Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a613030303a3a2f33352d3335203d3e203631373139.roa
File:                     323830343a316235303a613030303a3a2f33352d3335203d3e203631373139.roa (raw, json)
Hash identifier:          m9AmLNJCySS6fee57xF9U4RAM9q4GbgxB9sPJb03mtA=
Subject key identifier:   64:12:F8:02:84:BC:44:99:DE:36:4B:96:FE:EC:1A:5E:4B:CD:73:23
Certificate issuer:       /CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
Certificate serial:       661EF8A309812FB89C7BD4311CF013E4FE90108D
Authority key identifier: 57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a613030303a3a2f33352d3335203d3e203631373139.roa
Signing time:             Thu 02 Jul 2026 11:27:16 +0000
ROA not before:           Thu 02 Jul 2026 11:22:16 +0000
ROA not after:            Thu 01 Jul 2027 11:27:16 +0000
asID:                     61719
IP address blocks:        2804:1b50:a000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl
                          rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 04:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:1e:f8:a3:09:81:2f:b8:9c:7b:d4:31:1c:f0:13:e4:fe:90:10:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
        Validity
            Not Before: Jul  2 11:22:16 2026 GMT
            Not After : Jul  1 11:27:16 2027 GMT
        Subject: CN=6412F80284BC4499DE364B96FEEC1A5E4BCD7323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:41:bc:2e:c7:4f:51:3b:a5:bd:07:ce:f0:64:
                    25:c4:15:ce:fe:d9:84:50:a5:11:3d:dd:5c:a1:9f:
                    61:27:3a:d1:0e:be:64:8d:ab:8b:04:c9:2d:ae:ab:
                    f9:10:e9:c8:a5:ff:0b:c9:59:4f:a7:41:c8:38:e6:
                    40:7f:a9:b8:85:ea:59:c7:e3:62:a7:ae:17:4c:a1:
                    3a:b1:26:0c:fe:31:af:56:db:83:d9:21:cf:80:36:
                    8e:4c:97:44:b5:dd:34:f4:b0:92:b9:51:4c:42:cb:
                    41:b4:48:70:35:50:57:5c:bc:be:86:4f:99:3d:b4:
                    64:87:45:21:12:03:9a:90:98:61:8e:ab:0c:19:20:
                    26:e7:61:6f:56:14:aa:6a:6f:af:7b:c7:77:d5:ed:
                    98:0c:45:e2:48:c8:af:b0:b1:b2:d7:88:f7:27:9c:
                    cb:60:99:9c:61:82:61:bc:55:c8:12:9d:a9:a3:f3:
                    dd:18:29:a3:93:cc:92:c8:a6:50:02:d0:8a:62:8a:
                    40:68:54:72:63:87:26:82:cf:60:00:ac:bb:d5:f2:
                    e1:33:8e:22:57:b6:8d:eb:bb:5d:46:da:b0:05:3e:
                    3d:bf:eb:87:08:4c:b8:58:7c:41:57:56:31:15:3f:
                    32:29:25:c0:08:64:fb:93:a5:f4:96:28:59:a4:1e:
                    4e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:12:F8:02:84:BC:44:99:DE:36:4B:96:FE:EC:1A:5E:4B:CD:73:23
            X509v3 Authority Key Identifier:
                keyid:57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a613030303a3a2f33352d3335203d3e203631373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b50:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         c5:34:1f:82:df:67:d4:3c:2e:81:2c:b9:0e:2c:69:8a:e6:34:
         9f:6e:1b:96:72:3a:dd:64:f2:ea:b0:6b:2b:44:0f:2a:c1:48:
         5d:bc:da:84:8a:0d:de:68:5f:1f:05:30:8f:d0:b6:21:92:79:
         81:30:7a:a4:53:3e:02:df:d2:82:27:09:ba:f5:d9:d4:49:df:
         bf:12:d4:a7:47:3c:fa:8a:f5:a6:98:1b:b7:59:04:14:36:d0:
         18:93:12:9f:2b:03:b4:61:c8:f6:f2:29:27:78:7e:1e:11:af:
         49:53:9b:dd:ca:4b:8e:a1:89:4a:bb:c1:7d:9a:60:4c:65:48:
         58:11:2d:1f:43:18:c5:bb:2e:3c:8a:aa:82:93:6b:8b:dd:57:
         a9:ef:db:8d:9e:94:38:b2:b7:5e:5f:fc:ce:5f:30:bf:20:bb:
         8c:0e:77:02:1d:1b:c3:57:2b:97:ae:cb:53:52:0c:da:98:39:
         b1:7e:4e:4f:2c:ba:8c:c5:e2:0e:c0:27:51:c4:47:1a:6a:25:
         43:7d:7f:1e:2d:00:2b:dd:b7:b6:33:76:dd:f3:52:22:24:8e:
         9b:21:ae:20:10:fa:6b:9f:d0:03:c8:92:39:8c:7b:d4:cc:0d:
         ba:2b:e8:c0:39:72:b1:60:4a:38:77:c9:ba:48:c0:7c:a0:4f:
         a5:c6:1e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:06:04 2026 by rpki-client