Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/323830343a313263633a653030303a3a2f33362d3336203d3e20323633343939.roa
File:                     323830343a313263633a653030303a3a2f33362d3336203d3e20323633343939.roa (raw, json)
Hash identifier:          FFNJ+MNoc3momWXXoIv3rzuQHKpmcCtV8xTCBlG7YJI=
Subject key identifier:   D8:A3:8E:6B:C9:BD:37:9D:DA:BF:47:36:85:A1:45:83:B9:45:76:67
Certificate issuer:       /CN=785724BA2C79C31B8A2DA54506CAE7886EA06BE7
Certificate serial:       652847543F0BA1A6CFEBB95610E9DA26C64D8E
Authority key identifier: 78:57:24:BA:2C:79:C3:1B:8A:2D:A5:45:06:CA:E7:88:6E:A0:6B:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/323830343a313263633a653030303a3a2f33362d3336203d3e20323633343939.roa
Signing time:             Thu 11 Jun 2026 18:23:37 +0000
ROA not before:           Thu 11 Jun 2026 18:18:37 +0000
ROA not after:            Thu 10 Jun 2027 18:23:37 +0000
asID:                     263499
IP address blocks:        2804:12cc:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl
                          rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:28:47:54:3f:0b:a1:a6:cf:eb:b9:56:10:e9:da:26:c6:4d:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785724BA2C79C31B8A2DA54506CAE7886EA06BE7
        Validity
            Not Before: Jun 11 18:18:37 2026 GMT
            Not After : Jun 10 18:23:37 2027 GMT
        Subject: CN=3082010A0282010100ED63E6312344B106F6799AE07079DB6EAB9C0B6E738C30A2700CFDA83414C7FB7FAC42EFE1FC8D2184F8D7E6858E0175C682664326F97A7F4EAA908AB63F99972738CB710E96D71BAB4DC83D1FCD4F5E1089FC8440A9F1060B19C9DF57689E0680766A4EC8B88E9823E1E140E1A9E9C5292835F2850CDBF1963ADAD0883FC60F53644511228EB2CA6C86BB8FCB7FF4F8FACE9D411EE2B8E4AC9510BA372519D0409A285EA498BECC4947997B1F065FACDEC2E5A6501C6F908668C2A299ED4F8233A9058FB220FAFD9FFCAD93DC4EF3A74A28670ED7633067D997109304556A7040A24689B4DC59E9BC3DC17DE5B346D2A34BB3A14E8CB21EF709E0F66AAEF1370203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:63:e6:31:23:44:b1:06:f6:79:9a:e0:70:79:
                    db:6e:ab:9c:0b:6e:73:8c:30:a2:70:0c:fd:a8:34:
                    14:c7:fb:7f:ac:42:ef:e1:fc:8d:21:84:f8:d7:e6:
                    85:8e:01:75:c6:82:66:43:26:f9:7a:7f:4e:aa:90:
                    8a:b6:3f:99:97:27:38:cb:71:0e:96:d7:1b:ab:4d:
                    c8:3d:1f:cd:4f:5e:10:89:fc:84:40:a9:f1:06:0b:
                    19:c9:df:57:68:9e:06:80:76:6a:4e:c8:b8:8e:98:
                    23:e1:e1:40:e1:a9:e9:c5:29:28:35:f2:85:0c:db:
                    f1:96:3a:da:d0:88:3f:c6:0f:53:64:45:11:22:8e:
                    b2:ca:6c:86:bb:8f:cb:7f:f4:f8:fa:ce:9d:41:1e:
                    e2:b8:e4:ac:95:10:ba:37:25:19:d0:40:9a:28:5e:
                    a4:98:be:cc:49:47:99:7b:1f:06:5f:ac:de:c2:e5:
                    a6:50:1c:6f:90:86:68:c2:a2:99:ed:4f:82:33:a9:
                    05:8f:b2:20:fa:fd:9f:fc:ad:93:dc:4e:f3:a7:4a:
                    28:67:0e:d7:63:30:67:d9:97:10:93:04:55:6a:70:
                    40:a2:46:89:b4:dc:59:e9:bc:3d:c1:7d:e5:b3:46:
                    d2:a3:4b:b3:a1:4e:8c:b2:1e:f7:09:e0:f6:6a:ae:
                    f1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A3:8E:6B:C9:BD:37:9D:DA:BF:47:36:85:A1:45:83:B9:45:76:67
            X509v3 Authority Key Identifier:
                keyid:78:57:24:BA:2C:79:C3:1B:8A:2D:A5:45:06:CA:E7:88:6E:A0:6B:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/323830343a313263633a653030303a3a2f33362d3336203d3e20323633343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12cc:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         39:8a:43:c2:04:f5:71:5b:73:55:62:19:21:82:7a:2b:61:5b:
         78:9e:da:bf:f1:a1:79:56:c3:d7:9a:cc:cb:71:16:ad:83:d5:
         d4:26:9b:42:6e:ff:df:60:4d:15:26:cf:48:0f:dd:29:e9:57:
         c0:e3:f0:80:18:bd:5e:3a:4c:78:89:e6:72:5d:3a:73:fe:26:
         2d:6f:e3:82:4b:5a:9a:3e:2f:83:5b:84:bb:11:fa:e3:42:52:
         37:e2:2f:10:95:b1:59:71:57:20:eb:e5:5c:50:b4:a3:f0:31:
         c8:aa:88:0e:2d:d3:13:3e:c9:3d:8f:3c:88:70:b4:dd:5e:61:
         ef:04:95:4c:f9:ca:aa:36:c0:d5:66:b8:18:c4:55:01:6f:01:
         ca:5a:03:b2:4c:e9:f8:0f:b5:89:cd:86:52:bb:1e:ba:7a:da:
         3d:f2:7c:8c:d5:a6:ac:a7:ab:4c:46:60:c7:05:0a:75:e7:a7:
         e4:36:a8:c9:26:27:78:44:0d:aa:71:57:84:39:44:9f:59:6b:
         6f:6a:12:52:f1:20:25:42:40:80:52:7c:82:e5:4d:87:cb:fb:
         d3:97:a3:29:f6:f9:7d:37:de:a4:c6:3e:a9:91:35:73:4c:4c:
         10:70:0d:b8:b3:8d:f1:0b:62:6f:9f:f6:e6:96:d0:bb:f3:37:
         bf:7c:67:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:22:27 2026 by rpki-client