Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/323830343a313263633a3a2f33362d3336203d3e20323633343939.roa
File:                     323830343a313263633a3a2f33362d3336203d3e20323633343939.roa (raw, json)
Hash identifier:          x0sGwgfEma/u20zGs9va+UdQXd+f7RgGjV2+tMDWin0=
Subject key identifier:   E9:9A:32:25:50:3F:14:F9:E8:BB:E4:D1:63:E2:8C:B1:1F:AA:3B:DC
Certificate issuer:       /CN=785724BA2C79C31B8A2DA54506CAE7886EA06BE7
Certificate serial:       67ECD0B2C140C3F4182E336E9A026F37B998FB76
Authority key identifier: 78:57:24:BA:2C:79:C3:1B:8A:2D:A5:45:06:CA:E7:88:6E:A0:6B:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/323830343a313263633a3a2f33362d3336203d3e20323633343939.roa
Signing time:             Thu 11 Jun 2026 18:24:23 +0000
ROA not before:           Thu 11 Jun 2026 18:19:23 +0000
ROA not after:            Thu 10 Jun 2027 18:24:23 +0000
asID:                     263499
IP address blocks:        2804:12cc::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl
                          rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ec:d0:b2:c1:40:c3:f4:18:2e:33:6e:9a:02:6f:37:b9:98:fb:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785724BA2C79C31B8A2DA54506CAE7886EA06BE7
        Validity
            Not Before: Jun 11 18:19:23 2026 GMT
            Not After : Jun 10 18:24:23 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:39:82:5d:ec:e3:5c:64:7c:e7:80:c5:05:21:
                    b0:48:22:22:b5:19:35:0d:c7:2b:23:44:5e:9c:94:
                    ab:62:eb:af:1d:9a:98:fd:ad:1f:9b:c0:85:ce:ca:
                    94:52:b4:cd:e7:e8:0e:de:59:31:88:1f:ca:28:40:
                    ba:1c:20:c5:ef:a6:46:b9:0c:06:82:5f:3a:cd:ca:
                    4f:4c:3e:53:39:5f:e2:34:c4:c7:9c:5b:ea:72:a2:
                    3b:a0:11:95:a8:68:b6:1d:22:31:b1:b1:d8:83:80:
                    59:a3:dd:27:d4:9f:ff:cf:c8:b0:0e:9f:c6:55:03:
                    1d:02:01:4b:9f:b4:f3:ae:05:7c:84:1f:d4:72:0d:
                    c9:26:2f:c1:75:8e:0c:9c:e0:11:6f:8e:5c:98:2e:
                    7d:3f:5d:7c:ca:e2:2d:23:ff:fd:f2:b3:1c:e6:b8:
                    1f:bc:79:68:f4:6c:82:50:ab:20:59:fd:c1:68:5c:
                    14:fc:12:50:e8:98:5d:9c:5a:f6:7e:59:81:d0:a3:
                    e5:4b:f4:01:3e:99:49:f9:b4:f7:71:39:56:c8:04:
                    0a:9b:d2:7d:57:83:26:8d:5a:91:2c:7e:fe:78:c4:
                    3e:62:9c:12:01:76:2a:32:93:d6:12:c3:5e:b1:38:
                    e3:f0:d6:84:74:60:4f:5e:e6:79:b3:12:05:1d:80:
                    b9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9A:32:25:50:3F:14:F9:E8:BB:E4:D1:63:E2:8C:B1:1F:AA:3B:DC
            X509v3 Authority Key Identifier:
                keyid:78:57:24:BA:2C:79:C3:1B:8A:2D:A5:45:06:CA:E7:88:6E:A0:6B:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/323830343a313263633a3a2f33362d3336203d3e20323633343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12cc::/36

    Signature Algorithm: sha256WithRSAEncryption
         7b:b5:2e:d2:c9:46:30:e6:64:74:f9:f8:e5:3b:7c:67:97:dd:
         a8:6a:ba:97:e6:54:b3:eb:88:69:22:2a:f6:ae:0b:64:b3:d1:
         3d:82:e4:e4:dd:87:55:98:c9:0a:42:fb:2f:ff:bd:ec:82:e6:
         e0:26:6b:11:62:c5:11:a9:d5:0f:91:5b:e2:22:21:e0:4b:e2:
         a8:13:a6:a1:9d:54:63:b8:ad:48:ea:6b:b5:4a:fe:25:64:ba:
         ba:d7:0d:cb:4f:cc:a5:a8:f6:17:bb:c7:0e:6a:60:58:89:8f:
         c2:e6:57:02:e4:78:fb:b6:ec:5c:8b:3d:32:ef:74:37:b2:35:
         fe:b9:9b:7c:00:d0:07:dd:69:49:ba:0c:9c:0d:dd:2f:95:31:
         bc:ee:20:7a:06:4f:94:c1:07:b1:13:fc:3f:a4:5b:00:d8:ba:
         5f:f5:52:a8:f2:6f:65:b3:6e:e9:5e:a9:bd:df:b2:d0:c9:12:
         70:25:44:35:b0:45:c7:24:68:2b:1e:ba:14:ca:7d:0b:2a:7a:
         36:30:f1:e5:f5:58:c0:3b:41:f5:3f:f4:4d:63:02:46:d3:4c:
         c8:37:37:64:11:55:4d:b6:82:16:80:72:81:a5:44:89:08:9a:
         82:fe:08:79:f5:a3:83:c3:9c:d4:2c:58:fe:c7:8d:69:d8:d0:
         c3:85:8a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:32:43 2026 by rpki-client