Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/323830343a353039343a653030303a3a2f33352d3335203d3e20323638333937.roa
File:                     323830343a353039343a653030303a3a2f33352d3335203d3e20323638333937.roa (raw, json)
Hash identifier:          O6CSPbJJIX/r7O8dYW3FY3OSPYG2dsfWImk86MrF/WE=
Subject key identifier:   B8:A3:DD:79:A9:7C:6E:F4:DF:85:87:69:16:43:67:B8:15:21:E8:07
Certificate issuer:       /CN=4C7E39342B53D3972022BF5B394E16FA64CCF0C1
Certificate serial:       5D216689A07B71D76F0BE3AB58C6ABED217A61F6
Authority key identifier: 4C:7E:39:34:2B:53:D3:97:20:22:BF:5B:39:4E:16:FA:64:CC:F0:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/323830343a353039343a653030303a3a2f33352d3335203d3e20323638333937.roa
Signing time:             Wed 24 Jun 2026 01:42:26 +0000
ROA not before:           Wed 24 Jun 2026 01:37:26 +0000
ROA not after:            Wed 23 Jun 2027 01:42:26 +0000
asID:                     268397
IP address blocks:        2804:5094:e000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.crl
                          rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 04:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:21:66:89:a0:7b:71:d7:6f:0b:e3:ab:58:c6:ab:ed:21:7a:61:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C7E39342B53D3972022BF5B394E16FA64CCF0C1
        Validity
            Not Before: Jun 24 01:37:26 2026 GMT
            Not After : Jun 23 01:42:26 2027 GMT
        Subject: CN=B8A3DD79A97C6EF4DF858769164367B81521E807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9e:6b:59:62:c1:79:e9:e9:63:fd:c2:4a:93:
                    57:07:24:ae:35:9b:dc:4c:84:4b:07:c4:f2:33:1d:
                    ce:43:6b:ca:d6:23:4f:e7:bc:67:e4:23:30:2d:66:
                    97:25:75:49:40:d7:3b:67:5d:da:81:31:be:97:3a:
                    8d:f6:72:96:1c:2f:e5:1c:58:3b:9b:76:bd:82:a1:
                    81:84:2a:74:7b:f6:00:ee:72:6b:1b:84:ba:c2:a4:
                    a3:00:ff:e6:3c:bb:98:b1:40:94:fc:0f:7e:0e:b4:
                    be:98:e7:e0:e5:d8:19:1f:13:d6:1a:b5:50:9a:35:
                    65:67:bd:b4:1f:c3:2d:b2:e0:da:3e:c7:dd:1c:9e:
                    f3:93:0e:10:7e:c2:e1:37:c7:43:90:72:bc:03:3b:
                    bc:07:a2:b1:33:f6:e2:cf:05:e5:76:52:3c:e0:2b:
                    19:9a:52:48:63:d7:3e:66:40:80:50:65:67:95:41:
                    73:1e:a7:e3:cc:61:78:03:64:47:a4:3b:5c:32:8a:
                    da:f6:e7:f9:01:8c:46:0c:ca:5d:e0:9c:81:0d:02:
                    19:42:96:11:dd:fe:98:6b:cd:c2:b4:7f:96:13:ff:
                    79:e2:b2:1e:3a:0c:df:4e:b0:39:0b:de:89:73:aa:
                    fc:3c:7c:04:c7:70:8a:eb:b8:65:52:00:a9:e0:38:
                    0f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A3:DD:79:A9:7C:6E:F4:DF:85:87:69:16:43:67:B8:15:21:E8:07
            X509v3 Authority Key Identifier:
                keyid:4C:7E:39:34:2B:53:D3:97:20:22:BF:5B:39:4E:16:FA:64:CC:F0:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/323830343a353039343a653030303a3a2f33352d3335203d3e20323638333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5094:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         6c:cc:34:7a:ae:67:44:7c:c0:db:cf:45:96:fe:cf:6e:d5:22:
         eb:c8:67:30:fb:0e:df:52:d2:18:f5:81:32:35:93:96:b9:61:
         7e:d1:e3:7d:13:72:75:2f:9e:3a:84:4a:0b:28:1d:1e:bd:0a:
         17:5e:41:32:7e:60:e7:0b:32:ed:a0:14:bd:2e:4b:a6:7d:f5:
         b8:fa:a2:25:b8:dd:a1:0c:fd:7e:c7:90:a6:3e:93:f4:80:ae:
         9c:de:7e:7b:f1:0d:66:f7:ae:6c:3e:b7:5b:5d:1a:b3:0c:f1:
         cd:ef:be:1b:2d:8d:d5:0e:ba:48:76:cd:f9:03:a5:ab:96:26:
         30:a0:93:58:7d:97:f9:b0:45:5e:bb:8f:ae:7f:31:82:29:b5:
         52:d8:4e:34:ad:81:06:6c:6a:14:37:1b:4b:1b:04:91:99:bc:
         11:79:fb:ca:8a:2c:fd:55:68:66:49:2b:fe:94:22:bf:19:eb:
         cc:84:62:3e:20:f8:a1:40:69:a7:c6:82:1b:7d:13:d0:1a:a2:
         0b:8f:f8:39:ab:11:5a:70:44:98:40:e8:f8:df:10:6d:fb:cd:
         d6:4d:ce:0f:2e:53:36:2e:0c:75:b5:5d:84:66:cb:33:29:07:
         72:3b:11:c1:63:6d:46:6c:58:cf:5a:7d:04:0f:e6:15:6f:db:
         aa:75:6f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 14:05:56 2026 by rpki-client