Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CJhZ4xjJMisAy9peWEGcrwwV3KPakfshLDsJaGdq61Q/0/3230312e37372e3130302e302f32322d3332203d3e20323730323934.roa
File:                     3230312e37372e3130302e302f32322d3332203d3e20323730323934.roa (raw, json)
Hash identifier:          gj18RxWJWmW4HIseVn9Ho6I66r/+6JVrfEtVmzgOycY=
Subject key identifier:   72:E7:DF:7D:CC:71:F2:87:E1:FF:4F:9B:02:E5:26:53:83:7E:99:F1
Certificate issuer:       /CN=6204BC9725E5D8C3C975CB5956CB8BDA954F8F72
Certificate serial:       02D863E6803FF96F17A78B012C6057BAF12DF232
Authority key identifier: 62:04:BC:97:25:E5:D8:C3:C9:75:CB:59:56:CB:8B:DA:95:4F:8F:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6204BC9725E5D8C3C975CB5956CB8BDA954F8F72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CJhZ4xjJMisAy9peWEGcrwwV3KPakfshLDsJaGdq61Q/0/3230312e37372e3130302e302f32322d3332203d3e20323730323934.roa
Signing time:             Fri 05 Jun 2026 13:20:56 +0000
ROA not before:           Fri 05 Jun 2026 13:15:56 +0000
ROA not after:            Fri 04 Jun 2027 13:20:56 +0000
asID:                     270294
IP address blocks:        201.77.100.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3CJhZ4xjJMisAy9peWEGcrwwV3KPakfshLDsJaGdq61Q/0/6204BC9725E5D8C3C975CB5956CB8BDA954F8F72.crl
                          rsync://rpki-repo.registro.br/repo/3CJhZ4xjJMisAy9peWEGcrwwV3KPakfshLDsJaGdq61Q/0/6204BC9725E5D8C3C975CB5956CB8BDA954F8F72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6204BC9725E5D8C3C975CB5956CB8BDA954F8F72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 00:14:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:d8:63:e6:80:3f:f9:6f:17:a7:8b:01:2c:60:57:ba:f1:2d:f2:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6204BC9725E5D8C3C975CB5956CB8BDA954F8F72
        Validity
            Not Before: Jun  5 13:15:56 2026 GMT
            Not After : Jun  4 13:20:56 2027 GMT
        Subject: CN=72E7DF7DCC71F287E1FF4F9B02E52653837E99F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d0:92:20:be:86:f0:d1:79:71:5d:c1:7d:95:
                    4f:4e:84:78:50:8c:36:a9:14:31:3f:a8:43:40:f9:
                    42:9b:77:df:a9:bf:83:63:70:82:c3:89:40:46:fe:
                    99:08:79:a6:98:5a:92:60:f6:6a:37:bb:0d:56:47:
                    47:b6:3c:75:9a:e6:67:06:1f:f4:4c:05:0a:4f:4e:
                    08:77:15:cb:a1:35:a4:f6:58:e9:66:12:9e:2d:ab:
                    f1:6a:d2:a0:29:09:68:e8:ec:03:7a:ea:c4:3c:01:
                    2e:02:b4:b8:f5:28:28:07:6b:53:c3:0f:43:4e:4e:
                    9b:10:3a:2e:61:94:77:ba:b1:da:9b:80:7b:82:8d:
                    2b:1b:a8:38:4c:c8:87:27:fc:6e:33:a9:a2:4e:36:
                    6f:8b:0d:8e:aa:41:ba:7f:27:77:6a:af:82:79:fa:
                    4e:fd:c5:ca:3a:71:f1:5c:02:f2:9f:d7:17:74:46:
                    68:0f:05:20:40:da:52:76:f3:88:33:9e:41:c4:37:
                    e5:9c:1b:bb:dd:20:9f:04:c3:ca:3d:1e:18:85:c9:
                    c7:84:e6:b1:10:0d:01:f9:c2:89:80:12:56:56:d7:
                    f0:37:a3:3d:b3:fe:c9:8d:50:6a:1c:58:17:8f:70:
                    e7:bf:06:b1:97:7b:78:8f:b1:ae:ba:a4:dd:c0:70:
                    19:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E7:DF:7D:CC:71:F2:87:E1:FF:4F:9B:02:E5:26:53:83:7E:99:F1
            X509v3 Authority Key Identifier:
                keyid:62:04:BC:97:25:E5:D8:C3:C9:75:CB:59:56:CB:8B:DA:95:4F:8F:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CJhZ4xjJMisAy9peWEGcrwwV3KPakfshLDsJaGdq61Q/0/6204BC9725E5D8C3C975CB5956CB8BDA954F8F72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6204BC9725E5D8C3C975CB5956CB8BDA954F8F72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CJhZ4xjJMisAy9peWEGcrwwV3KPakfshLDsJaGdq61Q/0/3230312e37372e3130302e302f32322d3332203d3e20323730323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:84:53:64:55:0a:0d:02:c5:66:0c:e1:4e:41:4c:cf:d9:97:
         fd:bd:59:7f:2b:f7:d8:c8:60:a6:b7:af:14:13:04:8f:d2:04:
         24:c5:70:5d:16:48:ba:d1:37:40:a0:00:4e:da:9e:39:c2:70:
         41:fc:6c:b9:1f:c3:7b:77:dd:d9:ce:ab:bf:3d:03:c2:0a:ac:
         fe:7f:e5:27:31:e7:82:23:46:b3:36:4e:88:81:fd:74:d0:ba:
         60:50:5b:91:7d:dc:e3:24:dd:15:76:51:5c:bc:a2:5e:f5:10:
         08:6a:2a:77:35:7a:9b:d0:74:60:1f:28:02:18:9f:83:fa:53:
         d6:8d:16:46:c3:45:5e:66:ad:72:15:cd:2d:34:aa:6c:2b:38:
         ca:0d:9b:d1:fa:ee:08:5b:db:52:6d:5f:f7:a6:db:d0:ca:ff:
         fe:2f:f8:9d:99:5a:b3:c9:af:b8:cb:f1:e6:65:20:ae:80:e7:
         26:fa:05:01:0b:03:c4:da:39:5c:74:1b:aa:b5:37:71:8f:60:
         7e:97:41:75:3f:76:a1:22:68:ad:3e:55:8a:1e:a4:96:ed:74:
         f2:6c:ba:76:97:d5:ce:71:54:31:40:0d:5a:67:49:54:ac:18:
         cd:60:e4:cd:9e:84:22:01:74:97:d9:e6:ab:3a:b5:7b:95:a0:
         15:b1:82:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:54:43 2026 by rpki-client