Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6prRdUJvEA9Z524owpWjrUZedPUF95co3EoZqyUEAZjd/0/323830343a333239303a3a2f33322d3438203d3e20323635303835.roa
File:                     323830343a333239303a3a2f33322d3438203d3e20323635303835.roa (raw, json)
Hash identifier:          O0XSLGz4947RtyKy3wCoGpQZYwyp2NfW5AaQefzURSY=
Subject key identifier:   1D:59:DB:90:B3:E0:F6:74:1B:D0:A3:6D:EE:26:04:4B:38:45:6D:66
Certificate issuer:       /CN=4317FEC50750512FFE2CC00A12FDF807B0317F66
Certificate serial:       6A2E0042BDAD6D769629F3863FD28BCC8E79153D
Authority key identifier: 43:17:FE:C5:07:50:51:2F:FE:2C:C0:0A:12:FD:F8:07:B0:31:7F:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4317FEC50750512FFE2CC00A12FDF807B0317F66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6prRdUJvEA9Z524owpWjrUZedPUF95co3EoZqyUEAZjd/0/323830343a333239303a3a2f33322d3438203d3e20323635303835.roa
Signing time:             Mon 04 May 2026 20:02:25 +0000
ROA not before:           Mon 04 May 2026 19:57:25 +0000
ROA not after:            Mon 03 May 2027 20:02:25 +0000
asID:                     265085
IP address blocks:        2804:3290::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6prRdUJvEA9Z524owpWjrUZedPUF95co3EoZqyUEAZjd/0/4317FEC50750512FFE2CC00A12FDF807B0317F66.crl
                          rsync://rpki-repo.registro.br/repo/6prRdUJvEA9Z524owpWjrUZedPUF95co3EoZqyUEAZjd/0/4317FEC50750512FFE2CC00A12FDF807B0317F66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4317FEC50750512FFE2CC00A12FDF807B0317F66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 14:16:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:2e:00:42:bd:ad:6d:76:96:29:f3:86:3f:d2:8b:cc:8e:79:15:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4317FEC50750512FFE2CC00A12FDF807B0317F66
        Validity
            Not Before: May  4 19:57:25 2026 GMT
            Not After : May  3 20:02:25 2027 GMT
        Subject: CN=1D59DB90B3E0F6741BD0A36DEE26044B38456D66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6a:40:a7:8e:14:e3:47:f2:f9:6c:f2:de:44:
                    ee:d6:44:4b:ab:ee:9c:0c:cd:de:5a:2d:99:ea:d0:
                    a9:e5:16:4f:59:7a:df:11:ac:d4:c7:43:9b:8b:4f:
                    79:12:a8:86:e9:d1:09:d9:16:be:ec:c5:0f:4c:7a:
                    2a:4b:f0:cc:db:c5:c6:0c:de:42:55:8b:a3:5a:89:
                    19:f2:54:15:2d:28:4b:cc:95:96:b6:00:f1:2d:a6:
                    41:b0:fb:a6:ea:3c:f5:4e:c4:41:08:65:b0:78:71:
                    e6:9a:02:e9:9e:ad:66:d6:a2:8b:ff:fa:ec:75:28:
                    45:1d:bb:e3:94:8c:05:88:4c:29:ba:11:1e:19:e4:
                    3a:45:a2:b6:fd:3d:63:d0:f2:2c:10:6b:ca:70:fc:
                    ba:eb:4e:b9:6c:0d:1a:e6:e0:56:37:6b:9f:01:8c:
                    f0:95:30:b4:7f:7f:2f:e6:06:2f:87:1a:fa:46:32:
                    69:c8:3c:0c:53:1f:06:c1:ed:df:ed:c1:8a:24:e6:
                    51:2e:65:93:b0:3a:68:da:7e:b5:f0:93:85:31:98:
                    cf:c8:7f:04:59:e1:f9:c5:d8:7c:ad:eb:37:55:4f:
                    38:3b:3d:9a:f5:18:bf:87:b6:d7:b8:e4:93:7d:8c:
                    89:3b:aa:58:d9:98:14:6e:74:4a:bd:ff:69:c2:98:
                    68:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:59:DB:90:B3:E0:F6:74:1B:D0:A3:6D:EE:26:04:4B:38:45:6D:66
            X509v3 Authority Key Identifier:
                keyid:43:17:FE:C5:07:50:51:2F:FE:2C:C0:0A:12:FD:F8:07:B0:31:7F:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6prRdUJvEA9Z524owpWjrUZedPUF95co3EoZqyUEAZjd/0/4317FEC50750512FFE2CC00A12FDF807B0317F66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4317FEC50750512FFE2CC00A12FDF807B0317F66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6prRdUJvEA9Z524owpWjrUZedPUF95co3EoZqyUEAZjd/0/323830343a333239303a3a2f33322d3438203d3e20323635303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3290::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:af:42:b2:a5:10:08:07:59:c9:ce:81:df:73:08:6b:92:e6:
         df:37:e7:3a:df:5f:8f:b8:06:70:3f:ed:03:50:0b:e9:c8:f7:
         d5:b1:9e:12:bc:ed:34:a3:7e:5b:00:31:7e:97:a0:0b:d4:8f:
         46:24:d9:0f:06:4f:55:df:2b:4c:ba:0f:95:38:db:7c:00:f8:
         a2:98:62:8c:68:7b:f8:59:2a:52:70:b8:94:4c:0d:17:d2:0d:
         1a:bd:c2:84:4a:f9:1f:f1:42:17:8b:83:8a:85:12:1f:36:eb:
         02:c8:87:b3:15:b1:ca:95:af:b6:33:c1:3b:0c:82:fa:85:02:
         31:16:af:e1:50:a8:52:2d:80:6c:03:1e:4c:d3:64:fa:85:16:
         f8:8b:05:72:db:09:04:b9:29:cf:1f:60:74:10:44:58:7e:6c:
         0c:1f:a3:fb:b3:bb:1f:63:e6:e5:8e:46:9f:69:2d:74:d3:b3:
         dd:88:52:fe:e9:04:e8:fc:d7:ba:5d:04:35:bb:78:0d:d4:42:
         75:8b:57:63:0a:23:58:03:ca:7f:15:d3:04:7d:1a:67:b7:60:
         74:3b:86:2f:d0:42:56:41:28:b8:f1:89:02:42:cc:17:c8:71:
         d7:75:65:e4:f5:8b:fd:60:17:0d:2f:9c:5e:56:8f:9d:0e:72:
         41:7b:e5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:52:38 2026 by rpki-client