Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9G7kNKks12igDfJDbs4pSppgtQCr616FsmBfzofbR4JE/0/323830343a343732633a3a2f33322d3336203d3e20323637303336.roa
File:                     323830343a343732633a3a2f33322d3336203d3e20323637303336.roa (raw, json)
Hash identifier:          u1kXfxB+eqhlc3T8XA8lzvfdBb9KQQx2T+Q9Ztgq7Do=
Subject key identifier:   9E:58:1A:4C:78:B7:4A:B9:B7:7F:AA:99:63:FF:83:09:04:82:F4:F0
Certificate issuer:       /CN=B44D3F216BC388705EB728F618C985D7B6CB8F81
Certificate serial:       51A53F041120542FDC16C9940DE1514EC2097637
Authority key identifier: B4:4D:3F:21:6B:C3:88:70:5E:B7:28:F6:18:C9:85:D7:B6:CB:8F:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B44D3F216BC388705EB728F618C985D7B6CB8F81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9G7kNKks12igDfJDbs4pSppgtQCr616FsmBfzofbR4JE/0/323830343a343732633a3a2f33322d3336203d3e20323637303336.roa
Signing time:             Wed 24 Jun 2026 17:47:55 +0000
ROA not before:           Wed 24 Jun 2026 17:42:55 +0000
ROA not after:            Wed 23 Jun 2027 17:47:55 +0000
asID:                     267036
IP address blocks:        2804:472c::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9G7kNKks12igDfJDbs4pSppgtQCr616FsmBfzofbR4JE/0/B44D3F216BC388705EB728F618C985D7B6CB8F81.crl
                          rsync://rpki-repo.registro.br/repo/9G7kNKks12igDfJDbs4pSppgtQCr616FsmBfzofbR4JE/0/B44D3F216BC388705EB728F618C985D7B6CB8F81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B44D3F216BC388705EB728F618C985D7B6CB8F81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 03:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a5:3f:04:11:20:54:2f:dc:16:c9:94:0d:e1:51:4e:c2:09:76:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B44D3F216BC388705EB728F618C985D7B6CB8F81
        Validity
            Not Before: Jun 24 17:42:55 2026 GMT
            Not After : Jun 23 17:47:55 2027 GMT
        Subject: CN=9E581A4C78B74AB9B77FAA9963FF83090482F4F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9d:9d:33:46:67:6d:eb:44:ab:03:33:f3:58:
                    b1:ca:4d:2c:42:9f:ec:20:ef:ec:a7:60:5d:da:27:
                    35:9c:c9:17:88:fa:4a:c4:ad:fe:09:db:16:17:af:
                    c8:16:80:cf:df:3b:7d:5a:b0:ae:35:08:e9:cf:86:
                    57:3f:d3:01:8f:58:ce:c5:eb:7b:b2:c2:cf:04:d3:
                    a8:59:d6:ee:3d:04:8c:21:91:23:bf:3b:d4:d9:ce:
                    51:9d:23:d9:0f:b5:65:34:99:e1:aa:89:69:36:a1:
                    f5:ea:1f:57:76:ce:72:2a:8b:13:50:af:c6:50:2e:
                    24:81:a9:0e:a6:b5:33:c8:e6:c3:74:89:5e:fa:38:
                    33:77:ae:f0:a3:b0:db:10:70:ea:7d:be:87:35:2a:
                    e2:96:e1:6f:11:bd:9e:c5:da:e7:ab:74:be:6d:35:
                    32:55:86:25:c1:1d:53:cb:98:45:3e:0d:99:a0:ff:
                    1f:68:91:6a:d4:1a:b0:32:5b:db:16:dd:4d:13:b3:
                    13:41:23:ab:86:ce:db:bb:4e:7f:b7:bd:a8:c0:4a:
                    26:97:fc:20:5d:ba:07:b2:7e:54:57:3f:15:e8:26:
                    71:a6:92:c6:9c:21:1b:08:55:f3:09:e8:9b:69:f4:
                    af:4c:37:a9:80:93:cf:d0:92:d4:5f:58:e3:66:15:
                    52:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:58:1A:4C:78:B7:4A:B9:B7:7F:AA:99:63:FF:83:09:04:82:F4:F0
            X509v3 Authority Key Identifier:
