Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/323830343a313362303a366331303a3a2f34342d3434203d3e20323633353436.roa
File:                     323830343a313362303a366331303a3a2f34342d3434203d3e20323633353436.roa (raw, json)
Hash identifier:          cBaDmjaD/8GldOFRjejLFTj6dlW9BcixSFM7rhgeU2w=
Subject key identifier:   93:5D:FD:91:2E:F5:79:B3:1C:86:6A:85:9F:DA:65:8B:43:F0:10:A1
Certificate issuer:       /CN=FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC
Certificate serial:       011F3E13897A5C9B25DAAD877D249B0CA945C52E
Authority key identifier: FF:4F:CD:2B:37:C1:47:86:21:14:DB:AB:CC:A0:0F:95:D6:BC:CD:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/323830343a313362303a366331303a3a2f34342d3434203d3e20323633353436.roa
Signing time:             Thu 11 Jun 2026 18:07:56 +0000
ROA not before:           Thu 11 Jun 2026 18:02:56 +0000
ROA not after:            Thu 10 Jun 2027 18:07:56 +0000
asID:                     263546
IP address blocks:        2804:13b0:6c10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.crl
                          rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 22:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:1f:3e:13:89:7a:5c:9b:25:da:ad:87:7d:24:9b:0c:a9:45:c5:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC
        Validity
            Not Before: Jun 11 18:02:56 2026 GMT
            Not After : Jun 10 18:07:56 2027 GMT
        Subject: CN=935DFD912EF579B31C866A859FDA658B43F010A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6c:e5:f3:c9:2d:1a:85:43:15:40:5c:b3:b2:
                    1b:06:52:a7:4e:53:b9:24:15:d7:de:fe:99:d1:e6:
                    0e:cb:71:31:42:82:35:ac:11:1e:a3:7e:43:cd:4b:
                    69:d3:98:7b:1b:6a:ce:5d:4d:8c:80:24:03:8a:51:
                    aa:f2:5c:02:c1:76:1a:86:95:d7:74:0c:c1:7b:55:
                    67:57:6d:db:8d:dd:07:41:06:e1:22:d4:54:e6:96:
                    a6:25:d2:86:30:6b:00:af:5f:cb:d7:ce:2d:f5:d0:
                    57:26:8f:d7:03:c4:15:69:31:4b:eb:10:17:e5:44:
                    7d:91:b1:a6:ae:fa:93:60:d1:75:55:67:50:b4:e0:
                    f8:6a:e7:83:0c:e8:85:9d:f8:ce:76:ea:e3:b0:00:
                    79:95:83:ed:fa:de:c8:93:1c:d0:68:72:5a:2f:e0:
                    a3:09:7a:4b:ea:e6:c8:32:8a:15:f8:50:6b:11:a5:
                    cc:d3:94:65:19:40:63:93:7c:e1:21:a6:3a:a6:90:
                    ad:7c:19:29:7e:db:6a:34:74:37:64:c9:b7:ae:4c:
                    c9:ec:23:47:a0:5b:96:61:47:0a:7d:5a:09:da:c4:
                    62:ff:66:aa:69:a2:f0:79:15:e2:9e:d2:70:e0:1a:
                    61:40:3b:e2:ce:76:60:4a:55:09:51:04:a4:b4:d2:
                    e9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5D:FD:91:2E:F5:79:B3:1C:86:6A:85:9F:DA:65:8B:43:F0:10:A1
            X509v3 Authority Key Identifier:
