Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/323830343a316332343a3a2f33322d3438203d3e203238363730.roa
File:                     323830343a316332343a3a2f33322d3438203d3e203238363730.roa (raw, json)
Hash identifier:          FW+En46eNpi9F+UpnbMXh3qt6yk4BCJMD7d8LvuILkU=
Subject key identifier:   7F:05:03:56:DB:14:1A:E0:25:FD:F6:D8:7F:03:F5:D8:24:63:A1:B1
Certificate issuer:       /CN=4E7EB31B6D4532D1C10444DB3B88D1F6D002F236
Certificate serial:       2735108E08BB2487B56FB87A9D988E8D620933E6
Authority key identifier: 4E:7E:B3:1B:6D:45:32:D1:C1:04:44:DB:3B:88:D1:F6:D0:02:F2:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/323830343a316332343a3a2f33322d3438203d3e203238363730.roa
Signing time:             Tue 02 Jun 2026 15:46:35 +0000
ROA not before:           Tue 02 Jun 2026 15:41:35 +0000
ROA not after:            Tue 01 Jun 2027 15:46:35 +0000
asID:                     28670
IP address blocks:        2804:1c24::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.crl
                          rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:43:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:35:10:8e:08:bb:24:87:b5:6f:b8:7a:9d:98:8e:8d:62:09:33:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E7EB31B6D4532D1C10444DB3B88D1F6D002F236
        Validity
            Not Before: Jun  2 15:41:35 2026 GMT
            Not After : Jun  1 15:46:35 2027 GMT
        Subject: CN=7F050356DB141AE025FDF6D87F03F5D82463A1B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:24:31:26:62:15:62:2a:55:bc:ef:a4:5a:bc:
                    69:5b:04:3b:2a:05:b3:c2:ff:19:0e:c1:e5:db:bf:
                    45:fc:6d:28:d7:b3:a1:d8:e0:54:fd:46:52:ab:52:
                    eb:9f:da:2e:a4:80:11:3e:a4:e9:43:51:c1:5e:a7:
                    eb:c1:d3:2f:f2:4e:8d:3c:60:35:f4:d5:c5:c1:26:
                    8a:86:28:69:3a:92:fd:cf:32:67:44:3a:ec:df:32:
                    c2:46:f8:7b:2e:bd:b1:6f:4e:3f:c6:c6:36:6a:35:
                    ec:c1:06:a2:4c:12:a9:27:61:a9:6a:0a:0e:67:f8:
                    c9:52:33:89:7b:f8:09:23:d8:15:66:4f:e7:79:30:
                    61:fd:2a:3e:51:c4:c7:f6:6d:42:5e:5d:cd:e5:1f:
                    65:18:fe:ed:e4:19:47:88:28:17:3a:5d:49:a1:3f:
                    6f:fb:20:7f:e4:bf:57:54:87:66:3c:08:e7:c7:43:
                    af:d6:f6:b8:b8:dc:73:11:33:e1:33:26:5e:88:ca:
                    c8:98:9c:1c:04:b7:e0:86:39:73:d6:c3:f0:a5:58:
                    bd:5c:cc:04:66:df:64:1d:2d:ad:a7:43:35:26:cd:
                    a1:ba:f6:f3:76:70:a2:23:a4:40:a9:4b:db:ec:6f:
                    c5:8b:0b:65:95:68:e5:dc:cd:a8:36:37:4d:51:7f:
                    01:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:05:03:56:DB:14:1A:E0:25:FD:F6:D8:7F:03:F5:D8:24:63:A1:B1
            X509v3 Authority Key Identifier:
