Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsKsUNeAbwnhc3JQgUrgXZC9pF7W5dQMkS2ALZaXSSEa/0/323830343a333966303a663030303a3a2f33362d3634203d3e20323636303630.roa
File:                     323830343a333966303a663030303a3a2f33362d3634203d3e20323636303630.roa (raw, json)
Hash identifier:          SqSlXxNvFJYLScMI5U6lFb+tNSeapFSrPtFt6vjNzdo=
Subject key identifier:   3E:C5:B3:BF:E2:91:A8:90:1B:79:32:25:34:B4:09:42:AA:B4:BB:D5
Certificate issuer:       /CN=40EA943B9928A2416D417FB39A392494904FD334
Certificate serial:       2BCAC056DDD31FC91D3F082AF5875D67A28DD8A2
Authority key identifier: 40:EA:94:3B:99:28:A2:41:6D:41:7F:B3:9A:39:24:94:90:4F:D3:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40EA943B9928A2416D417FB39A392494904FD334.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsKsUNeAbwnhc3JQgUrgXZC9pF7W5dQMkS2ALZaXSSEa/0/323830343a333966303a663030303a3a2f33362d3634203d3e20323636303630.roa
Signing time:             Thu 16 Jul 2026 18:32:33 +0000
ROA not before:           Thu 16 Jul 2026 18:27:33 +0000
ROA not after:            Thu 15 Jul 2027 18:32:33 +0000
asID:                     266060
IP address blocks:        2804:39f0:f000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AsKsUNeAbwnhc3JQgUrgXZC9pF7W5dQMkS2ALZaXSSEa/0/40EA943B9928A2416D417FB39A392494904FD334.crl
                          rsync://rpki-repo.registro.br/repo/AsKsUNeAbwnhc3JQgUrgXZC9pF7W5dQMkS2ALZaXSSEa/0/40EA943B9928A2416D417FB39A392494904FD334.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40EA943B9928A2416D417FB39A392494904FD334.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 13:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ca:c0:56:dd:d3:1f:c9:1d:3f:08:2a:f5:87:5d:67:a2:8d:d8:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40EA943B9928A2416D417FB39A392494904FD334
        Validity
            Not Before: Jul 16 18:27:33 2026 GMT
            Not After : Jul 15 18:32:33 2027 GMT
        Subject: CN=3EC5B3BFE291A8901B79322534B40942AAB4BBD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:66:fc:85:91:e6:d0:b0:6a:ad:a7:83:00:3e:
                    f4:85:7c:e5:de:5f:05:e6:51:fa:29:9e:91:ef:41:
                    75:e1:05:bd:64:16:8d:16:18:cb:c0:76:2d:f3:03:
                    14:fa:1f:06:9a:c1:84:d0:ca:e3:12:bc:5c:a5:2a:
                    fd:b9:13:fb:8c:3d:2f:77:79:d2:73:fa:4a:c3:ba:
                    93:10:e5:40:09:63:2c:35:c8:50:80:95:ab:28:74:
                    36:13:9a:2a:81:6f:36:fd:d2:a6:fe:f2:2a:cc:2e:
                    24:01:0b:bd:0f:aa:70:be:87:bb:55:8a:da:57:29:
                    0c:97:9e:9c:10:bf:be:a4:2f:30:af:06:fc:f5:a5:
                    cf:02:83:cd:51:48:68:4a:dc:a2:b7:5f:e8:c4:5d:
                    0a:21:a7:39:98:50:55:79:c1:d5:98:11:61:fa:65:
                    e5:c6:5c:9e:36:a0:d3:c5:bf:01:3c:60:3f:3f:6e:
                    f0:6d:9e:c2:a0:c4:39:5f:53:f1:52:a7:af:9e:81:
                    fc:7d:95:15:01:68:d4:19:45:ce:a6:34:45:33:b8:
                    84:9a:b2:ed:a0:08:c2:0e:40:e7:b6:cd:11:54:e8:
                    a5:b4:ee:9d:01:72:7b:7d:f1:8f:e1:f8:c5:d9:52:
                    55:af:d6:29:d8:89:b1:64:b2:9e:e3:5c:59:e7:81:
                    fc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C5:B3:BF:E2:91:A8:90:1B:79:32:25:34:B4:09:42:AA:B4:BB:D5
            X509v3 Authority Key Identifier:
                keyid:40:EA:94:3B:99:28:A2:41:6D:41:7F:B3:9A:39:24:94:90:4F:D3:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsKsUNeAbwnhc3JQgUrgXZC9pF7W5dQMkS2ALZaXSSEa/0/40EA943B9928A2416D417FB39A392494904FD334.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40EA943B9928A2416D417FB39A392494904FD334.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsKsUNeAbwnhc3JQgUrgXZC9pF7W5dQMkS2ALZaXSSEa/0/323830343a333966303a663030303a3a2f33362d3634203d3e20323636303630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:39f0:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5b:8f:bb:a6:7c:c5:f3:33:70:6a:82:ef:64:8d:a6:b2:6f:f5:
         e5:2f:ca:8f:36:e5:8e:06:4f:98:59:23:38:e2:6b:ff:f2:24:
         6d:24:9e:32:d1:2e:0f:2b:6a:db:f6:b6:03:c7:8c:b4:c5:e0:
         64:fd:49:cd:2f:c3:de:e7:9a:c4:14:69:65:3b:fe:bf:e1:79:
         b9:f4:da:44:c5:0b:2c:0f:c7:44:f4:2a:bb:79:b1:7d:de:a2:
         7d:bc:6e:cc:f8:1c:d8:75:4a:18:06:a3:5e:83:30:1d:e9:78:
         40:17:1c:f2:6c:3c:fa:8b:2c:af:a0:91:f1:6f:9c:e0:7b:f1:
         84:ca:a9:5d:b6:27:de:19:07:11:da:e7:b7:a1:f6:96:96:25:
         fe:cb:25:2b:1c:09:15:c6:d1:a0:24:33:ed:f5:a9:10:ca:3c:
         1b:a0:a5:dd:2d:25:65:1c:84:71:e9:72:de:96:ba:c7:c9:c2:
         1f:27:03:f8:24:21:aa:57:20:c0:d5:57:bc:69:a2:7c:5c:bb:
         d7:50:46:69:24:fe:45:32:d6:ab:70:08:bd:68:02:77:76:f1:
         43:b2:a0:34:c7:d7:c8:59:e2:a3:19:e9:93:1d:9a:c3:9f:9a:
         91:c7:1b:a4:88:cb:d1:cc:45:b6:13:25:af:6e:a8:03:44:f6:
         a8:57:44:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:06:16 2026 by rpki-client