                keyid:FF:4F:CD:2B:37:C1:47:86:21:14:DB:AB:CC:A0:0F:95:D6:BC:CD:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/323830343a313362303a366331303a3a2f34342d3434203d3e20323633353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:13b0:6c10::/44

    Signature Algorithm: sha256WithRSAEncryption
         13:31:16:63:79:a1:48:4d:c7:4c:2a:8d:09:8a:f8:f1:1e:a0:
         1f:df:72:9c:28:95:9a:ce:07:d3:b5:4c:51:2c:a0:f9:5f:32:
         6f:d5:3d:c9:3a:15:04:4b:f1:9e:6d:3c:f7:10:bd:96:1a:82:
         eb:b1:65:73:12:de:01:ae:38:7f:1b:27:eb:06:b1:fb:30:13:
         6a:88:b0:0e:01:dd:cf:0f:65:7c:d9:e1:f7:68:1e:67:70:d1:
         17:59:25:e2:79:08:ee:69:4b:25:7d:69:2f:6f:ea:41:de:c0:
         53:cc:92:a5:77:a0:df:e9:91:b6:bf:c0:e6:b5:83:84:74:42:
         cc:ba:d1:2a:2d:b9:7b:ba:bd:e2:51:fe:3c:4d:56:a9:be:10:
         51:6c:a3:70:73:65:87:ad:a9:e2:00:21:24:3c:21:ea:18:86:
         ef:01:d6:37:c0:83:bb:dc:bb:07:86:7d:a3:1f:d4:c3:f0:5a:
         56:ec:37:18:74:5f:8c:12:37:43:57:56:56:f0:ce:34:da:8e:
         2e:c4:59:13:47:79:bd:36:1d:56:ce:e9:77:b0:20:d3:f9:2c:
         7a:88:9f:4d:50:54:f5:02:f0:a7:b3:ca:57:22:dd:be:ae:4c:
         40:33:18:25:56:09:6b:9c:45:10:4a:48:16:32:e7:7e:d9:dd:
         b9:3e:68:02
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUAR8+E4l6XJsl2q2HfSSbDKlFxS4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY0RkNEMkIzN0MxNDc4NjIxMTREQkFCQ0NBMDBGOTVE
NkJDQ0RGQzAeFw0yNjA2MTExODAyNTZaFw0yNzA2MTAxODA3NTZaMDMxMTAvBgNV
BAMTKDkzNURGRDkxMkVGNTc5QjMxQzg2NkE4NTlGREE2NThCNDNGMDEwQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnbOXzyS0ahUMVQFyzshsGUqdO
U7kkFdfe/pnR5g7LcTFCgjWsER6jfkPNS2nTmHsbas5dTYyAJAOKUaryXALBdhqG
ldd0DMF7VWdXbduN3QdBBuEi1FTmlqYl0oYwawCvX8vXzi310Fcmj9cDxBVpMUvr
EBflRH2Rsaau+pNg0XVVZ1C04Phq54MM6IWd+M526uOwAHmVg+363siTHNBoclov
4KMJekvq5sgyihX4UGsRpczTlGUZQGOTfOEhpjqmkK18GSl+22o0dDdkybeuTMns
I0egW5ZhRwp9WgnaxGL/ZqppovB5FeKe0nDgGmFAO+LOdmBKVQlRBKS00ulDAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUk139kS71ebMchmqFn9pli0PwEKEwHwYDVR0j
BBgwFoAU/0/NKzfBR4YhFNurzKAPlda8zfwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2dTeWFESm5QeFhTSjNmUEFaOTZ1WUhjRnRhS0FIbVNZek5UdFNXQ2kx
TlMvMC9GRjRGQ0QyQjM3QzE0Nzg2MjExNERCQUJDQ0EwMEY5NUQ2QkNDREZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGNEZDRDJCMzdDMTQ3ODYy
MTE0REJBQkNDQTAwRjk1RDZCQ0NERkMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdnU3lhREpuUHhYU0ozZlBBWjk2dVlIY0Z0YUtBSG1TWXpOVHRTV0NpMU5TLzAv
MzIzODMwMzQzYTMxMzM2MjMwM2EzNjYzMzEzMDNhM2EyZjM0MzQyZDM0MzQyMDNk
M2UyMDMyMzYzMzM1MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgEE7BsEDANBgkqhkiG9w0BAQsF
AAOCAQEAEzEWY3mhSE3HTCqNCYr48R6gH99ynCiVms4H07VMUSyg+V8yb9U9yToV
BEvxnm089xC9lhqC67FlcxLeAa44fxsn6wax+zATaoiwDgHdzw9lfNnh92geZ3DR
F1kl4nkI7mlLJX1pL2/qQd7AU8ySpXeg3+mRtr/A5rWDhHRCzLrRKi25e7q94lH+
PE1Wqb4QUWyjcHNlh62p4gAhJDwh6hiG7wHWN8CDu9y7B4Z9ox/Uw/BaVuw3GHRf
jBI3Q1dWVvDONNqOLsRZE0d5vTYdVs7pd7Ag0/kseoifTVBU9QLwp7PKVyLdvq5M
QDMYJVYJa5xFEEpIFjLnftnduT5oAg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:48:52 2026 by rpki-client