Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/323830343a333765633a343030303a3a2f34382d3438203d3e20323636343434.roa
File:                     323830343a333765633a343030303a3a2f34382d3438203d3e20323636343434.roa (raw, json)
Hash identifier:          of72d3jXwQbzVf5+aJzPqiUIZ4xj6Zl2PYsE6+oreKY=
Subject key identifier:   10:8F:A8:25:EA:BB:43:A2:6D:24:05:68:39:87:81:E4:64:82:16:FA
Certificate issuer:       /CN=1A706BB72455093A32D1C60201116349B90D2EC7
Certificate serial:       0B82D243DF12BDF889BDB158289DDDC64BB43CD8
Authority key identifier: 1A:70:6B:B7:24:55:09:3A:32:D1:C6:02:01:11:63:49:B9:0D:2E:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A706BB72455093A32D1C60201116349B90D2EC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/323830343a333765633a343030303a3a2f34382d3438203d3e20323636343434.roa
Signing time:             Wed 01 Jul 2026 18:50:28 +0000
ROA not before:           Wed 01 Jul 2026 18:45:28 +0000
ROA not after:            Wed 30 Jun 2027 18:50:28 +0000
asID:                     266444
IP address blocks:        2804:37ec:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/1A706BB72455093A32D1C60201116349B90D2EC7.crl
                          rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/1A706BB72455093A32D1C60201116349B90D2EC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A706BB72455093A32D1C60201116349B90D2EC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 16:05:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:82:d2:43:df:12:bd:f8:89:bd:b1:58:28:9d:dd:c6:4b:b4:3c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A706BB72455093A32D1C60201116349B90D2EC7
        Validity
            Not Before: Jul  1 18:45:28 2026 GMT
            Not After : Jun 30 18:50:28 2027 GMT
        Subject: CN=108FA825EABB43A26D240568398781E4648216FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:50:3a:4a:28:b9:79:d2:c0:ce:80:1b:1c:9b:
                    a2:e5:1c:cd:79:3c:36:ab:8d:3f:51:ae:4d:93:7b:
                    82:4b:28:31:9e:f6:f8:0f:07:6d:52:29:86:49:96:
                    d4:67:a5:52:10:d8:77:4a:7b:59:08:e6:c6:c8:3e:
                    82:ac:2a:77:59:f0:2a:55:64:1c:76:41:7d:c1:25:
                    31:1f:c6:8e:0b:a8:2a:10:9d:54:de:24:83:df:24:
                    20:be:08:ae:8d:01:99:7a:c4:6e:30:b8:36:9f:fd:
                    f1:6d:a3:11:46:e4:ee:72:95:2e:12:b0:8e:71:7e:
                    3f:59:c0:81:b7:b7:2e:c0:b2:d4:6e:60:98:38:7a:
                    c7:e6:db:16:e9:b8:ce:9c:16:68:aa:b9:bf:6c:8f:
                    a1:fe:f6:33:69:7d:bf:68:1e:92:ee:5e:5d:8c:f7:
                    b5:9e:37:ad:f2:22:3d:b1:32:ce:7e:9d:a8:a1:34:
                    1b:f1:5d:44:fe:37:93:47:8e:8b:2e:1c:49:c5:95:
                    8a:62:21:e5:2c:34:0e:46:fc:37:89:40:37:d0:45:
                    f0:d2:ac:50:db:a9:59:52:f2:11:34:10:90:ce:cc:
                    20:ae:59:16:d1:78:c4:9e:5f:96:fb:e3:09:74:91:
                    ed:08:e0:90:79:20:4c:b6:18:88:95:3a:d7:35:d1:
                    67:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:8F:A8:25:EA:BB:43:A2:6D:24:05:68:39:87:81:E4:64:82:16:FA
            X509v3 Authority Key Identifier:
                keyid:1A:70:6B:B7:24:55:09:3A:32:D1:C6:02:01:11:63:49:B9:0D:2E:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/1A706BB72455093A32D1C60201116349B90D2EC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A706BB72455093A32D1C60201116349B90D2EC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/323830343a333765633a343030303a3a2f34382d3438203d3e20323636343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37ec:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:20:84:be:a2:07:94:87:81:e9:e9:4d:87:ad:27:37:bb:70:
         89:64:b5:60:39:4b:fc:dd:ca:cc:e7:d3:ef:cc:b4:2d:d3:64:
         b4:5d:81:e7:6e:0a:ed:69:b7:b2:7b:b3:7b:56:83:bb:59:63:
         70:89:de:7f:fb:f6:0c:27:9a:be:67:7e:a2:26:ff:d7:56:d3:
         22:f4:3f:ac:b6:3a:29:25:05:55:d9:a2:29:46:56:30:00:a7:
         05:13:79:d2:ad:55:49:94:28:69:22:b2:27:f6:d8:0e:3c:27:
         b7:f6:a7:a5:11:2b:89:5b:ed:e1:25:d5:cb:65:77:40:00:ff:
         5b:d4:33:d9:59:d8:43:15:38:c9:36:41:0d:9d:41:7c:91:45:
         1d:48:1c:39:b1:a2:98:a6:a3:ce:d3:2d:5b:14:7d:b5:6d:36:
         95:ae:6a:4f:8f:83:f8:43:04:20:0d:8f:9c:b7:a9:8f:e8:68:
         1c:7c:f9:6a:1b:31:20:42:78:2d:ee:cb:78:01:bb:f3:37:5f:
         7d:0f:ae:3c:8a:76:fa:83:1b:de:42:0d:a7:df:c9:a6:70:d2:
         4b:6f:58:25:d3:96:de:cd:4d:67:8a:c7:2c:9d:33:20:a2:bb:
         72:a4:e0:d2:d3:76:72:99:96:09:f7:ff:26:8c:a8:97:38:b6:
         25:64:ef:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:07:39 2026 by rpki-client