Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a3163313a3a2f34382d3438203d3e20323637313231.roa
File:                     323830343a343837303a3163313a3a2f34382d3438203d3e20323637313231.roa (raw, json)
Hash identifier:          k75dLDFsZMLa4b3KgnId5Z6mW2wY5/+paKUCIrTDNGI=
Subject key identifier:   5B:8A:03:A7:E8:36:CE:F4:DB:8F:F9:2A:01:50:CC:2E:C3:E1:D2:FA
Certificate issuer:       /CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
Certificate serial:       3182E2F84F10050E10F7F2BCE1FB17CDF52AD063
Authority key identifier: 59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a3163313a3a2f34382d3438203d3e20323637313231.roa
Signing time:             Mon 15 Jun 2026 19:00:01 +0000
ROA not before:           Mon 15 Jun 2026 18:55:01 +0000
ROA not after:            Mon 14 Jun 2027 19:00:01 +0000
asID:                     267121
IP address blocks:        2804:4870:1c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl
                          rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:82:e2:f8:4f:10:05:0e:10:f7:f2:bc:e1:fb:17:cd:f5:2a:d0:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
        Validity
            Not Before: Jun 15 18:55:01 2026 GMT
            Not After : Jun 14 19:00:01 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:3b:40:53:58:c1:1c:d1:75:b7:de:be:e2:87:
                    d9:1a:1b:0c:3d:46:31:7a:04:6d:63:bf:3a:df:d9:
                    91:72:e7:4b:54:f7:ed:e7:6e:ca:b9:92:ad:25:1a:
                    75:dc:66:cd:71:fc:cf:90:d3:30:aa:0a:81:e6:7f:
                    fd:9d:22:eb:9f:a2:51:53:e9:56:eb:51:27:34:20:
                    02:44:cb:bf:5f:1a:3e:a3:f4:d0:be:0f:a7:1b:2e:
                    84:24:bb:c4:4c:80:7f:1f:a7:73:7d:71:59:d6:9d:
                    ef:9d:25:09:c7:3d:fc:8c:de:4c:99:a4:d0:29:fa:
                    4f:00:0b:5d:70:38:ca:9e:d2:9d:b6:ee:82:75:a1:
                    f0:d5:97:a0:d5:e8:ab:49:5c:42:ce:93:17:54:fe:
                    f0:86:82:33:fd:6e:50:35:fe:8f:47:0d:bb:5a:9d:
                    b0:7c:c7:eb:2f:b3:9e:84:97:0c:97:b4:5e:80:5f:
                    c1:d3:21:9c:a1:d3:70:85:34:50:3e:b1:80:e1:81:
                    55:8f:fb:44:b2:61:46:cf:26:93:8a:ec:d1:18:de:
                    00:81:f9:4b:09:c9:d1:27:e6:f9:c0:cc:24:6b:59:
                    5d:48:1c:12:61:ae:91:f7:62:e5:55:a9:61:ee:ba:
                    47:b4:0e:80:3d:f2:af:99:8f:ff:f3:c5:ab:bb:b2:
                    76:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8A:03:A7:E8:36:CE:F4:DB:8F:F9:2A:01:50:CC:2E:C3:E1:D2:FA
            X509v3 Authority Key Identifier:
                keyid:59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a3163313a3a2f34382d3438203d3e20323637313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4870:1c1::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:c1:5b:25:83:0d:5f:c5:91:c1:03:be:f2:f6:fa:9c:76:42:
         38:15:c8:99:f8:1c:22:ed:8a:45:de:58:b8:66:33:b6:50:47:
         58:49:8e:ab:de:df:41:f9:b4:ef:72:5e:c5:c3:8b:fc:80:ce:
         db:f5:dd:5a:66:c7:49:fe:c8:b1:52:05:c2:87:7d:b7:c7:53:
         89:99:b5:79:34:2c:c7:e7:86:97:ee:2d:56:7b:14:72:4c:c8:
         2c:5f:90:fd:78:a4:55:db:8a:64:b0:63:8b:aa:85:05:57:1d:
         c8:65:bb:19:bd:77:08:d2:6e:fb:52:6b:4c:e1:d7:14:51:94:
         b7:45:e3:28:3a:de:1f:f9:a5:90:5f:f5:42:0c:4d:9c:2a:8b:
         c4:04:28:e0:ac:26:18:33:03:97:f4:be:31:0f:50:29:2c:7a:
         21:46:79:d7:ca:db:dd:f1:7a:c8:5f:f0:b5:c1:ae:76:01:15:
         2c:30:87:0b:37:88:8a:7d:a2:81:f3:f4:50:e4:9e:9d:71:6f:
         4c:ec:0a:c0:8c:12:7f:3b:8d:1b:93:cb:5b:9b:b0:9d:14:08:
         2c:9b:cc:37:54:7b:e4:6c:a5:84:ca:bc:2d:a4:c9:c9:a0:39:
         a6:e3:44:71:78:2e:b2:83:d0:14:d4:b9:ff:f0:25:ef:93:5f:
         97:9f:1d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 23:15:03 2026 by rpki-client