Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a343030303a3a2f33362d3336203d3e20323634323437.roa
File:                     323830343a323465343a343030303a3a2f33362d3336203d3e20323634323437.roa (raw, json)
Hash identifier:          blNBGy0RsdTX/gu72kuDk88UO+pnCEpVnW1Hhaon8HM=
Subject key identifier:   E1:41:03:B6:57:F2:6C:DF:B9:29:7A:AC:83:77:26:EA:D8:CE:1F:EA
Certificate issuer:       /CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
Certificate serial:       2B8F463B6E1EEFC8AA4405CDF9C4520FA64F25A0
Authority key identifier: 12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a343030303a3a2f33362d3336203d3e20323634323437.roa
Signing time:             Tue 23 Jun 2026 12:39:48 +0000
ROA not before:           Tue 23 Jun 2026 12:34:48 +0000
ROA not after:            Tue 22 Jun 2027 12:39:48 +0000
asID:                     264247
IP address blocks:        2804:24e4:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl
                          rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 03:07:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:8f:46:3b:6e:1e:ef:c8:aa:44:05:cd:f9:c4:52:0f:a6:4f:25:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
        Validity
            Not Before: Jun 23 12:34:48 2026 GMT
            Not After : Jun 22 12:39:48 2027 GMT
        Subject: CN=E14103B657F26CDFB9297AAC837726EAD8CE1FEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8d:5e:e8:cc:42:cf:a6:94:db:79:23:6f:cd:
                    81:64:0f:3a:de:c1:dc:85:ac:2a:66:ae:04:d6:1e:
                    99:20:d7:b0:76:1b:2e:39:89:65:de:c8:e9:64:73:
                    bb:1a:06:fb:91:22:cf:4c:2c:ae:2a:45:33:32:d2:
                    f6:2d:7d:69:56:ac:a3:d0:24:88:cb:bb:65:61:40:
                    15:b9:a8:d8:e9:e6:98:cd:3f:65:de:02:9f:0e:1d:
                    fa:82:92:8a:b2:51:82:ac:e4:0f:4c:4d:fc:d8:12:
                    8f:21:12:17:78:20:26:ad:62:80:b6:68:9b:9a:09:
                    55:09:ae:35:ae:d4:b3:aa:c0:cf:b1:54:8c:db:a4:
                    bd:a6:0c:ed:9f:05:9c:e0:29:74:db:93:65:eb:0d:
                    da:09:54:ea:a1:e7:ed:18:5d:8e:11:b1:6b:ef:3d:
                    19:fe:26:e4:4b:88:0d:00:fa:da:ec:64:b9:60:2c:
                    4b:9d:8c:06:56:aa:0b:2e:0e:74:91:ae:b1:50:7c:
                    cc:9c:47:d3:b6:32:d4:61:41:ab:d1:2e:82:ed:ae:
                    79:e1:ba:d7:52:fe:76:3f:d4:a5:cc:39:88:2e:f4:
                    0d:ee:e1:bd:e9:1f:bd:f8:d3:4c:b9:51:b8:6b:14:
                    85:c5:07:5b:27:b4:5d:89:a7:55:bd:65:e7:2b:53:
                    f2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:41:03:B6:57:F2:6C:DF:B9:29:7A:AC:83:77:26:EA:D8:CE:1F:EA
            X509v3 Authority Key Identifier:
