Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/323830343a386562343a633030303a3a2f33342d3334203d3e20323733343433.roa
File:                     323830343a386562343a633030303a3a2f33342d3334203d3e20323733343433.roa (raw, json)
Hash identifier:          1ADIH6N3BwPVbPHz+Lg1waiLDAkIJO+fxy8Gn5eksSA=
Subject key identifier:   8E:3C:DF:FB:DF:46:EC:55:F7:91:95:05:B7:A4:CA:C5:34:62:E1:FA
Certificate issuer:       /CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
Certificate serial:       43CCFABF1A6AB11E4E0C9DFECBF0F4AC3012A265
Authority key identifier: 60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/323830343a386562343a633030303a3a2f33342d3334203d3e20323733343433.roa
Signing time:             Tue 05 May 2026 14:06:34 +0000
ROA not before:           Tue 05 May 2026 14:01:34 +0000
ROA not after:            Tue 04 May 2027 14:06:34 +0000
asID:                     273443
IP address blocks:        2804:8eb4:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl
                          rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:cc:fa:bf:1a:6a:b1:1e:4e:0c:9d:fe:cb:f0:f4:ac:30:12:a2:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
        Validity
            Not Before: May  5 14:01:34 2026 GMT
            Not After : May  4 14:06:34 2027 GMT
        Subject: CN=8E3CDFFBDF46EC55F7919505B7A4CAC53462E1FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3b:ac:4f:eb:a7:62:1d:4b:9c:11:a6:1c:ff:
                    ec:e8:4e:b5:69:f9:80:96:8e:db:0a:e4:be:c0:d1:
                    49:d1:0e:ae:93:68:4d:ff:9a:d5:ce:a1:f1:75:c1:
                    59:48:44:f1:1c:3d:c7:51:02:0e:b2:7f:c4:8a:05:
                    8f:bc:29:dd:d7:81:be:4e:2a:35:71:08:87:56:d6:
                    17:c0:b4:91:c2:8f:3e:c1:1e:96:3d:26:b3:0f:d3:
                    6c:95:2b:90:ea:df:4e:58:f2:15:e9:22:22:1a:97:
                    45:d8:e5:3e:99:56:59:cd:fa:db:c5:7f:b4:41:4c:
                    47:ab:0d:2c:c0:10:90:de:35:19:ae:c1:ea:67:fc:
                    6e:c2:3f:88:bd:6c:ea:28:11:85:ac:82:cb:79:47:
                    1c:86:b7:97:77:f7:13:c4:a9:62:03:1e:52:9c:aa:
                    93:c9:52:1b:08:89:a6:79:c0:e2:d9:a9:54:e1:b4:
                    78:92:c1:c1:7a:b6:ca:c0:f0:57:e4:29:38:f8:68:
                    23:eb:35:9e:23:90:61:c8:bc:8a:ba:a0:75:7f:74:
                    58:2d:42:be:5a:3c:be:3b:c0:74:c6:75:28:2c:df:
                    21:ad:2d:c3:10:e9:1e:22:47:9a:4d:fa:be:da:c9:
                    ee:81:26:c6:07:96:4a:33:9b:a5:fa:56:56:82:f8:
                    e5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:3C:DF:FB:DF:46:EC:55:F7:91:95:05:B7:A4:CA:C5:34:62:E1:FA
            X509v3 Authority Key Identifier:
                keyid:60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/323830343a386562343a633030303a3a2f33342d3334203d3e20323733343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8eb4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         66:4e:51:98:1b:ff:a3:1f:c2:08:4c:50:6d:9d:fb:9e:6e:c9:
         a6:8e:21:1a:f7:68:df:86:79:94:92:8d:78:b7:ee:c3:83:8c:
         08:77:33:3e:66:1f:0e:fe:15:70:86:31:c7:20:47:c0:68:a9:
         19:76:ed:ab:9f:63:71:c1:8e:68:d4:19:c3:e8:d9:6e:46:9f:
         6d:cf:f7:77:83:59:3f:6e:62:2a:0d:50:ff:d9:4b:f2:b6:4e:
         7c:a2:06:4c:21:cb:b8:64:74:c7:a3:8e:e6:05:c2:0f:6a:95:
         1d:ea:29:47:5f:5b:f8:6e:92:ec:b5:2e:e4:52:3e:51:82:85:
         28:54:c7:89:ac:31:f9:aa:fa:a8:1e:8a:65:5d:31:fe:35:a2:
         35:87:10:c2:6d:e8:5a:da:33:b7:0a:0b:29:c5:1b:a0:4b:11:
         76:3f:37:ee:57:fc:6f:51:3f:fd:5d:22:2f:15:6e:ea:c5:c8:
         75:04:1e:8c:a8:e2:33:5e:9c:17:6d:7e:a0:bb:45:8e:f6:b9:
         d4:47:c5:f0:01:0f:40:66:f9:21:2d:ba:d7:e1:2c:2a:f6:d0:
         5a:ef:00:13:c5:0e:2e:f2:f3:bf:8f:c5:3e:4e:28:c5:95:e5:
         38:ff:f8:a3:dd:25:0d:e2:da:fe:82:96:05:be:b3:c4:d9:ba:
         0c:15:00:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:22:06 2026 by rpki-client