN=4C7E39342B53D3972022BF5B394E16FA64CCF0C1
Certificate serial:       5C68C2DD8D8A9F309397884583B510F0E144A50F
Authority key identifier: 4C:7E:39:34:2B:53:D3:97:20:22:BF:5B:39:4E:16:FA:64:CC:F0:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/323830343a353039343a613030303a3a2f33352d3335203d3e20323638333937.roa
Signing time:             Wed 24 Jun 2026 01:42:28 +0000
ROA not before:           Wed 24 Jun 2026 01:37:28 +0000
ROA not after:            Wed 23 Jun 2027 01:42:28 +0000
asID:                     268397
IP address blocks:        2804:5094:a000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.crl
                          rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 04:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:68:c2:dd:8d:8a:9f:30:93:97:88:45:83:b5:10:f0:e1:44:a5:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C7E39342B53D3972022BF5B394E16FA64CCF0C1
        Validity
            Not Before: Jun 24 01:37:28 2026 GMT
            Not After : Jun 23 01:42:28 2027 GMT
        Subject: CN=F77115F9EBAC4FD1EDB76B65A19D24FDF2BC3608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:43:b6:a5:43:e8:75:c8:2f:ea:f5:b6:03:30:
                    bf:84:bb:29:ea:54:2f:53:42:e4:cf:60:3c:38:54:
                    5b:83:e9:aa:ca:8e:16:71:eb:3d:bd:0a:de:e2:c2:
                    be:e6:22:c0:7c:53:38:85:4e:05:ed:18:5a:bc:0b:
                    7c:27:46:be:11:c8:9a:08:f2:82:58:ce:88:df:b2:
                    55:ea:1f:71:bd:ae:da:0b:59:3b:e1:ca:a7:00:06:
                    b8:82:e8:57:b4:29:7e:a5:88:f3:0f:b4:ec:b4:f2:
                    85:1d:d1:f0:8b:00:17:35:19:ea:ac:65:fc:21:3b:
                    7d:29:fd:7e:49:70:4b:45:32:d6:76:9c:5f:c3:fc:
                    80:fa:58:33:8c:b0:11:ab:1e:09:37:4b:81:29:b8:
                    91:32:f4:36:05:63:9f:51:f3:36:c9:06:f0:97:a5:
                    b0:97:7d:61:ad:f9:b7:11:3d:db:e3:d5:73:3b:3e:
                    09:52:d4:d9:51:b1:eb:26:15:c9:df:47:04:b3:75:
                    76:39:15:84:81:61:ca:82:f1:eb:af:ef:b3:f5:b4:
                    0d:3d:65:3f:05:f6:f9:2c:57:fb:6b:b5:bb:db:91:
                    f0:0d:7f:a4:23:bd:63:8d:3e:2f:82:0d:a4:63:94:
                    2b:66:ab:2c:e8:21:b1:a1:68:e2:10:8c:4f:16:5b:
                    0e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:71:15:F9:EB:AC:4F:D1:ED:B7:6B:65:A1:9D:24:FD:F2:BC:36:08
            X509v3 Authority Key Identifier:
                keyid:4C:7E:39:34:2B:53:D3:97:20:22:BF:5B:39:4E:16:FA:64:CC:F0:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/323830343a353039343a613030303a3a2f33352d3335203d3e20323638333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5094:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         23:29:ad:dc:19:d3:28:f3:02:d1:85:b0:8e:63:29:87:69:45:
         e8:b2:c0:f9:39:bf:e5:35:74:e9:6c:d3:7c:87:07:97:e4:bc:
         b7:a7:e4:31:14:9f:fa:d9:45:94:19:48:64:c4:bc:b8:18:0a:
         a5:9f:24:44:0b:9e:2e:e8:10:56:37:c5:f9:b9:12:9a:01:49:
         41:48:fc:0f:d8:b8:5c:f2:96:b3:23:80:18:d0:d3:8b:8a:94:
         f8:7d:b3:d1:8c:95:f8:1f:a5:d9:53:3b:70:b7:b8:e2:5d:5d:
         f6:3b:b9:8e:b9:57:32:22:92:8c:12:74:d0:ed:56:6a:17:fc:
         67:0e:f8:05:13:91:c5:e9:3a:67:51:a1:b0:d1:12:d2:b0:76:
         42:a1:6e:cf:cc:99:21:85:3b:22:08:2b:2f:9e:8f:45:84:50:
         7c:93:ee:be:89:b3:11:b5:8a:bd:fb:fd:75:1e:fb:bb:d5:62:
         dd:9d:b0:67:99:cd:51:d0:44:98:7b:b5:36:89:fb:7f:5c:7b:
         43:b2:b1:cb:19:4a:c4:aa:50:48:67:b5:2f:3d:12:15:95:43:
         74:32:5d:ba:2a:61:8c:6d:98:d4:f8:07:43:43:dc:8a:43:b4:
         a2:a6:22:61:0c:53:8f:ee:44:de:32:df:5e:78:c5:7c:61:66:
         d2:9a:19:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 14:05:54 2026 by rpki-client