                keyid:4E:7E:B3:1B:6D:45:32:D1:C1:04:44:DB:3B:88:D1:F6:D0:02:F2:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/323830343a316332343a3a2f33322d3438203d3e203238363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c24::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:fb:66:35:22:40:f1:91:14:94:f8:9d:07:a7:31:6b:f9:3e:
         1d:a7:5c:9e:a5:13:9a:28:7d:d4:88:ec:bd:78:ae:bb:a9:6a:
         c9:a1:f0:6a:f7:8b:30:12:9d:88:5b:53:5a:ae:b8:75:81:b1:
         a7:64:85:fe:ea:2d:36:01:80:47:05:d9:46:72:66:1b:18:15:
         b9:0f:f5:e4:c9:70:e7:15:de:e2:62:a2:bc:a5:b6:8c:27:a5:
         19:7f:3b:21:e2:58:99:aa:df:77:99:2a:f2:cf:c6:6c:a8:33:
         8b:da:36:be:89:d5:b1:d8:1d:d8:c3:2a:eb:9d:41:fc:25:f0:
         51:37:b1:65:02:d6:44:e1:a0:f8:b5:d5:a4:d6:b1:d8:75:d7:
         af:bf:44:a7:35:1d:02:83:ac:66:66:99:39:11:80:07:53:21:
         b6:8e:ec:38:1e:6a:dc:35:81:2a:30:10:14:d1:dd:94:84:6f:
         28:7c:c6:86:b0:bf:cb:ce:f8:66:ce:37:58:e4:d8:c6:90:29:
         e1:08:4c:3b:13:8c:a4:b2:45:f4:6a:82:c4:14:0a:a8:f2:6d:
         ae:65:3f:bf:c3:68:62:b7:83:be:31:2a:5d:47:3c:d8:22:7e:
         d4:7c:b7:2f:b9:48:85:5a:b8:8d:ba:4f:89:68:c2:bc:02:3e:
         59:13:84:f6
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUJzUQjgi7JIe1b7h6nZiOjWIJM+YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEU3RUIzMUI2RDQ1MzJEMUMxMDQ0NERCM0I4OEQxRjZE
MDAyRjIzNjAeFw0yNjA2MDIxNTQxMzVaFw0yNzA2MDExNTQ2MzVaMDMxMTAvBgNV
BAMTKDdGMDUwMzU2REIxNDFBRTAyNUZERjZEODdGMDNGNUQ4MjQ2M0ExQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZJDEmYhViKlW876RavGlbBDsq
BbPC/xkOweXbv0X8bSjXs6HY4FT9RlKrUuuf2i6kgBE+pOlDUcFep+vB0y/yTo08
YDX01cXBJoqGKGk6kv3PMmdEOuzfMsJG+HsuvbFvTj/GxjZqNezBBqJMEqknYalq
Cg5n+MlSM4l7+Akj2BVmT+d5MGH9Kj5RxMf2bUJeXc3lH2UY/u3kGUeIKBc6XUmh
P2/7IH/kv1dUh2Y8COfHQ6/W9ri43HMRM+EzJl6IysiYnBwEt+CGOXPWw/ClWL1c
zARm32QdLa2nQzUmzaG69vN2cKIjpECpS9vsb8WLC2WVaOXczag2N01RfwFzAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUfwUDVtsUGuAl/fbYfwP12CRjobEwHwYDVR0j
BBgwFoAUTn6zG21FMtHBBETbO4jR9tAC8jYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnJXenhZc2NqaFRqUkw5R2FVWDNGbVR6aXp2em5CZVNSTEc3aTYyRm5a
UEwvMC80RTdFQjMxQjZENDUzMkQxQzEwNDQ0REIzQjg4RDFGNkQwMDJGMjM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFN0VCMzFCNkQ0NTMyRDFD
MTA0NDREQjNCODhEMUY2RDAwMkYyMzYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZyV3p4WXNjamhUalJMOUdhVVgzRm1Ueml6dnpuQmVTUkxHN2k2MkZuWlBMLzAv
MzIzODMwMzQzYTMxNjMzMjM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzODM2
MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEHCQwDQYJKoZIhvcNAQELBQADggEBADb7ZjUiQPGR
FJT4nQenMWv5Ph2nXJ6lE5oofdSI7L14rrupasmh8Gr3izASnYhbU1quuHWBsadk
hf7qLTYBgEcF2UZyZhsYFbkP9eTJcOcV3uJioryltownpRl/OyHiWJmq33eZKvLP
xmyoM4vaNr6J1bHYHdjDKuudQfwl8FE3sWUC1kThoPi11aTWsdh116+/RKc1HQKD
rGZmmTkRgAdTIbaO7Dgeatw1gSowEBTR3ZSEbyh8xoawv8vO+GbON1jk2MaQKeEI
TDsTjKSyRfRqgsQUCqjyba5lP7/DaGK3g74xKl1HPNgiftR8ty+5SIVauI26T4lo
wrwCPlkThPY=
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:33:15 2026 by rpki-client