                keyid:12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a343030303a3a2f33362d3336203d3e20323634323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24e4:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1f:41:04:e1:ba:73:3f:df:40:0f:69:c4:b2:67:df:d1:fd:79:
         6c:9d:a5:a7:7c:11:93:f3:b4:1d:eb:5b:57:96:e5:99:21:e1:
         22:8b:1f:ef:65:73:af:36:d2:da:a5:41:4b:46:3b:bf:4b:b5:
         db:21:bd:86:ce:83:83:8e:10:a5:17:d0:87:c1:37:00:e0:ea:
         62:7c:2c:d5:de:48:69:da:d6:b1:87:6f:30:fe:fd:04:0b:b3:
         b1:61:8d:9f:80:f5:e0:81:91:0e:97:90:b1:10:32:5e:9b:87:
         fa:a6:75:cd:1c:e1:45:18:7e:d6:3c:22:72:64:eb:80:cd:a8:
         e0:2e:41:1c:a9:5c:f0:d7:93:a2:f8:1e:86:82:83:50:21:50:
         e1:3c:02:df:10:38:74:07:f6:4d:e0:ef:6e:06:56:1c:2a:82:
         81:82:e9:f3:9a:86:92:e2:c0:a2:8b:8a:e7:0f:5d:9e:75:9a:
         b8:f9:9e:3b:13:b0:bb:bf:7d:29:2e:ba:40:87:f2:0f:07:2d:
         47:65:c6:72:49:72:cd:91:4e:41:b8:12:bc:77:d1:21:fc:a6:
         62:20:83:33:03:b1:67:39:b2:cf:5c:c8:a0:07:58:38:05:70:
         24:1f:f5:be:99:66:f5:c8:78:02:66:7b:88:31:71:c0:cb:54:
         2c:a1:b6:d5
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUK49GO24e78iqRAXN+cRSD6ZPJaAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTJGRTE2RkFDRDI5OTMxNkZDRUY3M0NGRUE3ODI4NDRE
N0MyRTY5ODAeFw0yNjA2MjMxMjM0NDhaFw0yNzA2MjIxMjM5NDhaMDMxMTAvBgNV
BAMTKEUxNDEwM0I2NTdGMjZDREZCOTI5N0FBQzgzNzcyNkVBRDhDRTFGRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDjV7ozELPppTbeSNvzYFkDzre
wdyFrCpmrgTWHpkg17B2Gy45iWXeyOlkc7saBvuRIs9MLK4qRTMy0vYtfWlWrKPQ
JIjLu2VhQBW5qNjp5pjNP2XeAp8OHfqCkoqyUYKs5A9MTfzYEo8hEhd4ICatYoC2
aJuaCVUJrjWu1LOqwM+xVIzbpL2mDO2fBZzgKXTbk2XrDdoJVOqh5+0YXY4RsWvv
PRn+JuRLiA0A+trsZLlgLEudjAZWqgsuDnSRrrFQfMycR9O2MtRhQavRLoLtrnnh
utdS/nY/1KXMOYgu9A3u4b3pH73400y5UbhrFIXFB1sntF2Jp1W9ZecrU/LlAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU4UEDtlfybN+5KXqsg3cm6tjOH+owHwYDVR0j
BBgwFoAUEv4W+s0pkxb873PP6ngoRNfC5pgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGlBdHRMaURMaXJEUjMycWdlZk5oTDNzdkhTYUh0VXltM0dxaHVaWFY0
dHMvMS8xMkZFMTZGQUNEMjk5MzE2RkNFRjczQ0ZFQTc4Mjg0NEQ3QzJFNjk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyRkUxNkZBQ0QyOTkzMTZG
Q0VGNzNDRkVBNzgyODQ0RDdDMkU2OTguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RpQXR0TGlETGlyRFIzMnFnZWZOaEwzc3ZIU2FIdFV5bTNHcWh1WlhWNHRzLzEv
MzIzODMwMzQzYTMyMzQ2NTM0M2EzNDMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNDMyMzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEJORAMA0GCSqGSIb3DQEBCwUA
A4IBAQAfQQThunM/30APacSyZ9/R/XlsnaWnfBGT87Qd61tXluWZIeEiix/vZXOv
NtLapUFLRju/S7XbIb2GzoODjhClF9CHwTcA4OpifCzV3khp2taxh28w/v0EC7Ox
YY2fgPXggZEOl5CxEDJem4f6pnXNHOFFGH7WPCJyZOuAzajgLkEcqVzw15Oi+B6G
goNQIVDhPALfEDh0B/ZN4O9uBlYcKoKBgunzmoaS4sCii4rnD12edZq4+Z47E7C7
v30pLrpAh/IPBy1HZcZySXLNkU5BuBK8d9Eh/KZiIIMzA7FnObLPXMigB1g4BXAk
H/W+mWb1yHgCZnuIMXHAy1QsobbV
-----END CERTIFICATE-----
Generated at Wed Jul 8 20:17:46 2026 by rpki-client