Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/323830343a326439383a3a2f33322d313238203d3e203631353739.roa
File:                     323830343a326439383a3a2f33322d313238203d3e203631353739.roa (raw, json)
Hash identifier:          dkgKiJ3g+uDldIr5gHz4aFAm0DCE0Ws3mxLbB0Nw4ok=
Subject key identifier:   77:12:54:E0:14:A8:8E:28:E2:F5:FE:EB:20:D1:32:CE:D1:6F:25:8D
Certificate issuer:       /CN=3628F4DC97DEBF139DAB6CFD17DF6FA9D62D26DC
Certificate serial:       78487D7FA4014AD8D03D23A44DED27920874A176
Authority key identifier: 36:28:F4:DC:97:DE:BF:13:9D:AB:6C:FD:17:DF:6F:A9:D6:2D:26:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3628F4DC97DEBF139DAB6CFD17DF6FA9D62D26DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/323830343a326439383a3a2f33322d313238203d3e203631353739.roa
Signing time:             Mon 01 Jun 2026 18:23:13 +0000
ROA not before:           Mon 01 Jun 2026 18:18:13 +0000
ROA not after:            Mon 31 May 2027 18:23:13 +0000
asID:                     61579
IP address blocks:        2804:2d98::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3628F4DC97DEBF139DAB6CFD17DF6FA9D62D26DC.crl
                          rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3628F4DC97DEBF139DAB6CFD17DF6FA9D62D26DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3628F4DC97DEBF139DAB6CFD17DF6FA9D62D26DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 13:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:48:7d:7f:a4:01:4a:d8:d0:3d:23:a4:4d:ed:27:92:08:74:a1:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3628F4DC97DEBF139DAB6CFD17DF6FA9D62D26DC
        Validity
            Not Before: Jun  1 18:18:13 2026 GMT
            Not After : May 31 18:23:13 2027 GMT
        Subject: CN=771254E014A88E28E2F5FEEB20D132CED16F258D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:36:82:d0:67:fd:36:de:5f:ff:05:55:e7:65:
                    b3:e6:ce:1e:74:d5:bc:2c:09:d7:21:48:dc:e0:13:
                    5c:06:d5:90:10:53:e6:b2:f9:82:e1:ff:77:5e:1d:
                    67:6c:c9:06:fd:08:52:e2:98:76:89:e4:05:4a:89:
                    21:df:11:b2:90:83:e5:e6:47:46:8c:61:0c:50:8c:
                    7b:ab:c7:6f:45:be:73:b5:9b:26:e0:68:71:81:34:
                    0f:77:f8:44:27:eb:71:93:7a:ea:3a:a3:16:f2:ce:
                    be:55:96:5f:57:4c:29:2e:10:46:db:10:79:0c:ff:
                    8f:76:34:49:cb:eb:0e:b2:5f:d3:8e:01:f8:85:a4:
                    70:97:1f:c6:8a:9e:c5:32:a6:40:71:6d:14:f7:9b:
                    4d:29:a8:b7:b2:5b:99:c4:24:70:c0:88:b0:c4:5d:
                    11:d3:7c:35:f8:be:d7:ce:37:8a:67:49:40:ca:d3:
                    fd:9d:c9:ae:06:1f:ab:30:c9:24:f6:85:c8:3b:3d:
                    11:34:f1:8a:c4:2c:0d:17:a5:fa:b0:cb:3f:c1:94:
                    b3:3b:09:f7:57:31:bd:b9:97:51:01:79:64:37:a2:
                    e0:09:c2:97:eb:5d:9d:22:87:44:02:a6:79:35:d4:
                    73:c6:dc:11:e5:eb:31:a7:16:16:9b:f7:06:90:ea:
                    67:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:12:54:E0:14:A8:8E:28:E2:F5:FE:EB:20:D1:32:CE:D1:6F:25:8D
            X509v3 Authority Key Identifier:
