Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CqxweLovXk6nDULaTwqZ8ByZYpUH3fkFEKZ2rHiBwWi9/0/323830343a316165303a3a2f33322d3634203d3e203631363936.roa
File:                     323830343a316165303a3a2f33322d3634203d3e203631363936.roa (raw, json)
Hash identifier:          P2sA70Ysw461EWPfBmw3weGHlUBGlQB40LHBz0h76cs=
Subject key identifier:   C4:46:CE:D2:37:64:08:50:89:2B:53:71:46:93:82:C8:8C:20:5E:C9
Certificate issuer:       /CN=6693C2DEAC1B9BF5C83986AD195909D70F9074A9
Certificate serial:       536C6DBE09C5FE77E644CE3032DE1D0BE0AC088E
Authority key identifier: 66:93:C2:DE:AC:1B:9B:F5:C8:39:86:AD:19:59:09:D7:0F:90:74:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6693C2DEAC1B9BF5C83986AD195909D70F9074A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CqxweLovXk6nDULaTwqZ8ByZYpUH3fkFEKZ2rHiBwWi9/0/323830343a316165303a3a2f33322d3634203d3e203631363936.roa
Signing time:             Fri 19 Jun 2026 23:46:52 +0000
ROA not before:           Fri 19 Jun 2026 23:41:52 +0000
ROA not after:            Fri 18 Jun 2027 23:46:52 +0000
asID:                     61696
IP address blocks:        2804:1ae0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CqxweLovXk6nDULaTwqZ8ByZYpUH3fkFEKZ2rHiBwWi9/0/6693C2DEAC1B9BF5C83986AD195909D70F9074A9.crl
                          rsync://rpki-repo.registro.br/repo/CqxweLovXk6nDULaTwqZ8ByZYpUH3fkFEKZ2rHiBwWi9/0/6693C2DEAC1B9BF5C83986AD195909D70F9074A9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6693C2DEAC1B9BF5C83986AD195909D70F9074A9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Jun 2026 23:40:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:6c:6d:be:09:c5:fe:77:e6:44:ce:30:32:de:1d:0b:e0:ac:08:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6693C2DEAC1B9BF5C83986AD195909D70F9074A9
        Validity
            Not Before: Jun 19 23:41:52 2026 GMT
            Not After : Jun 18 23:46:52 2027 GMT
        Subject: CN=C446CED237640850892B5371469382C88C205EC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:de:bd:ab:87:46:32:dc:42:2f:38:88:ae:65:
                    3d:25:3b:5e:54:b3:15:a6:df:42:c6:7f:c4:6c:ee:
                    61:51:31:54:9f:7a:56:0c:c2:cf:90:24:da:52:a7:
                    ae:7e:a5:c0:75:5f:74:ab:88:1e:fb:12:bd:9f:02:
                    e0:6d:51:42:df:fd:d5:51:9f:aa:e2:6f:06:f8:2c:
                    c5:37:53:23:00:bb:58:08:12:31:db:2c:c6:c8:f5:
                    eb:e1:b0:16:e2:85:4d:27:b5:d6:55:9b:99:ea:84:
                    21:8e:69:48:29:9c:93:31:a9:92:95:49:bf:af:69:
                    c5:0f:fd:6f:87:3d:68:8e:45:8f:eb:d3:2f:f9:7b:
                    7f:4f:4a:77:bb:69:60:a6:3c:bd:7e:93:2b:d4:34:
                    44:74:53:c8:99:5d:71:db:2b:e7:0f:05:3e:f2:f2:
                    1b:25:0a:2d:6a:bf:2b:65:54:95:ce:a2:7f:a6:cc:
                    b0:a2:3e:4a:fc:3a:14:fb:b9:c3:41:e9:63:42:34:
                    04:b2:30:a6:86:bd:3d:83:db:2e:a2:48:c6:73:8f:
                    6f:27:93:75:26:0a:6f:69:b0:c4:d0:84:ab:3f:b4:
                    8c:5e:3a:64:d4:fa:b7:22:7a:e8:86:84:7f:47:23:
                    f5:9c:58:d9:f8:92:42:42:3e:a7:19:fb:9b:f2:43:
                    79:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:46:CE:D2:37:64:08:50:89:2B:53:71:46:93:82:C8:8C:20:5E:C9
            X509v3 Authority Key Identifier:
                keyid:66:93:C2:DE:AC:1B:9B:F5:C8:39:86:AD:19:59:09:D7:0F:90:74:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CqxweLovXk6nDULaTwqZ8ByZYpUH3fkFEKZ2rHiBwWi9/0/6693C2DEAC1B9BF5C83986AD195909D70F9074A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6693C2DEAC1B9BF5C83986AD195909D70F9074A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CqxweLovXk6nDULaTwqZ8ByZYpUH3fkFEKZ2rHiBwWi9/0/323830343a316165303a3a2f33322d3634203d3e203631363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:05:12:25:7d:63:5f:05:8b:4c:c9:b3:43:7f:07:af:1d:68:
         9f:47:87:89:12:b5:d1:80:00:b1:6e:03:ee:a8:df:c1:6e:d6:
         4b:b2:38:f2:11:8f:d1:5c:41:9f:b3:b8:a3:85:08:64:65:8d:
         f3:73:42:38:7d:e4:60:5e:94:f5:da:08:07:25:17:40:39:18:
         72:77:bc:bf:00:e6:76:ec:dc:4a:57:29:9a:c0:17:0d:d5:a4:
         d1:79:85:d1:e2:6b:fd:ab:78:53:a8:a1:d4:48:83:41:0c:ab:
         11:28:6d:0d:e9:d6:97:e7:6d:29:c0:e7:83:f1:49:45:07:cb:
         66:8d:10:9a:4a:7e:6d:54:86:a3:38:b1:1f:8a:f7:2c:8c:25:
         a6:60:cd:8a:6d:b6:3d:af:03:91:01:a7:0b:e3:9f:92:0b:ce:
         6b:e7:4f:47:19:93:c5:42:1f:c2:7f:d3:21:74:58:48:53:f8:
         48:f8:a5:e5:9f:7c:d0:86:c4:82:21:78:4f:4e:bb:96:15:21:
         26:d5:4e:48:d0:6f:0c:cc:8a:b6:ef:c1:bc:03:01:ea:d9:9d:
         59:92:7f:a5:5f:0d:a5:89:64:28:b4:7a:cc:61:c1:9d:81:10:
         4e:ab:2f:84:42:d2:78:71:ba:80:9e:a1:34:e7:49:bd:87:d3:
         1f:29:72:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:32:58 2026 by rpki-client