Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4AvM7YmRGJce7jJZ7MpGin3DVtkEj6ULeGEBmb72jHzb/0/323830343a346433343a3a2f33322d3438203d3e20323637343138.roa
File:                     323830343a346433343a3a2f33322d3438203d3e20323637343138.roa (raw, json)
Hash identifier:          UpOtC4wX5t5zMu8WDBDuUjlTXDMeEtehZeHoCH0zgTQ=
Subject key identifier:   67:66:B6:7A:CA:B7:91:5B:06:C5:7E:B5:8D:67:75:00:87:70:72:D7
Certificate issuer:       /CN=789E686AAC6DA051CABE4483E816BFD4D37A2E3A
Certificate serial:       6002DE0F2D18E1415F49157A1D8BE77878C5F1F0
Authority key identifier: 78:9E:68:6A:AC:6D:A0:51:CA:BE:44:83:E8:16:BF:D4:D3:7A:2E:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/789E686AAC6DA051CABE4483E816BFD4D37A2E3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4AvM7YmRGJce7jJZ7MpGin3DVtkEj6ULeGEBmb72jHzb/0/323830343a346433343a3a2f33322d3438203d3e20323637343138.roa
Signing time:             Sat 13 Jun 2026 19:53:18 +0000
ROA not before:           Sat 13 Jun 2026 19:48:18 +0000
ROA not after:            Sat 12 Jun 2027 19:53:18 +0000
asID:                     267418
IP address blocks:        2804:4d34::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4AvM7YmRGJce7jJZ7MpGin3DVtkEj6ULeGEBmb72jHzb/0/789E686AAC6DA051CABE4483E816BFD4D37A2E3A.crl
                          rsync://rpki-repo.registro.br/repo/4AvM7YmRGJce7jJZ7MpGin3DVtkEj6ULeGEBmb72jHzb/0/789E686AAC6DA051CABE4483E816BFD4D37A2E3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/789E686AAC6DA051CABE4483E816BFD4D37A2E3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 08:15:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:02:de:0f:2d:18:e1:41:5f:49:15:7a:1d:8b:e7:78:78:c5:f1:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=789E686AAC6DA051CABE4483E816BFD4D37A2E3A
        Validity
            Not Before: Jun 13 19:48:18 2026 GMT
            Not After : Jun 12 19:53:18 2027 GMT
        Subject: CN=6766B67ACAB7915B06C57EB58D677500877072D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fc:48:6e:e7:68:f2:ac:9b:bb:84:6a:f4:f7:
                    fd:08:3d:35:68:57:f4:52:b2:21:21:77:e3:f5:bd:
                    5c:8d:bf:ab:4e:74:dd:7a:df:42:91:ff:94:17:89:
                    9d:69:41:67:4e:c1:c9:6e:d2:de:7b:5c:4d:bd:52:
                    7b:59:4d:85:8e:b2:05:37:41:51:fe:0b:07:ce:2d:
                    3c:25:45:99:bd:27:e9:b6:38:d3:ae:d9:00:02:b6:
                    95:68:57:3b:9b:0f:df:40:56:e7:23:0e:a3:09:69:
                    a3:41:16:06:5a:29:61:70:81:e7:e7:0b:68:59:de:
                    d6:46:04:ee:65:8c:e5:77:0a:e6:17:b7:ab:49:a7:
                    f3:cc:fe:5f:39:92:eb:f9:84:81:3a:d5:99:d2:bb:
                    bb:c4:54:a5:7b:f7:05:8d:16:3b:49:ce:52:4e:25:
                    3c:81:41:cc:d7:0b:63:09:f3:35:83:70:f8:81:34:
                    88:d1:d4:58:38:f6:bd:c4:8c:31:3c:e9:e6:5b:1f:
                    16:47:8c:f1:c2:a1:92:7d:87:11:b4:08:0f:7e:6b:
                    a6:02:00:56:bf:f2:0e:1c:f5:0d:fd:99:c2:37:28:
                    52:fe:85:e9:9f:6e:9e:67:eb:19:af:c3:e7:22:62:
                    3c:d4:82:dd:8d:e9:ce:3d:0a:3e:09:bb:a8:3a:e9:
                    50:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:66:B6:7A:CA:B7:91:5B:06:C5:7E:B5:8D:67:75:00:87:70:72:D7
            X509v3 Authority Key Identifier:
                keyid:78:9E:68:6A:AC:6D:A0:51:CA:BE:44:83:E8:16:BF:D4:D3:7A:2E:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4AvM7YmRGJce7jJZ7MpGin3DVtkEj6ULeGEBmb72jHzb/0/789E686AAC6DA051CABE4483E816BFD4D37A2E3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/789E686AAC6DA051CABE4483E816BFD4D37A2E3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4AvM7YmRGJce7jJZ7MpGin3DVtkEj6ULeGEBmb72jHzb/0/323830343a346433343a3a2f33322d3438203d3e20323637343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d34::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:5f:df:80:9d:c4:73:ec:13:36:98:4f:69:b7:b9:e9:86:20:
         94:da:5d:1d:b4:e9:e1:d9:4e:06:0f:ce:9f:78:b9:e9:cf:9d:
         25:7d:b8:c1:5d:33:31:79:66:11:25:cb:fc:27:59:41:6b:77:
         c1:e6:0b:ea:98:ee:87:b0:b5:2c:d4:8b:75:68:d1:05:d2:42:
         0d:83:5e:af:6a:c8:ba:c7:06:5e:2b:10:f9:13:75:03:a3:65:
         05:c2:85:b8:42:fc:b3:39:b1:2a:52:cc:dd:80:9b:7f:1e:4c:
         2b:19:2b:ac:35:08:74:4b:15:ae:55:d3:3a:1c:89:b2:83:8a:
         9b:6e:10:8e:f2:ed:50:99:4a:fe:71:5c:db:a8:d2:68:5a:1f:
         c7:41:23:26:28:2f:e9:22:19:b5:82:89:88:1f:a5:f5:e5:1d:
         c2:6a:c1:d3:5d:cd:d6:05:e1:dd:db:93:c2:d9:60:55:69:85:
         8d:a5:b6:40:be:14:78:b9:27:f3:90:3b:7c:8f:14:32:2d:8a:
         d8:62:6c:ea:06:6f:38:7c:4e:24:41:1f:09:60:b8:76:94:40:
         bf:1b:ba:4a:b8:78:3e:49:b1:86:e3:93:9a:25:27:fe:9e:26:
         7a:d1:ea:f0:73:29:76:0f:53:be:1d:f4:ea:f3:04:29:1f:65:
         8f:e1:8f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 14:07:08 2026 by rpki-client