Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a343030303a3a2f33362d3336203d3e203631373736.roa
File:                     323830343a313932633a343030303a3a2f33362d3336203d3e203631373736.roa (raw, json)
Hash identifier:          exQ7k2wELj1/T5oNOOpCVNP6TdWRPBem6EcHG+wn6tg=
Subject key identifier:   05:7B:A6:44:C1:C3:F2:23:8E:BA:67:4F:FF:76:80:B4:F5:33:AC:6E
Certificate issuer:       /CN=F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF
Certificate serial:       4B751C7F3773C8597F517825497B19D20E84B800
Authority key identifier: F1:13:E4:BF:5F:24:27:FB:9B:04:FC:6A:FA:D7:3C:3C:C3:CF:99:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a343030303a3a2f33362d3336203d3e203631373736.roa
Signing time:             Sat 13 Jun 2026 02:28:11 +0000
ROA not before:           Sat 13 Jun 2026 02:23:11 +0000
ROA not after:            Sat 12 Jun 2027 02:28:11 +0000
asID:                     61776
IP address blocks:        2804:192c:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.crl
                          rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 03:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:75:1c:7f:37:73:c8:59:7f:51:78:25:49:7b:19:d2:0e:84:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF
        Validity
            Not Before: Jun 13 02:23:11 2026 GMT
            Not After : Jun 12 02:28:11 2027 GMT
        Subject: CN=057BA644C1C3F2238EBA674FFF7680B4F533AC6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:62:56:d9:8d:45:9f:67:40:a3:6f:83:9d:00:
                    b1:37:c7:c3:98:dc:4c:bf:9f:74:91:5c:b9:19:bb:
                    71:b5:c5:02:11:b7:88:00:29:7c:57:78:29:33:04:
                    72:fc:40:bf:fc:89:58:0a:8b:18:3d:21:a8:95:c5:
                    6f:d5:69:f6:4d:d4:ab:f8:ad:c6:c4:76:e4:60:c0:
                    68:3f:d6:7c:05:4d:a6:b6:83:64:32:81:56:0b:a4:
                    82:11:ce:cc:22:d0:3e:19:67:79:3f:50:74:a2:c5:
                    ef:01:f2:84:33:fe:8e:69:02:f1:a1:3d:d8:af:d4:
                    f9:04:dc:bd:dd:49:de:2d:da:52:18:97:8d:0c:50:
                    7e:fe:3d:bd:7f:57:50:e1:a4:98:94:ae:77:11:78:
                    2d:2a:3a:59:c7:ad:df:51:63:20:b1:99:5a:2f:c3:
                    59:ec:de:f5:08:fc:5c:d9:f5:fd:e8:79:c5:d4:47:
                    5e:28:91:4c:20:4e:00:68:32:35:94:80:8a:23:d7:
                    6d:06:33:cb:f4:02:59:f0:67:57:0a:d1:4f:96:7b:
                    2e:5b:a4:d0:27:59:3e:76:b2:30:78:b3:93:00:04:
                    72:a9:a3:c5:7e:58:fa:f5:49:2e:fe:ea:82:8e:dc:
                    35:c0:c8:75:9f:41:1e:37:da:52:64:44:b7:1b:12:
                    d3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:7B:A6:44:C1:C3:F2:23:8E:BA:67:4F:FF:76:80:B4:F5:33:AC:6E
            X509v3 Authority Key Identifier:
                keyid:F1:13:E4:BF:5F:24:27:FB:9B:04:FC:6A:FA:D7:3C:3C:C3:CF:99:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a343030303a3a2f33362d3336203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:192c:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ae:39:55:89:61:e7:5d:09:6d:e1:dd:65:c9:6e:79:70:19:2c:
         94:4b:91:1b:eb:6b:a2:5a:f9:62:64:0f:54:eb:e3:06:dc:4b:
         29:80:e3:e2:56:58:11:20:72:db:f8:6f:7a:8a:e0:8a:67:8e:
         bb:98:ce:a4:e8:cb:40:9d:bc:22:f1:55:3c:de:b9:8c:0c:7e:
         84:bb:fb:25:96:7f:4d:e7:5c:3b:bd:2c:bf:d1:c2:a1:07:97:
         68:a3:c2:be:49:2f:77:21:77:19:21:03:6a:3b:80:14:f8:0e:
         f0:de:a7:95:5f:10:a3:99:6d:43:aa:8f:d1:37:cc:f8:e6:74:
         84:0c:3a:81:fd:3e:f3:9b:1f:72:1a:1a:9e:36:60:fa:47:00:
         e6:91:21:17:08:ed:bc:47:ac:68:45:a4:43:41:fa:c2:19:18:
         00:47:e2:c2:3d:85:2a:3e:06:26:d6:07:79:0f:20:d2:e9:0d:
         ef:87:47:96:bd:7c:19:9b:08:f9:60:c9:75:ed:e1:0d:c2:f0:
         88:06:2b:43:9f:c0:f5:23:72:34:86:88:d7:29:d2:3b:ad:7e:
         83:88:9f:95:7a:62:c8:bb:e4:96:4f:65:2b:5c:3c:9f:e2:9c:
         11:97:9d:73:bc:e2:e6:ef:42:6e:5d:3d:46:a0:74:f7:4d:cf:
         8a:40:17:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:37:52 2026 by rpki-client