Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/323830343a333765633a313030303a3a2f34382d3438203d3e20323636343434.roa
File:                     323830343a333765633a313030303a3a2f34382d3438203d3e20323636343434.roa (raw, json)
Hash identifier:          bpwpXtB8EIOlOJs+OTAnz6lzOjAo5THh9hkUL4zciPk=
Subject key identifier:   63:BE:EE:3D:36:18:53:6F:ED:35:C0:C6:E7:1D:DD:6A:6F:22:2A:85
Certificate issuer:       /CN=1A706BB72455093A32D1C60201116349B90D2EC7
Certificate serial:       3970E8A37BE9626587F932864D045E7AC2632C28
Authority key identifier: 1A:70:6B:B7:24:55:09:3A:32:D1:C6:02:01:11:63:49:B9:0D:2E:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A706BB72455093A32D1C60201116349B90D2EC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/323830343a333765633a313030303a3a2f34382d3438203d3e20323636343434.roa
Signing time:             Wed 01 Jul 2026 18:52:21 +0000
ROA not before:           Wed 01 Jul 2026 18:47:21 +0000
ROA not after:            Wed 30 Jun 2027 18:52:21 +0000
asID:                     266444
IP address blocks:        2804:37ec:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/1A706BB72455093A32D1C60201116349B90D2EC7.crl
                          rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/1A706BB72455093A32D1C60201116349B90D2EC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A706BB72455093A32D1C60201116349B90D2EC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 16:05:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:70:e8:a3:7b:e9:62:65:87:f9:32:86:4d:04:5e:7a:c2:63:2c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A706BB72455093A32D1C60201116349B90D2EC7
        Validity
            Not Before: Jul  1 18:47:21 2026 GMT
            Not After : Jun 30 18:52:21 2027 GMT
        Subject: CN=63BEEE3D3618536FED35C0C6E71DDD6A6F222A85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:00:30:01:ab:ff:ad:e3:54:9c:d5:c1:2b:47:
                    1d:a3:5f:c5:7d:f7:47:92:72:98:14:f8:27:47:14:
                    94:3f:1d:6c:b4:ac:38:03:f2:91:ca:9b:40:00:26:
                    5f:dd:74:a1:ac:2b:1d:92:77:fa:64:a4:5f:89:47:
                    f8:e6:b5:76:de:b8:ef:3f:3c:bd:fe:25:be:46:db:
                    66:7a:bf:de:04:ca:41:dd:d3:cb:c1:e0:c0:6a:a5:
                    89:10:86:21:43:8f:86:80:fa:ad:0f:44:2d:25:63:
                    42:90:77:bd:15:98:3a:50:6a:14:31:26:ca:5b:53:
                    88:88:fe:ca:be:8c:93:2b:ab:63:84:96:b9:61:7b:
                    b1:40:61:ec:42:4e:2d:e9:33:72:73:b7:17:be:7b:
                    9f:88:cc:21:ff:c8:b1:fe:f8:40:cf:82:d4:70:09:
                    2a:0f:92:0e:2d:e7:bf:2e:08:34:3f:77:71:8e:39:
                    54:25:d6:59:b4:da:7f:8b:50:33:b8:c3:30:f5:b4:
                    12:fe:dc:b8:42:42:60:ba:9b:e7:51:22:b0:1a:d1:
                    83:1a:29:92:a2:ec:83:bf:35:1a:e7:8b:4a:66:51:
                    be:ec:a8:5e:a6:eb:03:7e:67:47:4a:10:2c:7d:c9:
                    b5:1d:06:ac:03:d8:21:6b:53:95:ee:74:72:26:30:
                    5a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BE:EE:3D:36:18:53:6F:ED:35:C0:C6:E7:1D:DD:6A:6F:22:2A:85
            X509v3 Authority Key Identifier:
                keyid:1A:70:6B:B7:24:55:09:3A:32:D1:C6:02:01:11:63:49:B9:0D:2E:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/1A706BB72455093A32D1C60201116349B90D2EC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A706BB72455093A32D1C60201116349B90D2EC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/323830343a333765633a313030303a3a2f34382d3438203d3e20323636343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37ec:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:f3:57:5b:d4:e3:8e:87:8c:3f:70:d0:c2:c3:07:4d:69:88:
         b6:4a:80:66:f4:c6:8f:bf:41:2d:6a:02:ca:3d:7d:6b:a8:1a:
         48:1f:e6:ed:ea:d3:24:3a:11:a5:82:3d:e8:ae:81:a6:e2:13:
         42:08:50:48:7c:e3:ca:40:0c:2d:81:27:0b:10:e2:eb:7f:bc:
         c9:1f:12:8b:09:8a:a3:91:0b:a2:e1:28:ce:8a:da:0e:42:7a:
         89:bc:d7:3b:0f:ea:2b:ea:61:43:9d:cf:66:47:f5:18:8d:4f:
         cd:5c:95:0c:de:82:82:6f:d3:9f:bb:51:f4:3f:61:02:b8:e7:
         94:1a:df:ca:a9:71:ed:7c:7d:00:15:bb:84:48:47:59:74:34:
         6c:15:d2:7d:2e:b5:47:11:75:97:a4:1c:2f:07:50:82:7c:12:
         cb:43:41:97:17:2d:95:2d:d7:03:5d:37:e7:a9:e9:10:07:c9:
         70:84:00:89:97:f1:14:ac:12:61:de:17:83:aa:d7:bd:94:7f:
         fd:ef:06:56:30:c5:4e:55:fc:47:38:55:43:ca:89:a6:0e:54:
         df:39:59:a4:6b:42:1c:94:dd:3a:7e:c8:22:ea:94:96:ff:11:
         58:09:d8:8f:b0:d2:60:f7:81:1d:7c:77:b5:24:1f:ee:ba:c1:
         5d:a9:91:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:07:38 2026 by rpki-client