Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/323830343a313362303a656330303a3a2f34382d3438203d3e20323633353436.roa
File:                     323830343a313362303a656330303a3a2f34382d3438203d3e20323633353436.roa (raw, json)
Hash identifier:          ChbMymTzPO6GeLLZT/AfNQtJKs9ey3aQVDtFYZPb1qE=
Subject key identifier:   75:2E:DD:C2:FA:F6:75:7F:E0:DD:B4:D6:09:3C:4E:1A:08:DB:C6:A4
Certificate issuer:       /CN=FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC
Certificate serial:       71631E47FEA9F70CFA402D3F0848F5071A9B118A
Authority key identifier: FF:4F:CD:2B:37:C1:47:86:21:14:DB:AB:CC:A0:0F:95:D6:BC:CD:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/323830343a313362303a656330303a3a2f34382d3438203d3e20323633353436.roa
Signing time:             Thu 11 Jun 2026 18:08:00 +0000
ROA not before:           Thu 11 Jun 2026 18:03:00 +0000
ROA not after:            Thu 10 Jun 2027 18:08:00 +0000
asID:                     263546
IP address blocks:        2804:13b0:ec00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.crl
                          rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 22:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:63:1e:47:fe:a9:f7:0c:fa:40:2d:3f:08:48:f5:07:1a:9b:11:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC
        Validity
            Not Before: Jun 11 18:03:00 2026 GMT
            Not After : Jun 10 18:08:00 2027 GMT
        Subject: CN=752EDDC2FAF6757FE0DDB4D6093C4E1A08DBC6A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1d:cf:09:29:c3:c2:f3:69:ca:39:3b:9d:f2:
                    be:d0:e7:c7:3d:c9:7a:95:fe:c8:f6:c5:a4:fb:72:
                    72:4a:af:27:58:fd:94:4a:08:b6:4b:bc:bd:65:de:
                    f7:4d:ca:6f:fb:30:9b:c3:af:cd:2c:a8:23:e2:92:
                    f2:ea:48:88:bd:35:e8:c6:b4:8d:17:44:15:07:77:
                    cb:6a:c2:24:e6:31:52:dd:9e:13:d1:6c:8d:d9:2b:
                    17:17:37:3e:93:c4:ad:99:73:22:7b:5e:49:b6:79:
                    e3:3c:a6:69:57:9d:9c:69:9f:7e:d2:d4:8a:cb:24:
                    77:09:d2:62:ca:00:a5:a5:04:a2:c9:e1:1f:bf:54:
                    41:d8:6c:60:e8:14:fe:6d:56:9a:0c:b4:ec:e1:ac:
                    45:69:29:de:53:5a:54:f1:42:8f:98:3f:6a:bc:7a:
                    a5:f5:c1:c6:6f:bb:66:b4:1d:b9:76:19:69:65:9b:
                    d1:ba:29:90:3c:2d:a2:65:12:bb:37:2a:db:31:e3:
                    b8:fb:bc:dc:01:42:61:8b:10:a5:18:20:b6:e3:65:
                    3e:79:75:b1:9d:02:45:a2:d8:61:17:60:d7:5c:f7:
                    09:3e:72:62:a8:84:2d:4a:e2:06:73:a1:36:39:aa:
                    99:25:32:38:06:6a:cf:86:fc:5c:b0:ca:23:5e:68:
                    59:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:2E:DD:C2:FA:F6:75:7F:E0:DD:B4:D6:09:3C:4E:1A:08:DB:C6:A4
            X509v3 Authority Key Identifier:
                keyid:FF:4F:CD:2B:37:C1:47:86:21:14:DB:AB:CC:A0:0F:95:D6:BC:CD:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/323830343a313362303a656330303a3a2f34382d3438203d3e20323633353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:13b0:ec00::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:9d:cb:12:d2:4b:b6:8a:f9:33:22:f4:9e:7b:28:c6:a7:21:
         7a:72:fa:94:54:fb:ca:87:05:ed:4a:e0:e3:d4:1e:d4:fe:e3:
         e9:52:c2:53:25:03:9c:d8:47:fd:8a:4d:bc:88:41:39:59:6c:
         28:c5:dc:18:43:14:01:9c:a7:60:f8:0a:14:7f:b5:9a:b5:f1:
         67:14:dc:85:92:bc:44:19:d7:77:51:02:d6:26:6e:6c:95:9b:
         d1:6b:f5:63:86:3f:b1:ea:6e:d2:c9:bf:ae:77:30:7b:43:96:
         52:77:4d:d8:a9:33:d5:44:5c:5f:5e:6a:dc:19:ee:b4:8d:04:
         c9:79:64:91:b5:6c:82:23:6a:43:b0:b8:0e:4e:b7:df:dd:60:
         f7:ac:08:d6:49:5f:85:bf:be:25:32:3f:aa:cb:26:87:da:fd:
         fe:b6:76:5d:ea:11:18:93:85:45:cf:3e:1b:a9:92:f1:ce:b2:
         c1:d1:0c:00:9e:b1:12:a5:4c:4d:1e:0f:f3:21:5a:0d:a8:01:
         72:e2:3a:9b:2e:70:30:d8:98:78:86:79:23:eb:92:e0:5a:9b:
         eb:87:59:2e:9d:8e:2a:f2:38:19:22:78:77:8a:87:a2:86:50:
         a8:2b:17:40:95:04:9b:4c:30:e7:72:41:14:57:25:e0:73:7b:
         63:20:f9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:48:36 2026 by rpki-client