Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a333a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a336437343a333a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          ph+q2yvKe4ZPURRez9hU9C1Pf09XUdIGYLqbesbY5HI=
Subject key identifier:   6E:36:BC:CA:FE:E4:1E:E6:19:E0:45:ED:A6:6A:A6:BB:D7:67:FB:E1
Certificate issuer:       /CN=C1CB366144D597E5C1773B22449337BACEB7A019
Certificate serial:       62569AB5C706F4F1C7BE6DCE78BB20A8CBF7C5AA
Authority key identifier: C1:CB:36:61:44:D5:97:E5:C1:77:3B:22:44:93:37:BA:CE:B7:A0:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1CB366144D597E5C1773B22449337BACEB7A019.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a333a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Thu 18 Jun 2026 11:38:55 +0000
ROA not before:           Thu 18 Jun 2026 11:33:55 +0000
ROA not after:            Thu 17 Jun 2027 11:38:55 +0000
asID:                     262617
IP address blocks:        2804:3d74:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/C1CB366144D597E5C1773B22449337BACEB7A019.crl
                          rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/C1CB366144D597E5C1773B22449337BACEB7A019.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1CB366144D597E5C1773B22449337BACEB7A019.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 00:18:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:56:9a:b5:c7:06:f4:f1:c7:be:6d:ce:78:bb:20:a8:cb:f7:c5:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1CB366144D597E5C1773B22449337BACEB7A019
        Validity
            Not Before: Jun 18 11:33:55 2026 GMT
            Not After : Jun 17 11:38:55 2027 GMT
        Subject: CN=6E36BCCAFEE41EE619E045EDA66AA6BBD767FBE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e1:9a:7d:4f:71:06:13:31:22:d2:41:bf:d5:
                    49:6b:43:d8:ce:0a:b6:05:5b:52:4a:f6:1b:83:04:
                    12:c3:a6:f2:33:dd:8e:9b:b0:79:fa:18:db:c5:d3:
                    c4:f2:8e:a3:d2:d1:f6:6a:fa:de:e7:38:95:b9:92:
                    8b:79:13:9b:54:11:c0:4a:52:4f:66:c6:40:e6:0c:
                    ed:05:90:5a:40:5b:16:82:5a:2a:b0:5f:67:7c:d2:
                    0f:90:89:d7:74:a5:4d:a8:05:c9:ec:3c:b7:b2:c8:
                    26:7c:b8:5d:91:7e:2f:a8:54:e0:41:5d:b5:33:f7:
                    61:ac:f5:8d:11:9d:72:6d:b5:48:22:e1:cf:1e:43:
                    41:f7:f8:e9:85:d9:3f:46:aa:8a:c9:04:a6:57:28:
                    cf:43:49:34:2a:71:2a:55:e0:86:06:cb:07:77:f8:
                    40:6b:9d:e3:c6:67:66:93:86:b9:fe:0b:eb:d8:9d:
                    9f:0d:19:1a:eb:dd:aa:f6:5c:fc:41:8a:d5:3c:fa:
                    df:0c:16:98:5e:b0:b4:69:3b:da:55:94:48:d1:22:
                    8e:4d:94:e8:95:f9:88:4f:d3:e6:f4:6f:28:e7:03:
                    5f:25:59:7f:a9:65:47:27:56:80:9e:c1:d2:08:f8:
                    aa:77:19:ac:d1:a6:f6:0d:d3:8f:d4:bd:3b:22:20:
                    6c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:36:BC:CA:FE:E4:1E:E6:19:E0:45:ED:A6:6A:A6:BB:D7:67:FB:E1
            X509v3 Authority Key Identifier:
