Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/323830343a313263633a633030303a3a2f33362d3336203d3e20323633343939.roa
File:                     323830343a313263633a633030303a3a2f33362d3336203d3e20323633343939.roa (raw, json)
Hash identifier:          G3CGlEXz1u3QM/KJUaJaBd9UoC4JnEcLhySZSOJHHZs=
Subject key identifier:   D8:3C:47:03:25:48:F8:88:3A:59:E9:89:91:EA:78:57:28:C0:C6:CC
Certificate issuer:       /CN=785724BA2C79C31B8A2DA54506CAE7886EA06BE7
Certificate serial:       15D0434465F2706F4D939B85EBD8FD21A3DE19D1
Authority key identifier: 78:57:24:BA:2C:79:C3:1B:8A:2D:A5:45:06:CA:E7:88:6E:A0:6B:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/323830343a313263633a633030303a3a2f33362d3336203d3e20323633343939.roa
Signing time:             Thu 11 Jun 2026 18:23:37 +0000
ROA not before:           Thu 11 Jun 2026 18:18:37 +0000
ROA not after:            Thu 10 Jun 2027 18:23:37 +0000
asID:                     263499
IP address blocks:        2804:12cc:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl
                          rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d0:43:44:65:f2:70:6f:4d:93:9b:85:eb:d8:fd:21:a3:de:19:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785724BA2C79C31B8A2DA54506CAE7886EA06BE7
        Validity
            Not Before: Jun 11 18:18:37 2026 GMT
            Not After : Jun 10 18:23:37 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1a:8c:ca:7a:0f:3f:a3:34:e6:fd:87:aa:d0:
                    62:75:3c:6a:b2:b0:bd:f3:30:2c:87:ec:0d:83:f5:
                    fc:ee:36:f1:f6:cb:42:6a:a6:2b:43:91:d6:e1:fa:
                    9c:4e:dd:0b:87:6c:02:22:d6:f1:35:c1:98:aa:b1:
                    54:00:bc:c2:df:0e:de:05:62:03:dd:5d:aa:14:48:
                    0d:45:44:15:36:a1:2a:b9:26:8f:03:35:39:a7:a4:
                    48:d2:21:c8:4f:2f:86:dd:a7:db:e7:f6:d5:4a:cb:
                    61:f7:a5:95:61:da:be:d9:bf:46:35:ca:c8:3a:8f:
                    17:2b:e6:58:c8:97:94:96:9e:3f:e1:33:82:23:9a:
                    07:c8:11:39:69:84:96:41:21:b4:ee:27:3f:9e:f5:
                    40:64:09:9d:48:2f:b1:29:76:98:1f:18:b1:b9:ec:
                    92:90:db:41:5f:aa:7c:13:a6:e7:48:cb:ec:cd:a7:
                    f9:a7:0f:d8:e9:6f:4a:99:04:4e:bf:5b:99:d5:ad:
                    08:99:df:bf:13:14:0a:61:71:b4:eb:c8:33:6c:c7:
                    c3:f1:94:19:7c:8b:6f:cb:a7:b5:08:3f:a5:68:fe:
                    1f:8c:d2:3c:d6:8e:a5:e2:37:00:20:6a:d7:97:62:
                    5c:8b:d8:0d:8f:6e:28:2d:31:b3:ae:0f:10:2a:d4:
                    ef:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:3C:47:03:25:48:F8:88:3A:59:E9:89:91:EA:78:57:28:C0:C6:CC
            X509v3 Authority Key Identifier:
                keyid:78:57:24:BA:2C:79:C3:1B:8A:2D:A5:45:06:CA:E7:88:6E:A0:6B:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/323830343a313263633a633030303a3a2f33362d3336203d3e20323633343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12cc:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         61:76:9c:7b:79:c6:44:99:50:bd:e3:7e:40:6e:76:66:b8:fa:
         01:d9:43:ab:37:ee:98:10:4a:cd:c1:66:ae:0a:e9:6c:09:cf:
         78:b1:5d:03:a8:b8:a0:7e:b5:3c:75:65:3a:25:41:91:e5:06:
