Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/323830343a316238303a3266653a3a2f34382d3438203d3e20323632393933.roa
File:                     323830343a316238303a3266653a3a2f34382d3438203d3e20323632393933.roa (raw, json)
Hash identifier:          lF2i40RvAfjELiTJtBor1AvgM/APny+LEqWF9mEDyIY=
Subject key identifier:   B0:2B:B3:38:F2:BA:C4:9B:AF:AD:A3:47:6A:7F:1D:51:12:2B:19:64
Certificate issuer:       /CN=21F41A1DE6B061FF1919072AF54DAF54380B0F27
Certificate serial:       3B9A24B1EB32B36EB6AB5BEE9911E3187A7F9D18
Authority key identifier: 21:F4:1A:1D:E6:B0:61:FF:19:19:07:2A:F5:4D:AF:54:38:0B:0F:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/323830343a316238303a3266653a3a2f34382d3438203d3e20323632393933.roa
Signing time:             Wed 24 Jun 2026 12:20:39 +0000
ROA not before:           Wed 24 Jun 2026 12:15:39 +0000
ROA not after:            Wed 23 Jun 2027 12:20:39 +0000
asID:                     262993
IP address blocks:        2804:1b80:2fe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl
                          rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 11:24:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:9a:24:b1:eb:32:b3:6e:b6:ab:5b:ee:99:11:e3:18:7a:7f:9d:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F41A1DE6B061FF1919072AF54DAF54380B0F27
        Validity
            Not Before: Jun 24 12:15:39 2026 GMT
            Not After : Jun 23 12:20:39 2027 GMT
        Subject: CN=B02BB338F2BAC49BAFADA3476A7F1D51122B1964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2f:87:1f:12:5f:27:6c:f1:c1:8b:97:d0:b2:
                    f9:c7:ed:ef:b8:f2:be:f9:68:b3:d8:cf:64:19:bb:
                    df:b0:4c:92:dd:6d:ed:f0:8b:d3:83:94:99:5e:34:
                    aa:9d:8d:90:0f:dd:3f:f5:62:70:bc:40:4c:cb:b9:
                    be:a8:68:e1:70:18:ca:3f:5b:7f:48:37:cc:c5:85:
                    cf:96:12:af:82:ce:36:79:3c:28:cd:44:a6:04:70:
                    21:38:97:60:ef:9d:c1:68:c9:d5:9e:29:ff:7b:07:
                    12:de:a2:73:bc:0b:f2:c4:92:9a:4a:bc:86:76:35:
                    6d:f7:9a:a6:9b:48:6c:5a:d9:b8:6d:c6:8a:bb:da:
                    03:98:50:1a:50:66:39:49:db:17:9b:ba:50:4e:ee:
                    10:93:7e:1a:c1:23:43:84:58:49:13:a9:5d:56:5b:
                    9c:9c:26:4c:39:c6:4e:6f:35:39:4a:07:34:b3:09:
                    02:a6:aa:5e:0f:ae:21:a4:7c:de:0d:29:44:b0:19:
                    69:df:37:9b:98:89:db:66:2e:cd:e1:f7:7a:1a:82:
                    8b:29:8b:b4:a8:0b:f6:9d:c9:b4:36:4d:06:77:c1:
                    08:5a:ab:0d:f6:96:c6:82:87:93:41:d7:e5:9f:28:
                    4b:06:ce:24:95:3a:27:eb:0a:d3:aa:f4:18:f3:36:
                    60:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2B:B3:38:F2:BA:C4:9B:AF:AD:A3:47:6A:7F:1D:51:12:2B:19:64
            X509v3 Authority Key Identifier:
                keyid:21:F4:1A:1D:E6:B0:61:FF:19:19:07:2A:F5:4D:AF:54:38:0B:0F:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/323830343a316238303a3266653a3a2f34382d3438203d3e20323632393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b80:2fe::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:a9:a7:dc:cd:36:87:0b:e4:46:b2:47:0e:69:4c:07:8b:f4:
         b2:65:44:6d:2d:bc:5b:75:f8:8e:90:5c:7c:5c:44:c5:75:d0:
         42:33:5e:5a:c4:37:f8:cd:8f:d3:23:d3:99:a6:b2:60:3a:2c:
         5a:6c:bb:5d:07:15:a1:87:79:79:b2:6d:cc:9d:99:7e:c9:18:
         a8:7a:7d:6d:17:f2:d3:6d:d7:c3:dc:ae:1c:2d:04:be:4c:d0:
         95:15:10:a9:23:94:18:b9:89:b0:42:69:70:6b:0e:da:af:db:
         a5:c4:db:33:b6:b4:0e:2e:8c:08:4f:95:de:e9:2b:39:3c:7e:
         18:32:c5:ef:af:50:7b:9f:63:74:66:1d:da:5f:6d:b1:89:34:
         e6:b2:6d:52:1e:9f:6c:7d:64:4b:37:60:23:85:27:cd:14:7e:
         0f:f6:c2:fe:7c:47:84:2f:f8:75:7e:e5:9b:c7:88:f0:1f:8f:
         b9:06:07:98:4a:69:bc:01:0d:91:ff:c3:df:4c:4f:ff:15:4a:
         01:65:29:2d:15:ed:fb:24:ee:55:64:13:03:db:cd:39:98:03:
         5e:3e:45:19:f1:74:e0:fd:c8:5b:1e:6b:f7:6f:9c:70:1b:f6:
         2f:f0:79:ab:93:0c:3e:ee:51:df:64:4d:9f:f5:92:eb:95:07:
         d1:72:bf:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:17:11 2026 by rpki-client