                keyid:C1:CB:36:61:44:D5:97:E5:C1:77:3B:22:44:93:37:BA:CE:B7:A0:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/C1CB366144D597E5C1773B22449337BACEB7A019.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1CB366144D597E5C1773B22449337BACEB7A019.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a333a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d74:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:57:10:9d:1e:86:fe:9f:c1:e2:60:9b:92:71:2c:92:24:fe:
         f7:83:28:5d:eb:30:95:1c:a9:da:ab:01:a6:28:43:7c:0b:40:
         a1:d2:17:fa:e9:0f:25:58:cc:64:ed:67:ee:44:99:57:4e:c9:
         38:ba:75:28:11:c3:e7:8e:ad:d8:bf:0e:dd:17:e0:20:ca:3e:
         5b:39:e0:aa:08:57:d1:0d:84:46:1d:fc:86:0c:1d:28:38:18:
         0c:2d:f3:c6:9b:3c:3e:10:3f:c0:26:ce:81:b3:4c:69:c7:75:
         b9:69:29:fc:d3:f5:a2:8a:41:27:b1:cc:77:d0:10:dc:b6:4b:
         73:bf:71:6e:13:38:63:ba:81:2d:44:bd:a0:ff:74:b9:91:f2:
         f6:73:f6:cd:84:42:a5:24:57:ec:98:04:82:19:2d:9a:8e:de:
         d1:11:ad:8c:07:da:e0:b5:0f:53:6c:7c:da:3e:72:35:11:aa:
         fc:aa:6f:4d:a6:3d:5c:d9:7c:7c:53:0f:40:86:d7:f0:92:a5:
         c5:ee:ce:21:63:4b:48:28:a4:a6:cb:8c:ce:c4:fa:0a:b3:dd:
         3e:55:4b:fc:75:0c:fc:c7:d7:a1:0c:49:12:4b:34:bc:88:98:
         41:cc:9d:c5:d6:68:df:96:38:a7:d7:9a:80:5c:3d:d3:ee:d3:
         54:0b:b6:6d
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUYlaatccG9PHHvm3OeLsgqMv3xaowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzFDQjM2NjE0NEQ1OTdFNUMxNzczQjIyNDQ5MzM3QkFD
RUI3QTAxOTAeFw0yNjA2MTgxMTMzNTVaFw0yNzA2MTcxMTM4NTVaMDMxMTAvBgNV
BAMTKDZFMzZCQ0NBRkVFNDFFRTYxOUUwNDVFREE2NkFBNkJCRDc2N0ZCRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy4Zp9T3EGEzEi0kG/1UlrQ9jO
CrYFW1JK9huDBBLDpvIz3Y6bsHn6GNvF08TyjqPS0fZq+t7nOJW5kot5E5tUEcBK
Uk9mxkDmDO0FkFpAWxaCWiqwX2d80g+Qidd0pU2oBcnsPLeyyCZ8uF2Rfi+oVOBB
XbUz92Gs9Y0RnXJttUgi4c8eQ0H3+OmF2T9GqorJBKZXKM9DSTQqcSpV4IYGywd3
+EBrnePGZ2aThrn+C+vYnZ8NGRrr3ar2XPxBitU8+t8MFphesLRpO9pVlEjRIo5N
lOiV+YhP0+b0byjnA18lWX+pZUcnVoCewdII+Kp3GazRpvYN04/UvTsiIGz1AgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUbja8yv7kHuYZ4EXtpmqmu9dn++EwHwYDVR0j
BBgwFoAUwcs2YUTVl+XBdzsiRJM3us63oBkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWJodzNGSzNXUlJZTUF6cW56S2ZZUnNQY2pBWXI1dTNtalA0TnpuNkp2
dEwvMC9DMUNCMzY2MTQ0RDU5N0U1QzE3NzNCMjI0NDkzMzdCQUNFQjdBMDE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxQ0IzNjYxNDRENTk3RTVD
MTc3M0IyMjQ0OTMzN0JBQ0VCN0EwMTkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzliaHczRkszV1JSWU1BenFuektmWVJzUGNqQVlyNXUzbWpQNE56bjZKdnRMLzAv
MzIzODMwMzQzYTMzNjQzNzM0M2EzMzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMy
MzYzMjM2MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEPXQAAzANBgkqhkiG9w0BAQsFAAOCAQEA
PlcQnR6G/p/B4mCbknEskiT+94MoXeswlRyp2qsBpihDfAtAodIX+ukPJVjMZO1n
7kSZV07JOLp1KBHD546t2L8O3RfgIMo+WzngqghX0Q2ERh38hgwdKDgYDC3zxps8
PhA/wCbOgbNMacd1uWkp/NP1oopBJ7HMd9AQ3LZLc79xbhM4Y7qBLUS9oP90uZHy
9nP2zYRCpSRX7JgEghktmo7e0RGtjAfa4LUPU2x82j5yNRGq/KpvTaY9XNl8fFMP
QIbX8JKlxe7OIWNLSCikpsuMzsT6CrPdPlVL/HUM/MfXoQxJEks0vIiYQcydxdZo
35Y4p9eagFw90+7TVAu2bQ==
-----END CERTIFICATE-----
Generated at Sat Jun 27 13:17:41 2026 by rpki-client