         23:c2:98:f3:db:c7:19:27:cb:7c:1c:57:c1:43:ee:04:02:41:
         3c:d9:e4:e5:fe:c5:65:aa:92:23:cf:98:6a:2f:fe:83:50:a2:
         cc:56:fc:4b:d9:2d:b3:6d:f6:3a:41:49:8d:ca:ef:fb:a4:1b:
         df:a9:da:07:0a:5d:a4:55:19:82:5d:ef:d4:14:df:24:ca:c3:
         ab:b0:6b:8a:d0:7c:7f:86:20:22:ae:8e:6b:ad:0a:f8:d2:1c:
         39:80:30:4b:43:2f:7e:e9:a1:66:7f:e4:d7:58:f7:5c:20:40:
         17:d7:e6:df:47:0e:1b:1c:1d:d2:35:2f:51:e6:91:e0:04:b1:
         a6:6a:5f:71:77:4b:b4:ad:8a:5b:f9:2f:b7:a1:87:82:44:00:
         b6:90:98:cb:aa:de:68:32:4b:b0:02:0e:6d:47:9e:f6:f8:90:
         67:03:c4:7c:14:2b:33:a1:14:96:af:c9:0d:68:3a:49:ce:12:
         e5:a6:34:18:65:c3:f7:22:7f:91:9c:bc:a4:69:5b:b1:b5:09:
         2a:66:89:42
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUFdBDRGXycG9Nk5uF69j9IaPeGdEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzg1NzI0QkEyQzc5QzMxQjhBMkRBNTQ1MDZDQUU3ODg2
RUEwNkJFNzAeFw0yNjA2MTExODE4MzdaFw0yNzA2MTAxODIzMzdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUQxQThDQ0E3QTBGM0ZBMzM0
RTZGRDg3QUFEMDYyNzUzQzZBQjJCMEJERjMzMDJDODdFQzBEODNGNUZDRUUzNkYx
RjZDQjQyNkFBNjJCNDM5MUQ2RTFGQTlDNEVERDBCODc2QzAyMjJENkYxMzVDMTk4
QUFCMTU0MDBCQ0MyREYwRURFMDU2MjAzREQ1REFBMTQ0ODBENDU0NDE1MzZBMTJB
QjkyNjhGMDMzNTM5QTdBNDQ4RDIyMUM4NEYyRjg2RERBN0RCRTdGNkQ1NEFDQjYx
RjdBNTk1NjFEQUJFRDlCRjQ2MzVDQUM4M0E4RjE3MkJFNjU4Qzg5Nzk0OTY5RTNG
RTEzMzgyMjM5QTA3QzgxMTM5Njk4NDk2NDEyMUI0RUUyNzNGOUVGNTQwNjQwOTlE
NDgyRkIxMjk3Njk4MUYxOEIxQjlFQzkyOTBEQjQxNUZBQTdDMTNBNkU3NDhDQkVD
Q0RBN0Y5QTcwRkQ4RTk2RjRBOTkwNDRFQkY1Qjk5RDVBRDA4OTlERkJGMTMxNDBB
NjE3MUI0RUJDODMzNkNDN0MzRjE5NDE5N0M4QjZGQ0JBN0I1MDgzRkE1NjhGRTFG
OENEMjNDRDY4RUE1RTIzNzAwMjA2QUQ3OTc2MjVDOEJEODBEOEY2RTI4MkQzMUIz
QUUwRjEwMkFENEVGNDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAnRqMynoPP6M05v2HqtBidTxqsrC98zAsh+wNg/X87jbx9stCaqYr
Q5HW4fqcTt0Lh2wCItbxNcGYqrFUALzC3w7eBWID3V2qFEgNRUQVNqEquSaPAzU5
p6RI0iHITy+G3afb5/bVSsth96WVYdq+2b9GNcrIOo8XK+ZYyJeUlp4/4TOCI5oH
yBE5aYSWQSG07ic/nvVAZAmdSC+xKXaYHxixueySkNtBX6p8E6bnSMvszaf5pw/Y
6W9KmQROv1uZ1a0Imd+/ExQKYXG068gzbMfD8ZQZfItvy6e1CD+laP4fjNI81o6l
4jcAIGrXl2Jci9gNj24oLTGzrg8QKtTvQQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FNg8RwMlSPiIOlnpiZHqeFcowMbMMB8GA1UdIwQYMBaAFHhXJLosecMbii2lRQbK
54huoGvnMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0N0N0hCSzRiNkszdXFy
Zm1vSkZCQ1RqZEdVb2hMd1JxWlhTWlFYek5LcjFGLzEvNzg1NzI0QkEyQzc5QzMx
QjhBMkRBNTQ1MDZDQUU3ODg2RUEwNkJFNy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS83ODU3MjRCQTJDNzlDMzFCOEEyREE1NDUwNkNBRTc4ODZFQTA2
QkU3LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DdDdIQks0YjZLM3VxcmZtb0pG
QkNUamRHVW9oTHdScVpYU1pRWHpOS3IxRi8xLzMyMzgzMDM0M2EzMTMyNjM2MzNh
NjMzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzMzNDM5Mzkucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQoBBLMwDANBgkqhkiG9w0BAQsFAAOCAQEAYXace3nGRJlQveN+QG52
Zrj6AdlDqzfumBBKzcFmrgrpbAnPeLFdA6i4oH61PHVlOiVBkeUGI8KY89vHGSfL
fBxXwUPuBAJBPNnk5f7FZaqSI8+Yai/+g1CizFb8S9kts232OkFJjcrv+6Qb36na
BwpdpFUZgl3v1BTfJMrDq7BritB8f4YgIq6Oa60K+NIcOYAwS0MvfumhZn/k11j3
XCBAF9fm30cOGxwd0jUvUeaR4ASxpmpfcXdLtK2KW/kvt6GHgkQAtpCYy6reaDJL
sAIObUee9viQZwPEfBQrM6EUlq/JDWg6Sc4S5aY0GGXD9yJ/kZy8pGlbsbUJKmaJ
Qg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:22:27 2026 by rpki-client