Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/323830343a353039343a633030303a3a2f33342d3334203d3e20323638333937.roa
File:                     323830343a353039343a633030303a3a2f33342d3334203d3e20323638333937.roa (raw, json)
Hash identifier:          FzezTjbYUplOgQQOPEBnXVaa447LfsDOTeBWDRBjZNM=
Subject key identifier:   72:10:CE:A6:4B:F6:45:78:E0:98:45:3E:27:E3:54:2E:D4:C2:99:D8
Certificate issuer:       /CN=4C7E39342B53D3972022BF5B394E16FA64CCF0C1
Certificate serial:       5B4E1B27D9B5E9BFC12BB472B977F46A859C581A
Authority key identifier: 4C:7E:39:34:2B:53:D3:97:20:22:BF:5B:39:4E:16:FA:64:CC:F0:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/323830343a353039343a633030303a3a2f33342d3334203d3e20323638333937.roa
Signing time:             Wed 24 Jun 2026 01:42:28 +0000
ROA not before:           Wed 24 Jun 2026 01:37:28 +0000
ROA not after:            Wed 23 Jun 2027 01:42:28 +0000
asID:                     268397
IP address blocks:        2804:5094:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.crl
                          rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 04:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:4e:1b:27:d9:b5:e9:bf:c1:2b:b4:72:b9:77:f4:6a:85:9c:58:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C7E39342B53D3972022BF5B394E16FA64CCF0C1
        Validity
            Not Before: Jun 24 01:37:28 2026 GMT
            Not After : Jun 23 01:42:28 2027 GMT
        Subject: CN=7210CEA64BF64578E098453E27E3542ED4C299D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1b:be:e6:62:76:20:48:f2:6e:0b:47:88:be:
                    31:53:0b:f0:5c:c1:a6:9e:7d:07:59:79:6a:d5:da:
                    34:f0:af:c4:63:48:a1:cf:bc:7b:f2:d9:49:67:6e:
                    52:38:08:66:ee:34:9c:1d:44:0c:c3:55:91:18:e5:
                    f8:15:cc:81:78:21:9b:69:0f:b6:52:a7:81:bb:59:
                    ef:fc:3a:f8:8a:8d:36:fa:3d:4f:07:18:35:08:fd:
                    5b:dd:77:cf:05:57:fa:04:b8:a1:25:2b:0a:29:e1:
                    d2:57:1a:99:b5:ed:60:18:b5:ce:2b:7c:04:61:75:
                    ef:d2:be:7a:15:22:8a:6e:36:9e:8d:43:63:04:92:
                    54:78:04:62:f5:9a:2e:f6:f8:75:5d:15:1d:4c:99:
                    ce:6d:38:3e:f5:67:00:4c:fa:56:41:3d:99:67:32:
                    64:e2:5f:32:71:73:03:31:68:23:8d:fa:ab:b9:00:
                    86:f9:ae:98:22:9e:34:d6:81:41:86:89:b9:e6:fd:
                    05:eb:a3:4f:9c:2a:c5:ff:bc:76:ed:56:de:9f:9c:
                    83:eb:d6:33:10:10:e7:15:fb:e6:9e:6c:e8:d6:00:
                    bd:e9:1c:e8:60:75:10:ec:c7:5c:78:ea:f6:02:56:
                    31:88:ce:5e:bf:c4:6b:6b:36:d1:cc:45:f4:54:e7:
                    07:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:10:CE:A6:4B:F6:45:78:E0:98:45:3E:27:E3:54:2E:D4:C2:99:D8
            X509v3 Authority Key Identifier:
                keyid:4C:7E:39:34:2B:53:D3:97:20:22:BF:5B:39:4E:16:FA:64:CC:F0:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/323830343a353039343a633030303a3a2f33342d3334203d3e20323638333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5094:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ae:49:d6:8c:18:0e:32:73:32:dd:11:79:2a:e8:f9:a2:b6:ba:
         0c:89:16:cb:7c:95:5f:f1:7f:27:88:c4:90:2a:48:81:0f:bf:
         97:c2:6d:ee:35:9a:ef:de:09:2d:a1:c7:0f:65:a1:8f:8b:62:
         5f:18:5d:23:37:97:f3:8c:6f:31:d1:cd:4d:94:6d:19:28:1d:
         da:78:90:b9:b3:1e:49:22:3a:ae:28:1d:ab:05:19:a1:58:66:
         3f:d0:28:6c:1f:95:e7:59:b7:33:66:0c:bf:8c:16:98:d7:72:
         9c:25:20:ea:fa:c2:5e:63:ea:7f:81:d3:f1:7e:d8:3e:8f:b5:
         d2:76:37:d9:6c:01:12:e7:4c:ba:b8:dc:36:40:78:50:80:22:
         b9:ac:aa:80:0e:14:f0:fe:37:ca:6e:6e:58:e1:b4:63:5a:28:
         23:9a:02:ff:fb:be:13:80:5b:2e:b4:b0:8f:4a:9f:53:98:c3:
         af:14:e3:60:4a:52:37:f2:67:81:9f:4c:94:d3:4f:57:0e:f0:
         af:d7:03:fb:04:ec:52:70:c1:82:f2:54:21:4e:80:77:a9:29:
         b8:66:43:49:a8:b3:91:dc:54:9d:72:71:ca:e7:7e:3c:72:8f:
         bc:2f:99:21:92:58:7e:0c:2a:e0:05:f6:2a:da:c3:e6:c8:af:
         9d:b5:a0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 14:05:56 2026 by rpki-client