                keyid:B4:4D:3F:21:6B:C3:88:70:5E:B7:28:F6:18:C9:85:D7:B6:CB:8F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9G7kNKks12igDfJDbs4pSppgtQCr616FsmBfzofbR4JE/0/B44D3F216BC388705EB728F618C985D7B6CB8F81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B44D3F216BC388705EB728F618C985D7B6CB8F81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9G7kNKks12igDfJDbs4pSppgtQCr616FsmBfzofbR4JE/0/323830343a343732633a3a2f33322d3336203d3e20323637303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:472c::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:c3:bc:8b:d8:1f:bf:2b:64:34:c6:ad:62:1e:01:53:fd:74:
         bc:a7:c8:40:95:c7:1a:72:4f:16:03:dd:a3:f2:a9:c9:ad:fb:
         95:35:ed:e0:f1:52:70:62:84:3c:e7:14:a2:18:95:83:81:28:
         d6:4a:11:cb:cb:f9:ce:51:75:50:33:6d:ae:8a:25:6c:f8:76:
         34:54:25:d9:59:81:ee:f6:b4:3e:4a:a4:4d:90:64:61:67:c7:
         2f:6f:de:aa:3c:97:79:11:9c:f4:b0:0f:cc:d2:ca:bb:2f:91:
         2e:44:35:ba:84:64:f3:14:6d:84:b6:0a:76:4d:9b:69:bd:bb:
         e8:cf:04:4f:ec:0c:4b:cf:c6:ef:21:cd:dd:a7:58:72:10:c4:
         79:63:1c:a6:2f:b2:1f:d6:b4:cb:db:c2:06:b0:e9:2b:33:1a:
         2b:bc:ef:03:70:95:22:b2:0a:18:3e:2c:9a:ee:43:3c:26:bc:
         10:0a:bc:0d:14:b6:3a:24:54:61:ca:e5:4d:1d:21:5b:d2:c5:
         19:db:08:e7:66:3b:a5:06:7a:ae:9e:8e:a2:d0:04:05:71:df:
         0f:71:3a:9e:db:48:4a:de:fc:3b:ef:3e:2c:76:08:06:4f:b4:
         ef:0f:45:ed:ef:51:93:40:ea:bb:65:8e:35:a0:6d:ab:a3:e3:
         3c:38:2c:37
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUUaU/BBEgVC/cFsmUDeFRTsIJdjcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ0RDNGMjE2QkMzODg3MDVFQjcyOEY2MThDOTg1RDdC
NkNCOEY4MTAeFw0yNjA2MjQxNzQyNTVaFw0yNzA2MjMxNzQ3NTVaMDMxMTAvBgNV
BAMTKDlFNTgxQTRDNzhCNzRBQjlCNzdGQUE5OTYzRkY4MzA5MDQ4MkY0RjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2nZ0zRmdt60SrAzPzWLHKTSxC
n+wg7+ynYF3aJzWcyReI+krErf4J2xYXr8gWgM/fO31asK41COnPhlc/0wGPWM7F
63uyws8E06hZ1u49BIwhkSO/O9TZzlGdI9kPtWU0meGqiWk2ofXqH1d2znIqixNQ
r8ZQLiSBqQ6mtTPI5sN0iV76ODN3rvCjsNsQcOp9voc1KuKW4W8RvZ7F2uerdL5t
NTJVhiXBHVPLmEU+DZmg/x9okWrUGrAyW9sW3U0TsxNBI6uGztu7Tn+3vajASiaX
/CBdugeyflRXPxXoJnGmksacIRsIVfMJ6Jtp9K9MN6mAk8/QktRfWONmFVLhAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUnlgaTHi3Srm3f6qZY/+DCQSC9PAwHwYDVR0j
BBgwFoAUtE0/IWvDiHBetyj2GMmF17bLj4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUc3a05La3MxMmlnRGZKRGJzNHBTcHBndFFDcjYxNkZzbUJmem9mYlI0
SkUvMC9CNDREM0YyMTZCQzM4ODcwNUVCNzI4RjYxOEM5ODVEN0I2Q0I4RjgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0NEQzRjIxNkJDMzg4NzA1
RUI3MjhGNjE4Qzk4NUQ3QjZDQjhGODEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlHN2tOS2tzMTJpZ0RmSkRiczRwU3BwZ3RRQ3I2MTZGc21CZnpvZmJSNEpFLzAv
MzIzODMwMzQzYTM0MzczMjYzM2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNjM3
MzAzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARHLDANBgkqhkiG9w0BAQsFAAOCAQEArcO8i9gf
vytkNMatYh4BU/10vKfIQJXHGnJPFgPdo/Kpya37lTXt4PFScGKEPOcUohiVg4Eo
1koRy8v5zlF1UDNtroolbPh2NFQl2VmB7va0PkqkTZBkYWfHL2/eqjyXeRGc9LAP
zNLKuy+RLkQ1uoRk8xRthLYKdk2bab276M8ET+wMS8/G7yHN3adYchDEeWMcpi+y
H9a0y9vCBrDpKzMaK7zvA3CVIrIKGD4smu5DPCa8EAq8DRS2OiRUYcrlTR0hW9LF
GdsI52Y7pQZ6rp6OotAEBXHfD3E6nttISt78O+8+LHYIBk+07w9F7e9Rk0Dqu2WO
NaBtq6PjPDgsNw==
-----END CERTIFICATE-----
Generated at Wed Jul 8 16:09:02 2026 by rpki-client