Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/323830343a333661303a3a2f33322d3332203d3e20323636333630.roa
File:                     323830343a333661303a3a2f33322d3332203d3e20323636333630.roa (raw, json)
Hash identifier:          iAhbAREgvlvvGjmhQobwofr8fbbosLwl+aNXAzWEAmQ=
Subject key identifier:   51:D7:B2:51:15:A7:F9:BA:64:34:65:FF:63:F7:91:90:83:12:E9:47
Certificate issuer:       /CN=D600665C768DDDD6F0854F9E530DA1E46582EB84
Certificate serial:       3718F71FFC56E38D1E675630DD881B1057DD0986
Authority key identifier: D6:00:66:5C:76:8D:DD:D6:F0:85:4F:9E:53:0D:A1:E4:65:82:EB:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D600665C768DDDD6F0854F9E530DA1E46582EB84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/323830343a333661303a3a2f33322d3332203d3e20323636333630.roa
Signing time:             Wed 08 Jul 2026 14:19:41 +0000
ROA not before:           Wed 08 Jul 2026 14:14:41 +0000
ROA not after:            Wed 07 Jul 2027 14:19:41 +0000
asID:                     266360
IP address blocks:        2804:36a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/D600665C768DDDD6F0854F9E530DA1E46582EB84.crl
                          rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/D600665C768DDDD6F0854F9E530DA1E46582EB84.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D600665C768DDDD6F0854F9E530DA1E46582EB84.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:18:f7:1f:fc:56:e3:8d:1e:67:56:30:dd:88:1b:10:57:dd:09:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D600665C768DDDD6F0854F9E530DA1E46582EB84
        Validity
            Not Before: Jul  8 14:14:41 2026 GMT
            Not After : Jul  7 14:19:41 2027 GMT
        Subject: CN=51D7B25115A7F9BA643465FF63F791908312E947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:48:34:00:b7:9e:56:43:e0:80:35:7c:d2:0c:
                    40:89:97:05:ef:a1:46:fa:dd:d4:59:af:f9:18:0d:
                    83:64:bf:fc:18:fa:a6:a9:88:e6:8f:85:1e:0e:70:
                    ab:df:91:ee:e4:23:c4:97:64:cb:cd:47:39:32:71:
                    e5:13:05:b0:69:f2:53:d1:28:74:77:a2:1e:0d:3e:
                    1f:8d:e6:73:ac:db:72:eb:ea:d9:d0:9d:d3:e5:d0:
                    1e:e6:00:88:58:aa:6f:57:70:f6:5e:36:f2:65:00:
                    d9:1f:9a:54:73:40:df:f5:97:f0:0f:ae:b2:14:9b:
                    b7:f1:97:a0:1b:fe:79:67:11:ff:e2:e5:dc:5a:3e:
                    e0:e4:4c:50:c3:67:ef:d0:3b:04:c4:0b:4d:a3:b0:
                    61:d1:e9:0c:44:07:e2:61:59:84:e0:56:f4:de:83:
                    8f:f5:1d:ad:ad:34:3c:52:e0:79:f6:94:c7:4e:d4:
                    60:e7:52:50:ac:a8:56:41:3b:ef:de:8d:1a:3b:34:
                    f9:66:b2:82:9d:63:14:37:dd:da:e9:59:f4:ad:17:
                    5e:0b:80:a6:f2:e8:93:ce:a0:23:d0:c7:29:f3:a0:
                    39:a2:c3:c4:d0:09:67:62:a7:27:8e:4d:ad:2d:bd:
                    00:37:4c:93:01:e3:81:a5:8f:0d:ac:75:de:1c:6e:
                    1c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D7:B2:51:15:A7:F9:BA:64:34:65:FF:63:F7:91:90:83:12:E9:47
            X509v3 Authority Key Identifier:
                keyid:D6:00:66:5C:76:8D:DD:D6:F0:85:4F:9E:53:0D:A1:E4:65:82:EB:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/D600665C768DDDD6F0854F9E530DA1E46582EB84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D600665C768DDDD6F0854F9E530DA1E46582EB84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/323830343a333661303a3a2f33322d3332203d3e20323636333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         da:0e:36:71:9d:41:1d:2c:95:29:64:91:b0:b1:3a:38:a6:fb:
         9b:09:b9:3c:ef:c7:30:1d:f0:73:78:b7:e3:e9:3b:8f:c4:eb:
         38:8a:33:01:aa:ec:ca:d5:46:39:0b:78:a7:e7:ce:67:d9:38:
         b7:08:d7:59:bb:7c:ac:cb:8a:04:b1:41:b4:39:08:31:59:98:
         93:12:ba:54:83:c4:98:38:37:57:9b:3f:23:22:33:f4:d9:47:
         d6:d5:e3:3e:84:6f:94:43:a4:dd:79:2b:91:4f:d6:b1:dd:3d:
         02:67:50:ec:a1:3a:c0:32:3a:9c:ff:0f:b1:a7:67:88:4b:e6:
         45:1a:9e:eb:77:66:b8:fa:4d:8f:a3:38:f7:f5:d0:d3:ff:67:
         40:d8:6a:f7:60:33:0a:9f:56:1e:ee:9c:3b:af:87:51:c3:e5:
         35:24:b4:36:02:85:20:7f:da:d6:38:59:19:39:cf:e4:1e:ae:
         1f:0b:b2:3d:84:e4:38:96:06:1f:fc:2c:b9:fa:0c:54:f2:18:
         1a:22:dd:aa:72:59:25:78:9b:9c:83:1b:d9:da:3a:72:50:eb:
         80:e4:14:0f:c2:69:8a:a5:e0:00:10:8f:76:28:12:a4:c7:7f:
         19:46:3f:83:3e:a5:01:89:e5:45:7b:6d:88:f9:f8:99:bd:0c:
         49:2c:0c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 20:11:20 2026 by rpki-client