Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/1/323830343a356436343a3a2f33322d313238203d3e20323638393639.roa
File:                     323830343a356436343a3a2f33322d313238203d3e20323638393639.roa (raw, json)
Hash identifier:          oP6T/7Hrk26V/kcrKWz8fMX9uaEt6Q6RQ6n3dJjrPi8=
Subject key identifier:   1C:BC:6B:55:A6:4C:34:63:AD:C1:14:DB:4E:BD:FB:65:2B:FA:2D:8B
Certificate issuer:       /CN=E5121D713C732A6B45D5702FCDFD545FD0E1B866
Certificate serial:       6FB1F83E1947B7CB44C67BF1DB87118BA4638E3A
Authority key identifier: E5:12:1D:71:3C:73:2A:6B:45:D5:70:2F:CD:FD:54:5F:D0:E1:B8:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5121D713C732A6B45D5702FCDFD545FD0E1B866.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/1/323830343a356436343a3a2f33322d313238203d3e20323638393639.roa
Signing time:             Wed 17 Jun 2026 19:42:22 +0000
ROA not before:           Wed 17 Jun 2026 19:37:22 +0000
ROA not after:            Wed 16 Jun 2027 19:42:22 +0000
asID:                     268969
IP address blocks:        2804:5d64::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/1/E5121D713C732A6B45D5702FCDFD545FD0E1B866.crl
                          rsync://rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/1/E5121D713C732A6B45D5702FCDFD545FD0E1B866.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5121D713C732A6B45D5702FCDFD545FD0E1B866.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 03:49:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b1:f8:3e:19:47:b7:cb:44:c6:7b:f1:db:87:11:8b:a4:63:8e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5121D713C732A6B45D5702FCDFD545FD0E1B866
        Validity
            Not Before: Jun 17 19:37:22 2026 GMT
            Not After : Jun 16 19:42:22 2027 GMT
        Subject: CN=1CBC6B55A64C3463ADC114DB4EBDFB652BFA2D8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:28:c2:6c:1a:75:73:67:3b:74:1d:5e:f3:1d:
                    81:43:db:72:08:92:93:7d:05:45:55:98:a3:82:69:
                    a7:11:0d:aa:35:09:4e:4e:8a:4c:33:4e:26:47:25:
                    c2:5e:d9:f8:74:65:3a:5a:46:6e:df:22:69:9b:cf:
                    4b:6c:e1:0b:f8:f9:46:59:13:56:dc:34:65:8d:ee:
                    c7:f3:f6:be:27:f9:b1:07:7b:43:fa:12:98:51:4c:
                    9b:fd:07:8e:95:e5:b5:33:64:ac:7d:7d:57:9a:cb:
                    ab:4f:13:73:87:f5:35:b5:c3:bd:df:b4:d6:64:e5:
                    7d:af:14:ee:6b:23:de:ec:b3:41:d6:b3:4f:07:88:
                    7f:5c:89:ea:55:33:04:85:91:98:5a:ad:ec:f5:3f:
                    a7:0f:f0:f1:d9:a5:73:0c:f1:a1:1b:49:17:78:68:
                    fa:47:24:56:b7:9d:d7:dc:99:34:15:f5:a1:35:16:
                    e1:fe:e7:05:74:85:be:55:a2:07:a3:ca:5e:a8:64:
                    46:ed:29:1b:e0:d3:77:7a:e7:4a:2b:3f:35:48:43:
                    b6:71:d5:86:66:01:40:e9:c2:50:86:2b:05:93:66:
                    c1:ff:93:e7:d1:58:71:18:a6:68:5e:72:52:db:be:
                    bd:1c:c1:be:9e:5b:20:bd:e7:e6:39:f3:c6:f1:02:
                    21:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:BC:6B:55:A6:4C:34:63:AD:C1:14:DB:4E:BD:FB:65:2B:FA:2D:8B
            X509v3 Authority Key Identifier:
                keyid:E5:12:1D:71:3C:73:2A:6B:45:D5:70:2F:CD:FD:54:5F:D0:E1:B8:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/1/E5121D713C732A6B45D5702FCDFD545FD0E1B866.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5121D713C732A6B45D5702FCDFD545FD0E1B866.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/1/323830343a356436343a3a2f33322d313238203d3e20323638393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5d64::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:43:8e:1e:1d:98:2d:87:9e:cb:58:3f:9c:7c:80:b1:ab:fc:
         96:b2:2f:f3:33:3b:08:38:da:96:a9:9f:48:e4:56:48:70:73:
         39:48:42:3e:32:a8:e3:ff:48:37:59:03:5f:c3:91:b3:bd:4a:
         73:20:19:ef:28:7d:16:3a:22:6d:c5:73:a9:7b:31:1d:56:12:
         24:b7:8c:c5:07:30:61:a2:12:e0:66:0b:0f:a7:e0:db:cd:f3:
         f6:78:bf:c1:04:be:e9:83:8e:66:99:bd:ca:ba:3c:e5:22:3f:
         04:08:fd:14:80:5d:e9:2f:67:ed:3f:4e:8e:16:1c:bc:f1:00:
         c0:b9:7d:d0:d8:03:18:c6:b0:be:e4:23:26:54:96:09:55:20:
         ef:a5:94:46:82:0c:c2:4e:d0:cd:8b:63:af:1b:05:43:a1:62:
         ff:23:14:1d:8e:1b:c4:57:2b:8c:5d:9b:b1:8b:7c:83:2d:96:
         2a:48:56:55:ea:b3:76:16:cc:d2:0a:03:5c:bd:8c:b1:23:42:
         a0:7d:11:9d:ea:7d:b4:f9:2d:92:6b:ff:2b:96:69:32:b1:87:
         0e:99:68:ab:dc:72:27:24:46:b2:eb:c7:d6:b6:63:d2:b0:de:
         1b:8d:28:28:e7:4f:c2:af:9e:14:11:3b:51:5b:bc:bf:b9:90:
         c7:e4:c7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:08:20 2026 by rpki-client