Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/323830343a313263633a383030303a3a2f33362d3336203d3e20323633343939.roa
File:                     323830343a313263633a383030303a3a2f33362d3336203d3e20323633343939.roa (raw, json)
Hash identifier:          Fi7cttD95djLRroblxQ3rfLVjOfqfr0EU7K1avkOrfE=
Subject key identifier:   2C:45:87:FA:EC:E4:05:2B:00:AC:8E:4C:A7:0A:97:C1:37:54:B7:DD
Certificate issuer:       /CN=785724BA2C79C31B8A2DA54506CAE7886EA06BE7
Certificate serial:       06256DFEB26EC11E22B741FE12E7141CD0BA5F54
Authority key identifier: 78:57:24:BA:2C:79:C3:1B:8A:2D:A5:45:06:CA:E7:88:6E:A0:6B:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/323830343a313263633a383030303a3a2f33362d3336203d3e20323633343939.roa
Signing time:             Thu 11 Jun 2026 18:23:36 +0000
ROA not before:           Thu 11 Jun 2026 18:18:36 +0000
ROA not after:            Thu 10 Jun 2027 18:23:36 +0000
asID:                     263499
IP address blocks:        2804:12cc:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl
                          rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:25:6d:fe:b2:6e:c1:1e:22:b7:41:fe:12:e7:14:1c:d0:ba:5f:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785724BA2C79C31B8A2DA54506CAE7886EA06BE7
        Validity
            Not Before: Jun 11 18:18:36 2026 GMT
            Not After : Jun 10 18:23:36 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:37:97:65:78:9b:50:f0:31:d8:22:91:99:46:
                    a1:97:3d:8a:43:4f:e2:4b:af:34:5c:72:83:b0:a6:
                    6a:4f:6d:83:ba:68:8b:fc:8a:f0:1c:22:a2:19:cf:
                    a5:1b:53:50:22:e1:cc:e3:36:87:86:ea:39:5f:70:
                    5e:0c:6d:ce:2f:ae:2f:2a:e8:8a:45:52:c8:21:1a:
                    2c:4f:a5:06:20:01:c8:e4:f6:0a:6b:52:79:06:53:
                    5e:5a:e9:e5:26:22:d1:21:43:12:ab:1d:41:44:af:
                    47:0e:3a:55:db:c3:1b:29:dd:54:30:f4:0b:b0:64:
                    97:d6:08:31:82:d0:10:c7:65:c6:05:8b:a9:37:02:
                    30:81:83:fa:90:64:a8:8c:7a:da:dd:b8:51:24:00:
                    69:e0:34:bb:63:e5:78:5d:df:a3:8e:24:78:0e:7a:
                    0f:77:d4:14:83:69:45:7a:0e:43:5a:34:37:28:d3:
                    3a:79:18:de:d2:69:cd:28:fb:41:aa:aa:3a:d1:30:
                    38:ba:ea:85:cb:ff:af:61:2c:e5:ca:09:0b:24:6e:
                    87:3c:47:ba:89:7f:c8:d5:87:75:1f:bc:32:0a:3f:
                    45:bc:17:f9:53:cf:c6:f3:df:0f:c4:83:25:0f:39:
                    3f:98:31:ce:eb:5f:eb:b7:54:4f:3d:b3:7d:7e:13:
                    ba:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:45:87:FA:EC:E4:05:2B:00:AC:8E:4C:A7:0A:97:C1:37:54:B7:DD
            X509v3 Authority Key Identifier:
                keyid:78:57:24:BA:2C:79:C3:1B:8A:2D:A5:45:06:CA:E7:88:6E:A0:6B:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/323830343a313263633a383030303a3a2f33362d3336203d3e20323633343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12cc:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         24:27:23:40:38:93:9b:16:cb:68:75:df:4f:f1:7f:a8:d5:07:
         08:05:21:6e:af:70:3e:33:84:fb:7e:8a:7b:d2:6c:d4:6f:be:
         7e:4a:8c:10:75:04:9c:9a:5e:dd:a5:b0:08:8e:6e:f3:e0:e5:
         8d:ef:cb:ae:ec:b7:b4:53:b7:79:0e:40:42:55:09:a8:b6:20:
         45:f1:3e:4c:88:cb:3d:f3:ee:26:e6:6b:89:e6:e7:df:3f:21:
         e5:42:43:2d:cc:6e:5e:05:1b:c4:87:23:b3:28:f2:9f:88:09:
         7b:d6:a3:a1:19:ff:6c:8b:43:1e:61:89:36:9d:89:9b:d5:17:
         3e:61:dd:65:11:89:0b:8d:b7:59:ed:28:80:b5:06:d6:58:cf:
         d7:aa:70:49:7e:d0:48:ad:5b:3f:39:61:93:60:d3:41:71:6e:
         8c:60:37:8d:32:d6:f7:fe:11:f7:b0:45:97:f9:bb:b4:cd:a7:
         fc:8a:11:d7:39:f6:fd:f8:4c:b7:25:dc:41:97:27:8b:16:09:
         f7:c5:96:64:86:0d:fa:5b:ef:08:15:25:be:89:02:bc:d2:8b:
         8d:a8:77:0c:9f:ea:ee:a8:ce:c0:76:45:02:b0:47:5e:5b:97:
         6d:64:e2:4a:57:e9:ed:0b:b1:98:7d:a4:4b:37:98:99:a0:c8:
         7c:98:53:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:22:26 2026 by rpki-client