Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/323830343a313263633a343030303a3a2f33362d3336203d3e20323633343939.roa
File:                     323830343a313263633a343030303a3a2f33362d3336203d3e20323633343939.roa (raw, json)
Hash identifier:          ySLf7AVD9E2i74cdZ3/xW/VEp84jzxZczVgqLDxdMi8=
Subject key identifier:   4D:3C:DA:93:AF:BA:5D:3A:D5:38:10:E6:F1:A6:86:A9:54:BE:CD:7C
Certificate issuer:       /CN=785724BA2C79C31B8A2DA54506CAE7886EA06BE7
Certificate serial:       4F30843B561DC28E8E4650FB5C6383B92B1CE3D8
Authority key identifier: 78:57:24:BA:2C:79:C3:1B:8A:2D:A5:45:06:CA:E7:88:6E:A0:6B:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/323830343a313263633a343030303a3a2f33362d3336203d3e20323633343939.roa
Signing time:             Thu 11 Jun 2026 18:23:36 +0000
ROA not before:           Thu 11 Jun 2026 18:18:36 +0000
ROA not after:            Thu 10 Jun 2027 18:23:36 +0000
asID:                     263499
IP address blocks:        2804:12cc:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl
                          rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:30:84:3b:56:1d:c2:8e:8e:46:50:fb:5c:63:83:b9:2b:1c:e3:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785724BA2C79C31B8A2DA54506CAE7886EA06BE7
        Validity
            Not Before: Jun 11 18:18:36 2026 GMT
            Not After : Jun 10 18:23:36 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7a:db:fb:93:09:87:78:70:39:39:c1:09:2d:
                    ca:93:1c:de:6d:c8:43:70:e1:a3:ba:63:65:cf:5d:
                    60:a8:68:dc:f8:be:78:b7:9c:ee:e1:7e:cb:98:9c:
                    ca:e8:71:a3:b8:73:c0:e8:e4:51:2d:8e:ac:21:9f:
                    9f:df:29:62:13:f8:73:4e:7c:a6:5d:ef:b4:2f:75:
                    ed:1a:bf:df:8b:e5:b6:bc:4c:e6:7e:87:ad:24:df:
                    16:e7:d4:ec:d7:70:f1:6e:53:1c:1a:c2:64:d6:69:
                    31:4c:d4:c1:85:65:30:da:78:c0:4d:d2:ec:93:87:
                    e0:8b:94:44:66:9b:a9:20:3c:94:fc:18:28:33:dd:
                    f1:0d:2c:39:1d:3e:4a:26:0f:28:4f:a6:c5:ce:4d:
                    db:a7:6b:dc:ed:2b:6f:fb:a7:85:53:de:fc:73:4c:
                    7b:55:01:1f:8d:fd:50:ec:49:68:28:13:d4:02:f8:
                    fb:27:54:3d:76:8c:64:86:3e:00:b5:72:9a:ee:35:
                    0a:be:20:81:86:aa:36:0b:95:31:ae:e8:a9:e5:f6:
                    cc:62:f7:38:e8:77:35:ce:dd:94:1a:d8:2e:f7:23:
                    28:1e:1e:cf:31:94:ac:1c:3d:b8:6d:63:fe:c0:c4:
                    e9:ad:44:8e:3d:75:4f:f8:bd:b2:e1:e0:06:d7:7d:
                    ea:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3C:DA:93:AF:BA:5D:3A:D5:38:10:E6:F1:A6:86:A9:54:BE:CD:7C
            X509v3 Authority Key Identifier:
                keyid:78:57:24:BA:2C:79:C3:1B:8A:2D:A5:45:06:CA:E7:88:6E:A0:6B:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/323830343a313263633a343030303a3a2f33362d3336203d3e20323633343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12cc:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8e:f3:60:23:61:0f:75:da:0e:79:3c:dc:4c:be:6f:9e:d0:78:
         d2:e0:42:32:a3:03:a2:29:74:b8:9b:99:b4:23:1e:ed:4d:6f:
         a2:c1:73:ad:86:9f:b6:33:3a:04:5c:5b:d5:a2:57:26:a8:e5:
         31:79:e5:fc:57:ed:d2:a0:48:07:b5:25:7a:9d:7a:e6:77:c3:
         12:a6:d9:a6:a5:1a:89:93:ef:91:3e:41:88:2b:10:99:93:ed:
         fb:79:fb:87:3b:bc:06:e8:ed:75:ed:77:70:70:03:43:25:c1:
         3e:0f:aa:14:49:0c:a8:e5:1e:65:9b:32:86:ec:fb:b3:78:b3:
         e0:3d:4a:9d:74:f9:35:38:1a:e9:3f:4f:f7:10:f5:3a:51:ed:
         6b:ea:9b:01:ea:ed:6c:23:3a:31:31:83:99:11:52:4d:77:3a:
         30:67:03:a7:87:2a:3d:d1:a7:8a:19:c7:b0:ad:fd:8d:10:71:
         2d:87:87:09:ef:86:b9:c2:63:5d:f5:f8:37:23:dc:28:51:e5:
         a2:36:26:f9:67:aa:1b:af:4d:df:57:09:8b:c8:80:72:7d:a5:
         f9:e1:a0:7b:e3:3f:6b:9a:ac:3f:ba:43:4d:19:b2:e5:ea:b6:
         5e:ee:07:c7:1c:d0:66:59:95:4b:d6:62:72:f8:a1:e8:b5:ae:
         d0:8a:f7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:22:26 2026 by rpki-client