Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6u9ae7KqLENSrmLxuk8fFdptnu3BQaxz5SbvPphp7knk/0/323830343a326463633a653030303a3a2f33352d3335203d3e20323635333034.roa
File:                     323830343a326463633a653030303a3a2f33352d3335203d3e20323635333034.roa (raw, json)
Hash identifier:          YW5VzZMsYW81+0HNALoN4nVRJey5lVgQS/9y/JlFdjA=
Subject key identifier:   B5:5D:6A:B2:F3:47:0D:3D:1B:63:0D:E0:4C:49:8E:72:83:6C:2A:EA
Certificate issuer:       /CN=E6EA9F2D03316C3CC2047A1B526CEB471AA3827E
Certificate serial:       643E98AA856DDEDAC671271195C38A893D8ADBA2
Authority key identifier: E6:EA:9F:2D:03:31:6C:3C:C2:04:7A:1B:52:6C:EB:47:1A:A3:82:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6EA9F2D03316C3CC2047A1B526CEB471AA3827E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6u9ae7KqLENSrmLxuk8fFdptnu3BQaxz5SbvPphp7knk/0/323830343a326463633a653030303a3a2f33352d3335203d3e20323635333034.roa
Signing time:             Sat 25 Apr 2026 13:44:13 +0000
ROA not before:           Sat 25 Apr 2026 13:39:13 +0000
ROA not after:            Sat 24 Apr 2027 13:44:13 +0000
asID:                     265304
IP address blocks:        2804:2dcc:e000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6u9ae7KqLENSrmLxuk8fFdptnu3BQaxz5SbvPphp7knk/0/E6EA9F2D03316C3CC2047A1B526CEB471AA3827E.crl
                          rsync://rpki-repo.registro.br/repo/6u9ae7KqLENSrmLxuk8fFdptnu3BQaxz5SbvPphp7knk/0/E6EA9F2D03316C3CC2047A1B526CEB471AA3827E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6EA9F2D03316C3CC2047A1B526CEB471AA3827E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 15:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:3e:98:aa:85:6d:de:da:c6:71:27:11:95:c3:8a:89:3d:8a:db:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6EA9F2D03316C3CC2047A1B526CEB471AA3827E
        Validity
            Not Before: Apr 25 13:39:13 2026 GMT
            Not After : Apr 24 13:44:13 2027 GMT
        Subject: CN=B55D6AB2F3470D3D1B630DE04C498E72836C2AEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2d:27:bc:1c:1f:80:4a:09:a5:ee:06:e4:77:
                    10:62:75:66:9e:7e:dd:49:f6:7f:c6:0e:9f:75:94:
                    19:c2:85:2e:1a:2f:17:4c:08:07:45:35:44:c7:3f:
                    af:e1:42:c1:de:af:36:72:3d:bb:a5:15:32:1f:c5:
                    de:18:31:69:6d:cb:ce:fa:c6:46:c1:9f:9f:6e:ac:
                    9e:a0:cb:e6:6a:4f:18:53:1b:90:28:40:ed:1b:e0:
                    34:b7:9b:20:7c:d9:e0:bd:81:82:e0:f0:a7:84:1e:
                    90:dd:18:82:5f:bd:1d:65:89:bb:e6:1b:f0:fd:88:
                    90:81:a8:4b:9f:02:64:44:1c:4b:b2:22:b7:53:f2:
                    49:e5:1b:b6:81:94:7d:bc:7d:c6:44:57:3a:ed:af:
                    41:8c:09:ec:e6:b4:93:66:f4:b9:ea:05:99:12:15:
                    2b:12:f2:e0:91:6e:7f:bc:f5:3c:cb:37:ae:8f:c6:
                    3c:cc:df:85:21:3f:2c:68:f4:15:f3:7b:8a:33:b7:
                    15:82:12:bb:66:b7:a6:8b:20:c6:52:9c:76:4e:a7:
                    b5:34:5a:16:fa:5f:7c:f2:3a:dd:fa:0f:79:20:25:
                    64:9f:eb:b9:93:ee:5e:2b:59:d8:1f:e0:37:e1:ee:
                    02:2b:16:d3:64:25:18:d8:c4:f0:30:e4:31:3a:5e:
                    b5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:5D:6A:B2:F3:47:0D:3D:1B:63:0D:E0:4C:49:8E:72:83:6C:2A:EA
            X509v3 Authority Key Identifier:
                keyid:E6:EA:9F:2D:03:31:6C:3C:C2:04:7A:1B:52:6C:EB:47:1A:A3:82:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6u9ae7KqLENSrmLxuk8fFdptnu3BQaxz5SbvPphp7knk/0/E6EA9F2D03316C3CC2047A1B526CEB471AA3827E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6EA9F2D03316C3CC2047A1B526CEB471AA3827E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6u9ae7KqLENSrmLxuk8fFdptnu3BQaxz5SbvPphp7knk/0/323830343a326463633a653030303a3a2f33352d3335203d3e20323635333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2dcc:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         81:00:d2:59:e8:f8:0e:4c:1c:d0:f8:b1:58:46:32:6a:62:e8:
         33:c2:3a:2e:16:00:ff:0e:9a:2e:dc:c8:30:fa:0e:21:66:93:
         fe:d6:94:0c:c2:9d:47:fb:dc:46:9c:63:33:b6:a7:28:36:fe:
         be:ab:b6:de:1d:c2:b5:f6:bb:7a:e3:30:48:9b:8f:f8:54:2f:
         85:d8:ca:75:ec:11:72:b0:ac:9d:3e:b6:9e:ec:95:ff:d2:a0:
         a9:f3:06:0e:78:de:6e:50:72:76:8f:12:ca:b9:f1:39:e9:07:
         df:c2:e2:9a:84:2d:2b:fa:3a:5a:e0:f7:8a:be:6e:3f:16:8d:
         74:04:07:da:90:6e:96:10:d8:ed:3a:56:3d:85:52:51:56:5d:
         a0:57:90:b3:81:44:0c:21:5c:09:c3:0d:d8:3b:ea:9c:fe:1c:
         1d:1c:b4:a5:d9:54:29:50:e1:20:49:0a:6f:1e:07:7c:7f:57:
         8c:ed:04:ef:70:24:e6:b2:47:12:62:03:6c:79:61:63:b3:8c:
         54:f0:ad:28:fd:fd:12:a6:68:91:87:bd:7d:7b:19:08:7f:67:
         5a:7b:0e:c1:e5:16:29:b3:6b:7e:ae:09:8a:af:b7:fc:44:29:
         fe:3d:c1:7d:da:d2:90:a5:47:59:18:f6:5c:8c:4c:6b:9e:45:
         67:1d:e2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:07:06 2026 by rpki-client