Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a313030303a3a2f33362d3336203d3e20323634323437.roa
File:                     323830343a323465343a313030303a3a2f33362d3336203d3e20323634323437.roa (raw, json)
Hash identifier:          CZGyPyUhc+MdlJtPbekN3S5vnYgaF9wF/5Ced8FS+OM=
Subject key identifier:   59:17:49:80:AD:71:27:D6:AB:51:CA:88:DD:C9:C5:B5:37:5A:0F:09
Certificate issuer:       /CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
Certificate serial:       71D00510E2FC9A8EF73FA0A011536ACA548CD0BB
Authority key identifier: 12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a313030303a3a2f33362d3336203d3e20323634323437.roa
Signing time:             Tue 23 Jun 2026 12:40:59 +0000
ROA not before:           Tue 23 Jun 2026 12:35:59 +0000
ROA not after:            Tue 22 Jun 2027 12:40:59 +0000
asID:                     264247
IP address blocks:        2804:24e4:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl
                          rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 21:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d0:05:10:e2:fc:9a:8e:f7:3f:a0:a0:11:53:6a:ca:54:8c:d0:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
        Validity
            Not Before: Jun 23 12:35:59 2026 GMT
            Not After : Jun 22 12:40:59 2027 GMT
        Subject: CN=59174980AD7127D6AB51CA88DDC9C5B5375A0F09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:dc:57:78:18:04:cf:8b:41:bb:ef:8c:73:90:
                    99:10:4a:e6:66:aa:c2:1a:bb:aa:95:d2:63:e4:7e:
                    a8:22:f1:9d:df:d0:49:52:d4:2b:75:28:38:0f:6a:
                    dd:4b:d8:c5:40:ef:8b:00:48:4d:4d:ce:15:19:f6:
                    0a:da:bc:cf:6c:f1:46:2b:d8:2d:61:31:5f:f1:20:
                    62:fd:1a:d0:8d:26:37:70:47:1a:e5:a6:ca:9c:51:
                    a0:6c:ce:11:8a:55:e8:df:0b:b3:de:58:f2:28:54:
                    69:15:1f:e4:c4:2d:4d:54:28:74:36:e6:2b:5a:44:
                    87:03:fc:14:b5:fb:91:a8:12:f7:63:a4:02:b4:9d:
                    97:90:0f:da:48:f4:62:36:e6:18:99:a5:8f:f5:6d:
                    30:c0:eb:c8:ae:94:92:0d:fc:18:d8:da:2c:33:52:
                    ec:fc:8d:60:99:c2:fa:8e:28:57:67:b5:a4:77:50:
                    06:87:56:9e:62:eb:98:72:27:09:07:48:f3:46:a6:
                    a0:50:e5:ff:80:3d:72:20:9b:cf:87:68:74:60:eb:
                    e6:d1:aa:02:5f:86:30:37:4c:73:20:5d:23:3e:aa:
                    10:80:ac:e0:7c:3d:b1:bc:4b:c3:7d:3b:94:ea:74:
                    05:97:6c:d8:1b:dc:67:df:71:e8:84:27:21:de:10:
                    2c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:17:49:80:AD:71:27:D6:AB:51:CA:88:DD:C9:C5:B5:37:5A:0F:09
            X509v3 Authority Key Identifier:
                keyid:12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a313030303a3a2f33362d3336203d3e20323634323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24e4:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8b:1f:f3:c4:08:28:24:43:52:72:3a:99:e6:66:1c:6d:84:8e:
         63:7c:a4:ba:13:78:bf:69:22:a7:2c:df:d4:7b:31:76:5f:63:
         69:ad:c0:f1:8b:66:17:eb:63:c4:a3:ab:de:e7:c4:42:e6:28:
         ba:5c:04:26:6a:2a:e3:7d:06:61:a5:47:4f:1c:5f:88:fb:3f:
         de:05:59:08:ee:37:8f:1d:bf:e6:0d:97:79:1b:e0:c6:0f:78:
         d9:2a:a6:68:a0:2d:e1:71:90:45:8c:c2:13:3f:86:0e:c9:8a:
         c8:55:1e:5f:78:af:01:1a:5f:a8:9e:90:02:36:17:c0:57:f1:
         4a:34:fb:a2:eb:43:3e:e5:a8:c2:43:72:f2:90:65:9e:b6:d5:
         81:b5:60:1a:d9:a6:37:a4:96:51:2c:28:2c:86:84:61:a6:08:
         90:79:a9:2e:b4:2a:16:ed:de:90:3e:16:65:6c:a4:e5:b1:8b:
         68:ed:98:4a:00:15:2a:85:ac:5f:5a:9d:e4:15:88:57:3c:bd:
         fa:06:2a:88:1d:85:86:4b:61:ad:02:7e:e3:74:e0:60:b5:a6:
         64:00:ab:46:71:37:b0:54:ec:97:4a:d6:62:fb:9b:e6:bc:63:
         aa:03:92:1d:eb:5e:a3:0a:0c:88:2b:a5:d1:19:ee:31:c5:e3:
         86:b4:b1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:22:48 2026 by rpki-client