Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/323830343a3936633a3a2f33322d3332203d3e20323633303835.roa
File:                     323830343a3936633a3a2f33322d3332203d3e20323633303835.roa (raw, json)
Hash identifier:          RmbLd+MWMjDCBPbBIxzVGkK3sX4UFBaN1OyAuvLMl58=
Subject key identifier:   D7:4D:31:5D:11:60:0C:F9:5D:0F:80:7B:1C:0B:21:69:8F:90:0A:36
Certificate issuer:       /CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822
Certificate serial:       51F167D4654A9A5C7DF0A64E8EDEA618C40A3B6A
Authority key identifier: 1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/323830343a3936633a3a2f33322d3332203d3e20323633303835.roa
Signing time:             Sun 14 Jun 2026 18:53:26 +0000
ROA not before:           Sun 14 Jun 2026 18:48:26 +0000
ROA not after:            Sun 13 Jun 2027 18:53:26 +0000
asID:                     263085
IP address blocks:        2804:96c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl
                          rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 27 Jun 2026 21:47:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f1:67:d4:65:4a:9a:5c:7d:f0:a6:4e:8e:de:a6:18:c4:0a:3b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822
        Validity
            Not Before: Jun 14 18:48:26 2026 GMT
            Not After : Jun 13 18:53:26 2027 GMT
        Subject: CN=D74D315D11600CF95D0F807B1C0B21698F900A36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b6:96:d0:e8:57:e0:16:68:2c:b8:37:71:a1:
                    18:e4:f3:07:fe:3f:75:8b:c6:b1:38:3d:72:f9:f4:
                    02:ee:95:5e:23:21:68:36:51:c5:45:fd:00:d1:22:
                    4d:fa:85:07:10:bd:87:dd:db:83:75:94:05:77:66:
                    94:db:c1:a8:87:cc:b0:c3:1d:73:35:a1:78:69:b3:
                    dc:45:51:c9:94:c2:c2:c8:d8:03:e5:86:84:60:e7:
                    c7:0b:d6:c5:02:8c:b7:96:52:62:57:94:2d:83:1f:
                    eb:35:58:db:cf:d3:bc:74:6e:21:9d:d1:42:dd:a1:
                    57:ec:4c:bc:38:60:28:a4:65:ce:89:72:38:08:a4:
                    8b:0d:47:6f:23:c8:c5:d4:44:e7:e4:9b:17:fd:56:
                    1b:5d:11:f1:a8:a7:19:10:40:4a:54:30:b3:85:ff:
                    e9:43:d0:56:b7:e8:73:37:9a:45:84:47:e6:70:67:
                    4d:11:53:33:d3:54:3d:24:6e:80:a7:a3:ee:c1:bb:
                    18:07:c4:87:3f:e3:57:d9:0a:06:41:a0:2c:37:fa:
                    03:b5:69:24:3d:72:15:36:b0:d5:d7:19:e2:63:00:
                    19:15:00:65:1f:0f:11:94:97:c8:15:5e:86:8f:5a:
                    63:8c:5f:d6:b0:40:e2:8b:fb:82:c8:3e:4a:16:7a:
                    70:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:4D:31:5D:11:60:0C:F9:5D:0F:80:7B:1C:0B:21:69:8F:90:0A:36
            X509v3 Authority Key Identifier:
                keyid:1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/323830343a3936633a3a2f33322d3332203d3e20323633303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:96c::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:3b:68:e8:a3:c1:84:5d:c8:c5:af:27:6f:b9:af:62:d7:82:
         45:7c:78:0c:df:08:f3:eb:44:52:44:36:e1:cc:7f:ed:9f:14:
         46:08:77:48:79:99:0a:30:b6:51:58:87:da:ba:1f:83:4f:75:
         e6:ff:8f:c3:dc:e3:2e:29:78:e3:e4:64:65:df:bb:2d:6d:8c:
         21:6b:75:34:29:14:fa:dd:03:1d:03:3b:31:6c:a0:89:f2:ce:
         e8:45:67:f5:a5:a7:8b:89:a8:7b:40:18:33:65:15:76:97:c4:
         04:70:26:5d:5d:64:26:fd:a0:11:41:d9:c1:ee:9e:6a:a5:20:
         3c:15:0a:c8:94:ce:3f:a8:41:05:8d:e1:cd:fe:64:49:01:7e:
         7a:cf:2e:de:5a:03:db:be:1c:8f:7e:2a:5d:fd:ca:b3:f9:2b:
         39:86:e2:99:c6:b0:03:bb:a9:95:c9:fc:7f:e9:36:06:51:8d:
         f7:fa:01:4d:49:1d:58:61:24:c8:2a:a4:c9:96:13:4c:e0:2f:
         19:1e:ea:44:f1:c1:e1:ba:99:25:86:07:9c:6c:ee:88:7c:42:
         00:fc:8c:0c:7e:9c:33:26:b5:c4:3c:51:f9:f5:3f:44:e4:51:
         c3:27:f3:59:e8:43:60:60:24:a1:af:95:4d:5d:cd:ba:fa:d6:
         97:54:6e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:15:54 2026 by rpki-client