Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdoHKou8jAw1N458ZhsPPidp8wsYUtWg8ohy6PizqnLi/0/323830343a373564633a3a2f33322d313238203d3e20323731303734.roa
File:                     323830343a373564633a3a2f33322d313238203d3e20323731303734.roa (raw, json)
Hash identifier:          0lQhP81Ng1XG3hsi059YTcOIWLarMSsRyVYKDTCMQ0g=
Subject key identifier:   6E:22:A4:03:F4:05:75:14:9B:26:4A:64:80:7E:BA:5C:02:65:B2:C5
Certificate issuer:       /CN=E6D6AABA3F121607795EF4EEE2ACE5F12F58900E
Certificate serial:       60609A9F03AC3CE92F234B2AA0D7506C6E057AA9
Authority key identifier: E6:D6:AA:BA:3F:12:16:07:79:5E:F4:EE:E2:AC:E5:F1:2F:58:90:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6D6AABA3F121607795EF4EEE2ACE5F12F58900E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdoHKou8jAw1N458ZhsPPidp8wsYUtWg8ohy6PizqnLi/0/323830343a373564633a3a2f33322d313238203d3e20323731303734.roa
Signing time:             Mon 20 Apr 2026 19:37:36 +0000
ROA not before:           Mon 20 Apr 2026 19:32:36 +0000
ROA not after:            Mon 19 Apr 2027 19:37:36 +0000
asID:                     271074
IP address blocks:        2804:75dc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdoHKou8jAw1N458ZhsPPidp8wsYUtWg8ohy6PizqnLi/0/E6D6AABA3F121607795EF4EEE2ACE5F12F58900E.crl
                          rsync://rpki-repo.registro.br/repo/HdoHKou8jAw1N458ZhsPPidp8wsYUtWg8ohy6PizqnLi/0/E6D6AABA3F121607795EF4EEE2ACE5F12F58900E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6D6AABA3F121607795EF4EEE2ACE5F12F58900E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 16:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:60:9a:9f:03:ac:3c:e9:2f:23:4b:2a:a0:d7:50:6c:6e:05:7a:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6D6AABA3F121607795EF4EEE2ACE5F12F58900E
        Validity
            Not Before: Apr 20 19:32:36 2026 GMT
            Not After : Apr 19 19:37:36 2027 GMT
        Subject: CN=6E22A403F40575149B264A64807EBA5C0265B2C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:99:e4:8d:fa:a5:0d:a5:ec:0d:c1:53:9e:22:
                    fb:e1:7b:85:2b:7c:a0:77:1f:6e:7b:b4:be:7c:3c:
                    bc:8d:5d:30:96:f7:39:94:23:13:49:a2:c4:ef:5c:
                    23:9b:97:03:55:66:74:d9:ec:ac:fa:95:ad:f0:43:
                    9f:4a:9e:05:9c:81:43:5f:d9:64:e3:69:b6:04:4e:
                    b7:b7:6e:a9:38:c7:93:4f:38:54:2c:a4:a4:47:9a:
                    06:8d:2c:55:6f:51:d1:1b:54:69:b1:2e:0c:52:59:
                    23:cd:1d:2f:74:b8:c9:41:a9:94:42:e9:2c:0a:3a:
                    6c:b6:76:b4:b4:21:2a:fa:ae:72:dc:82:80:47:f4:
                    32:37:d8:16:14:1e:a9:4a:1f:bd:11:cb:8a:29:38:
                    e9:fe:b4:d1:8a:03:5a:01:e6:ff:55:fb:c8:b9:f0:
                    4f:57:ab:3b:8d:82:68:06:b1:53:01:ec:16:fb:9b:
                    1f:7a:bb:bd:c0:a2:86:bb:30:33:00:ef:83:37:30:
                    19:67:e6:bd:52:40:d5:56:04:28:5e:62:76:1e:c6:
                    1b:7c:46:90:9f:ef:5c:f4:3d:47:29:26:0f:f6:3a:
                    2f:6b:18:71:7e:57:d9:6f:94:9d:2a:e6:60:83:a2:
                    4a:96:71:fa:26:84:dd:ba:a8:90:12:85:e7:05:e0:
                    b8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:22:A4:03:F4:05:75:14:9B:26:4A:64:80:7E:BA:5C:02:65:B2:C5
            X509v3 Authority Key Identifier:
                keyid:E6:D6:AA:BA:3F:12:16:07:79:5E:F4:EE:E2:AC:E5:F1:2F:58:90:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdoHKou8jAw1N458ZhsPPidp8wsYUtWg8ohy6PizqnLi/0/E6D6AABA3F121607795EF4EEE2ACE5F12F58900E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6D6AABA3F121607795EF4EEE2ACE5F12F58900E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdoHKou8jAw1N458ZhsPPidp8wsYUtWg8ohy6PizqnLi/0/323830343a373564633a3a2f33322d313238203d3e20323731303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:75dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:a3:34:4e:5b:5f:1b:63:85:8b:99:99:59:6e:0d:fd:ed:0a:
         9e:b8:8f:e1:5b:3e:19:21:e6:9c:ee:ca:65:f9:f3:f0:ab:c8:
         01:4b:a6:18:8d:b8:42:6a:a4:3c:08:6c:87:2a:b5:a4:23:cb:
         33:27:b2:76:4a:08:85:43:4a:65:9a:24:f1:d0:08:a6:33:5f:
         1d:28:b2:19:27:0b:5c:12:59:31:93:d4:e8:67:be:c5:78:4c:
         b4:b5:4b:12:f4:77:79:ee:9b:5e:09:46:97:7a:79:07:b9:6d:
         ce:f2:3c:dd:ad:95:f0:04:bd:f4:60:f0:76:37:f5:e4:fa:68:
         4f:e4:a2:a9:6f:26:31:13:e5:ca:3a:b8:4b:74:ee:9d:77:35:
         1b:7e:8a:15:75:1f:38:c7:9d:9b:f2:5c:dd:53:85:0d:c3:84:
         38:a5:44:1b:4e:ff:b8:a0:6b:11:d4:b8:f9:e8:bf:c0:f1:3e:
         8f:54:62:2a:7e:68:90:06:a8:a7:81:02:76:fc:be:59:15:6c:
         67:ca:3a:75:31:7a:51:70:1f:b1:c2:73:86:88:0a:a1:a7:9a:
         ff:86:b9:ad:a4:21:20:9f:30:cf:6e:67:e3:68:56:96:29:a6:
         61:fc:9e:5b:60:7d:d4:4f:e9:dc:99:7e:e9:19:a9:e6:9d:c2:
         5d:e9:dc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:18:07 2026 by rpki-client