Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/323830343a333765633a3130303a3a2f34382d3438203d3e20323636343434.roa
File:                     323830343a333765633a3130303a3a2f34382d3438203d3e20323636343434.roa (raw, json)
Hash identifier:          e1AEshJL6nAOA7gJAEQldAiSIp5Im+VB9sJMNQjYhn8=
Subject key identifier:   86:5F:09:FE:BC:4D:9A:6B:4F:38:85:E2:EA:34:B0:5D:92:62:7D:ED
Certificate issuer:       /CN=1A706BB72455093A32D1C60201116349B90D2EC7
Certificate serial:       7C920A48B7BE6BAAD6DC2AB08862239C5DA1D94E
Authority key identifier: 1A:70:6B:B7:24:55:09:3A:32:D1:C6:02:01:11:63:49:B9:0D:2E:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A706BB72455093A32D1C60201116349B90D2EC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/323830343a333765633a3130303a3a2f34382d3438203d3e20323636343434.roa
Signing time:             Wed 01 Jul 2026 18:52:02 +0000
ROA not before:           Wed 01 Jul 2026 18:47:02 +0000
ROA not after:            Wed 30 Jun 2027 18:52:02 +0000
asID:                     266444
IP address blocks:        2804:37ec:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/1A706BB72455093A32D1C60201116349B90D2EC7.crl
                          rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/1A706BB72455093A32D1C60201116349B90D2EC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A706BB72455093A32D1C60201116349B90D2EC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 16:05:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:92:0a:48:b7:be:6b:aa:d6:dc:2a:b0:88:62:23:9c:5d:a1:d9:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A706BB72455093A32D1C60201116349B90D2EC7
        Validity
            Not Before: Jul  1 18:47:02 2026 GMT
            Not After : Jun 30 18:52:02 2027 GMT
        Subject: CN=865F09FEBC4D9A6B4F3885E2EA34B05D92627DED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:29:12:5c:6f:cc:d2:63:55:09:f8:48:51:d5:
                    98:e9:5b:64:c6:f9:6a:b5:0d:b5:67:10:cc:09:8a:
                    b0:0b:c4:1b:61:8d:60:e4:76:0a:05:9e:77:29:04:
                    b1:67:0e:60:41:0a:ee:6a:a1:62:86:60:c7:74:6a:
                    3c:cf:89:7f:e0:db:42:d2:fa:ec:7d:65:30:c2:95:
                    9e:fa:09:7e:89:42:ed:b0:a9:e1:f9:5d:cc:44:0b:
                    ba:65:05:6d:f5:cf:3f:b6:cc:87:cd:b8:05:61:a0:
                    e5:f7:6b:e9:6b:db:f3:13:68:d4:52:d4:1e:4b:cf:
                    55:18:c3:f0:0c:1a:b7:52:81:4d:8d:93:67:ff:a1:
                    b9:54:b5:f8:cb:c6:1c:e8:9c:d6:d0:fa:a8:1e:07:
                    0a:6a:88:4c:c4:86:18:be:ee:5f:47:bd:26:48:7f:
                    ba:04:20:25:ee:fc:f2:1c:28:83:8a:70:94:e7:c6:
                    2b:3c:72:b6:0e:41:d1:c2:47:ee:28:66:e0:e9:97:
                    bb:4f:b7:77:a7:d9:19:eb:83:0a:ba:05:35:fb:be:
                    53:57:c5:aa:01:3c:2f:30:4c:b4:9a:ef:fd:8c:71:
                    7e:63:1f:74:ed:24:5f:80:e0:03:a3:75:26:9a:4a:
                    52:cb:04:8d:9f:41:f8:0e:d6:c1:d7:81:a9:04:1d:
                    de:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5F:09:FE:BC:4D:9A:6B:4F:38:85:E2:EA:34:B0:5D:92:62:7D:ED
            X509v3 Authority Key Identifier:
