Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/323830343a313362303a666330303a3a2f33382d3338203d3e20323633353436.roa
File:                     323830343a313362303a666330303a3a2f33382d3338203d3e20323633353436.roa (raw, json)
Hash identifier:          EQFymo8utFgJXtaJBaw5JhozdvdXghB7cD3anUVVziw=
Subject key identifier:   F4:A7:D3:11:5E:08:B0:7B:F9:BA:9C:9C:78:04:CB:69:98:A8:6C:21
Certificate issuer:       /CN=FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC
Certificate serial:       3C61014BE8653CAC471CF595A26DD4BF09BBCC08
Authority key identifier: FF:4F:CD:2B:37:C1:47:86:21:14:DB:AB:CC:A0:0F:95:D6:BC:CD:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/323830343a313362303a666330303a3a2f33382d3338203d3e20323633353436.roa
Signing time:             Thu 11 Jun 2026 18:07:59 +0000
ROA not before:           Thu 11 Jun 2026 18:02:59 +0000
ROA not after:            Thu 10 Jun 2027 18:07:59 +0000
asID:                     263546
IP address blocks:        2804:13b0:fc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.crl
                          rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 22:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:61:01:4b:e8:65:3c:ac:47:1c:f5:95:a2:6d:d4:bf:09:bb:cc:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC
        Validity
            Not Before: Jun 11 18:02:59 2026 GMT
            Not After : Jun 10 18:07:59 2027 GMT
        Subject: CN=F4A7D3115E08B07BF9BA9C9C7804CB6998A86C21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:68:8b:0e:46:59:01:a3:d9:6e:3c:66:28:1a:
                    bb:e6:63:5e:94:0d:6c:28:03:0e:75:27:6e:74:7c:
                    37:47:ca:95:95:2e:7c:d5:e3:45:80:79:d5:f7:69:
                    c5:cf:ed:0e:f2:ff:a2:da:39:3f:7a:9f:07:60:78:
                    dd:ef:bc:41:1a:38:94:64:ae:a2:17:d7:c0:c8:e8:
                    9b:e0:3d:b2:58:9a:8e:c6:99:0a:e8:19:e0:a9:6a:
                    5e:ca:7b:68:51:5f:79:9b:b7:a5:cb:0d:a4:c7:ff:
                    f4:dc:c6:7e:bb:9a:7e:1a:91:54:d7:fb:e9:13:0a:
                    bc:1f:ca:1a:23:6c:ed:31:65:5e:ed:4f:fc:e5:64:
                    73:44:df:e7:61:3c:fe:36:32:e8:91:0e:b1:98:02:
                    22:04:af:3d:25:7b:3d:73:dc:a6:0c:38:0e:ff:6b:
                    00:07:6e:d8:ab:f8:23:6a:3b:66:32:2c:b8:ec:64:
                    af:26:a8:24:3c:ee:55:fa:e1:b4:79:ae:96:cf:94:
                    b0:65:87:3d:d7:df:41:86:5c:04:db:12:f7:00:c7:
                    59:27:2f:51:29:d2:c0:d0:bd:7d:97:9b:a8:23:73:
                    30:8b:fb:d9:f9:bb:f5:cb:d5:38:d3:8f:41:0a:14:
                    f8:b5:bf:75:83:1b:56:7e:fc:52:86:13:43:85:53:
                    a8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A7:D3:11:5E:08:B0:7B:F9:BA:9C:9C:78:04:CB:69:98:A8:6C:21
            X509v3 Authority Key Identifier:
                keyid:FF:4F:CD:2B:37:C1:47:86:21:14:DB:AB:CC:A0:0F:95:D6:BC:CD:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/323830343a313362303a666330303a3a2f33382d3338203d3e20323633353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:13b0:fc00::/38

    Signature Algorithm: sha256WithRSAEncryption
         8c:e9:fc:37:d0:fa:c0:f8:ad:c1:d6:d6:25:55:64:b6:3b:79:
         48:6f:3e:9e:ec:dd:f8:ba:ad:61:f2:7c:5c:c8:3d:6c:6b:60:
         7d:1a:19:01:e0:56:35:c1:d2:30:ff:07:5d:64:df:cd:3f:67:
         3a:06:a0:ae:c0:72:d8:df:e7:ac:3d:b4:e7:48:88:8d:60:97:
         d7:da:28:95:a3:3f:9e:c9:ef:eb:3c:60:01:2a:a8:40:ef:c4:
         36:a8:66:4b:aa:89:45:8b:8d:d3:66:fd:9e:eb:ed:99:34:b0:
         97:4e:50:3e:72:26:e3:43:fd:08:22:33:f6:c6:c2:52:6e:6c:
         53:50:6f:cc:b4:e6:fe:59:66:74:e8:18:38:ca:40:9a:50:85:
         53:42:32:d7:39:4a:04:5e:96:f6:0f:5e:44:bd:56:13:97:79:
         11:1e:09:36:80:7a:b4:0e:fc:2a:80:ea:19:cf:d7:83:04:de:
         b5:4c:bb:41:9b:68:9d:b2:c7:a4:e6:c0:3a:ae:f3:a4:07:f5:
         06:f8:4a:65:02:9b:de:e9:c3:34:9d:47:ee:a1:04:40:81:52:
         dc:5d:7b:67:22:b9:9e:aa:e2:35:75:ed:be:5e:18:55:38:48:
         fa:b1:bf:90:fd:b0:19:b4:7e:b9:3e:08:d4:fd:2f:d5:34:0b:
         56:8a:be:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:48:36 2026 by rpki-client