                keyid:36:28:F4:DC:97:DE:BF:13:9D:AB:6C:FD:17:DF:6F:A9:D6:2D:26:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3628F4DC97DEBF139DAB6CFD17DF6FA9D62D26DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3628F4DC97DEBF139DAB6CFD17DF6FA9D62D26DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/323830343a326439383a3a2f33322d313238203d3e203631353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d98::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:7c:9d:39:26:da:03:76:2e:17:a1:fb:2e:5e:d9:05:f4:64:
         17:0a:96:f5:54:43:06:76:8c:eb:72:06:1b:06:74:40:62:3c:
         85:a8:cf:b5:bf:39:09:f2:d7:14:1c:48:ab:1a:9e:67:ab:57:
         8d:1d:03:4f:29:c2:77:14:2a:ec:66:7e:3a:9a:37:8a:7c:63:
         3d:64:a9:74:31:40:3d:2f:87:62:b0:fa:47:1e:44:e8:8a:8e:
         06:81:a0:41:80:68:ea:61:85:6e:20:b7:3b:b1:4e:0c:5f:13:
         82:03:05:11:d2:46:e6:58:49:d7:86:ec:0a:7a:38:96:20:47:
         31:9f:7b:91:b7:90:21:0c:98:49:62:53:89:fc:dd:1f:3c:e6:
         6d:a7:80:93:4d:f2:f6:b9:52:e7:91:73:a3:e9:44:74:49:a6:
         f9:46:df:54:24:d9:48:ff:9a:65:f5:26:76:6a:3b:dc:20:fb:
         84:66:32:f4:5b:4b:b2:f6:ec:d2:e0:d5:19:94:66:48:a8:1c:
         5c:4c:d2:ed:ad:25:29:27:d9:11:81:7c:00:9a:95:59:06:79:
         65:55:ec:51:bb:51:a9:a1:fe:d2:5e:9f:ee:29:27:a6:b8:b4:
         8a:57:63:2c:49:37:36:6d:11:9f:24:4e:e6:b2:e3:04:3a:28:
         e5:a7:7d:f3
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUeEh9f6QBStjQPSOkTe0nkgh0oXYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzYyOEY0REM5N0RFQkYxMzlEQUI2Q0ZEMTdERjZGQTlE
NjJEMjZEQzAeFw0yNjA2MDExODE4MTNaFw0yNzA1MzExODIzMTNaMDMxMTAvBgNV
BAMTKDc3MTI1NEUwMTRBODhFMjhFMkY1RkVFQjIwRDEzMkNFRDE2RjI1OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyNoLQZ/023l//BVXnZbPmzh50
1bwsCdchSNzgE1wG1ZAQU+ay+YLh/3deHWdsyQb9CFLimHaJ5AVKiSHfEbKQg+Xm
R0aMYQxQjHurx29FvnO1mybgaHGBNA93+EQn63GTeuo6oxbyzr5Vll9XTCkuEEbb
EHkM/492NEnL6w6yX9OOAfiFpHCXH8aKnsUypkBxbRT3m00pqLeyW5nEJHDAiLDE
XRHTfDX4vtfON4pnSUDK0/2dya4GH6swyST2hcg7PRE08YrELA0Xpfqwyz/BlLM7
CfdXMb25l1EBeWQ3ouAJwpfrXZ0ih0QCpnk11HPG3BHl6zGnFhab9waQ6mefAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUdxJU4BSojiji9f7rINEyztFvJY0wHwYDVR0j
BBgwFoAUNij03JfevxOdq2z9F99vqdYtJtwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDFLQmk4a3N1dEpvOWR6c0tWemFNd1FQR2g2b05KeUZMZFgxMmlBNjdV
bnMvMC8zNjI4RjREQzk3REVCRjEzOURBQjZDRkQxN0RGNkZBOUQ2MkQyNkRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2MjhGNERDOTdERUJGMTM5
REFCNkNGRDE3REY2RkE5RDYyRDI2REMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQxS0JpOGtzdXRKbzlkenNLVnphTXdRUEdoNm9OSnlGTGRYMTJpQTY3VW5zLzAv
MzIzODMwMzQzYTMyNjQzOTM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzNjMx
MzUzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQtmDANBgkqhkiG9w0BAQsFAAOCAQEAP3ydOSba
A3YuF6H7Ll7ZBfRkFwqW9VRDBnaM63IGGwZ0QGI8hajPtb85CfLXFBxIqxqeZ6tX
jR0DTynCdxQq7GZ+Opo3inxjPWSpdDFAPS+HYrD6Rx5E6IqOBoGgQYBo6mGFbiC3
O7FODF8TggMFEdJG5lhJ14bsCno4liBHMZ97kbeQIQyYSWJTifzdHzzmbaeAk03y
9rlS55Fzo+lEdEmm+UbfVCTZSP+aZfUmdmo73CD7hGYy9FtLsvbs0uDVGZRmSKgc
XEzS7a0lKSfZEYF8AJqVWQZ5ZVXsUbtRqaH+0l6f7iknpri0ildjLEk3Nm0RnyRO
5rLjBDoo5ad98w==
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:48:55 2026 by rpki-client