                keyid:1A:70:6B:B7:24:55:09:3A:32:D1:C6:02:01:11:63:49:B9:0D:2E:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/1A706BB72455093A32D1C60201116349B90D2EC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A706BB72455093A32D1C60201116349B90D2EC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/323830343a333765633a3130303a3a2f34382d3438203d3e20323636343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37ec:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:52:c7:0c:7d:8a:c4:b1:49:00:ce:98:9f:f7:6a:99:54:72:
         5a:ec:81:61:0e:64:a4:ed:d0:b6:cf:12:9e:b1:f9:6f:4d:73:
         5d:11:c8:17:52:42:59:73:e5:b6:db:55:1f:38:93:f5:ac:c3:
         49:14:d5:30:7c:bd:6c:ba:db:05:a5:08:7f:42:55:c8:de:de:
         8d:13:6c:f9:ac:c9:22:65:75:d6:80:2d:eb:fe:93:13:60:79:
         73:dc:ca:2f:71:32:12:0d:f4:98:f5:34:0a:50:f2:2c:91:02:
         b9:be:0c:94:28:83:91:6e:27:07:98:9b:25:af:76:10:73:70:
         af:d8:5f:72:f7:8e:3d:11:3b:52:58:56:cf:6a:df:59:eb:f5:
         b6:39:10:65:43:56:a5:08:d3:6e:66:d1:4f:32:ee:ea:27:a5:
         d1:40:7b:0f:e7:20:94:c2:00:0f:39:82:4d:f2:6f:d5:19:b3:
         62:f1:d0:76:34:8b:66:c4:7a:49:59:3b:04:c2:10:58:6f:15:
         a1:61:d1:58:c8:f5:9f:d0:aa:54:5b:2d:7a:4f:59:07:29:92:
         6c:47:4e:4c:d6:ef:ce:a1:c3:b3:d6:79:45:ac:ae:2b:64:2a:
         bc:42:71:df:10:3a:4a:80:ab:42:d5:16:3d:64:e2:cb:97:77:
         24:34:d5:d2
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUfJIKSLe+a6rW3CqwiGIjnF2h2U4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE3MDZCQjcyNDU1MDkzQTMyRDFDNjAyMDExMTYzNDlC
OTBEMkVDNzAeFw0yNjA3MDExODQ3MDJaFw0yNzA2MzAxODUyMDJaMDMxMTAvBgNV
BAMTKDg2NUYwOUZFQkM0RDlBNkI0RjM4ODVFMkVBMzRCMDVEOTI2MjdERUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtKRJcb8zSY1UJ+EhR1ZjpW2TG
+Wq1DbVnEMwJirALxBthjWDkdgoFnncpBLFnDmBBCu5qoWKGYMd0ajzPiX/g20LS
+ux9ZTDClZ76CX6JQu2wqeH5XcxEC7plBW31zz+2zIfNuAVhoOX3a+lr2/MTaNRS
1B5Lz1UYw/AMGrdSgU2Nk2f/oblUtfjLxhzonNbQ+qgeBwpqiEzEhhi+7l9HvSZI
f7oEICXu/PIcKIOKcJTnxis8crYOQdHCR+4oZuDpl7tPt3en2Rnrgwq6BTX7vlNX
xaoBPC8wTLSa7/2McX5jH3TtJF+A4AOjdSaaSlLLBI2fQfgO1sHXgakEHd6ZAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUhl8J/rxNmmtPOIXi6jSwXZJife0wHwYDVR0j
BBgwFoAUGnBrtyRVCToy0cYCARFjSbkNLscwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWlNTTYzQzZhUVVTVk13ZFpGMzNZN05xMzVNMkZrdnZrdFY2aUNWUU5o
UEEvMC8xQTcwNkJCNzI0NTUwOTNBMzJEMUM2MDIwMTExNjM0OUI5MEQyRUM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBNzA2QkI3MjQ1NTA5M0Ez
MkQxQzYwMjAxMTE2MzQ5QjkwRDJFQzcuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FpTU02M0M2YVFVU1ZNd2RaRjMzWTdOcTM1TTJGa3Z2a3RWNmlDVlFOaFBBLzAv
MzIzODMwMzQzYTMzMzc2NTYzM2EzMTMwMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzMjM2MzYzNDM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBDfsAQAwDQYJKoZIhvcNAQELBQAD
ggEBAGBSxwx9isSxSQDOmJ/3aplUclrsgWEOZKTt0LbPEp6x+W9Nc10RyBdSQllz
5bbbVR84k/Wsw0kU1TB8vWy62wWlCH9CVcje3o0TbPmsySJlddaALev+kxNgeXPc
yi9xMhIN9Jj1NApQ8iyRArm+DJQog5FuJweYmyWvdhBzcK/YX3L3jj0RO1JYVs9q
31nr9bY5EGVDVqUI025m0U8y7uonpdFAew/nIJTCAA85gk3yb9UZs2Lx0HY0i2bE
eklZOwTCEFhvFaFh0VjI9Z/QqlRbLXpPWQcpkmxHTkzW786hw7PWeUWsritkKrxC
cd8QOkqAq0LVFj1k4suXdyQ01dI=
-----END CERTIFICATE-----
Generated at Wed Jul 8 19:07:38 2026 by rpki-client