Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/323830343a313263633a363030303a3a2f33362d3336203d3e20323633343939.roa
File:                     323830343a313263633a363030303a3a2f33362d3336203d3e20323633343939.roa (raw, json)
Hash identifier:          v5oYP3dQxStiFclihFy09Jdt1Pdqcg8bP1mKLKRjocw=
Subject key identifier:   47:A3:47:16:CB:1F:89:55:A8:BC:EE:1E:17:EF:3F:4A:A3:EF:D7:C2
Certificate issuer:       /CN=785724BA2C79C31B8A2DA54506CAE7886EA06BE7
Certificate serial:       2C981CDF7F8A76CB97B41FD3C83731A2A969437E
Authority key identifier: 78:57:24:BA:2C:79:C3:1B:8A:2D:A5:45:06:CA:E7:88:6E:A0:6B:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/323830343a313263633a363030303a3a2f33362d3336203d3e20323633343939.roa
Signing time:             Thu 11 Jun 2026 18:23:38 +0000
ROA not before:           Thu 11 Jun 2026 18:18:38 +0000
ROA not after:            Thu 10 Jun 2027 18:23:38 +0000
asID:                     263499
IP address blocks:        2804:12cc:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl
                          rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:98:1c:df:7f:8a:76:cb:97:b4:1f:d3:c8:37:31:a2:a9:69:43:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785724BA2C79C31B8A2DA54506CAE7886EA06BE7
        Validity
            Not Before: Jun 11 18:18:38 2026 GMT
            Not After : Jun 10 18:23:38 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2d:d5:e2:10:18:4a:47:2e:e2:cc:3a:0c:0e:
                    e8:18:df:9f:cc:cc:fb:3b:05:06:69:66:89:d2:68:
                    28:86:bf:e2:44:e5:aa:8e:ed:7d:3e:43:df:3a:d7:
                    85:01:6f:5c:c8:a8:01:65:d8:69:c6:5e:a3:ea:2d:
                    e2:f4:cb:f7:37:5b:11:80:c1:dd:2e:4a:83:8a:4c:
                    80:62:df:4c:b6:7c:ab:84:e5:74:ee:7f:27:46:3b:
                    aa:79:08:43:61:09:10:5f:64:7d:ce:ce:cb:a8:e4:
                    ea:d8:83:3a:12:47:de:41:29:a5:9f:5d:e3:c8:83:
                    47:36:69:2b:90:9f:2e:41:8a:e5:73:42:ac:26:7c:
                    21:12:1b:22:39:21:a2:a3:00:ca:1d:f6:d3:dc:0c:
                    ae:e4:ab:32:fd:16:6a:6f:b6:f5:70:29:6e:cf:a9:
                    7a:51:b5:b8:f8:ca:68:07:14:24:af:35:03:ec:6a:
                    6d:33:11:59:b1:d4:d7:c4:16:59:89:74:96:25:92:
                    3c:01:4c:0f:e7:8b:8d:ad:c8:8a:91:11:bc:4c:ab:
                    64:5b:ac:77:b4:b9:85:6f:66:32:33:81:65:be:66:
                    16:13:6f:4f:cc:c5:e9:9b:ac:1a:55:90:c5:fb:49:
                    53:fb:c9:30:82:f6:4e:ce:95:8b:23:20:3e:2f:d3:
                    af:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A3:47:16:CB:1F:89:55:A8:BC:EE:1E:17:EF:3F:4A:A3:EF:D7:C2
            X509v3 Authority Key Identifier:
                keyid:78:57:24:BA:2C:79:C3:1B:8A:2D:A5:45:06:CA:E7:88:6E:A0:6B:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/323830343a313263633a363030303a3a2f33362d3336203d3e20323633343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12cc:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         65:85:3c:05:b3:5c:d0:7a:eb:fd:54:71:3b:c5:e7:9a:cb:74:
         11:ad:e0:fd:4a:51:08:bc:06:c7:4c:aa:1e:00:61:36:64:6a:
         71:a2:7c:85:fc:9c:37:9c:8f:5a:89:df:49:f5:0f:06:66:95:
         d9:09:35:1f:35:40:39:53:cb:c3:87:fd:1c:5e:12:95:e4:6f:
         5f:a6:0f:f4:b3:f4:6c:98:c8:b6:c4:9b:53:18:cf:60:dc:c6:
         ab:0b:66:1c:d6:2f:1c:27:e8:ab:ab:ab:63:2d:d7:99:50:ac:
         49:8c:a6:23:c3:3e:f7:13:4e:0c:a7:83:63:30:88:45:d1:6c:
         6d:25:96:c3:5b:3f:35:ce:9b:49:cc:4a:45:b1:2e:8f:6e:5b:
         c8:8a:c9:e6:e1:1d:e6:f4:1e:89:f9:55:8b:9a:fd:bb:91:32:
         83:47:20:53:86:55:a1:61:a7:ff:89:a7:47:c8:41:8f:a8:b2:
         01:e5:0f:76:cd:70:57:84:b3:f5:39:65:0e:87:38:bb:90:64:
         23:ac:37:cc:f7:42:db:ff:c7:ce:d9:22:e3:ed:e2:98:fa:40:
         4e:f3:ad:9b:9a:79:21:3c:36:13:b2:e8:54:49:02:73:5d:a8:
         2d:d9:aa:4b:7b:19:47:5e:b2:1d:fa:91:d7:ab:27:86:b7:6d:
         34:82:57:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:22:27 2026 by rpki-client