Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DxnY3FB8e6kPEtKkRmHsWKfu3VQ91rk6Tda2vySXAfFU/0/323830343a323936303a3a2f33322d3332203d3e20323634303131.roa
File:                     323830343a323936303a3a2f33322d3332203d3e20323634303131.roa (raw, json)
Hash identifier:          QNx/cCAz/GVs9FhXKiEQCLg9TksNKsJo18F7aABefhY=
Subject key identifier:   A4:34:9F:1E:29:94:F3:2B:74:40:17:2E:F1:1C:F3:8F:DA:19:EB:0F
Certificate issuer:       /CN=607D3C320A3780B24C3C9C40404A631E91336493
Certificate serial:       2D1F16A02DB7D073F334290E12447BA1FB8A7CE7
Authority key identifier: 60:7D:3C:32:0A:37:80:B2:4C:3C:9C:40:40:4A:63:1E:91:33:64:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/607D3C320A3780B24C3C9C40404A631E91336493.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DxnY3FB8e6kPEtKkRmHsWKfu3VQ91rk6Tda2vySXAfFU/0/323830343a323936303a3a2f33322d3332203d3e20323634303131.roa
Signing time:             Thu 02 Jul 2026 15:24:43 +0000
ROA not before:           Thu 02 Jul 2026 15:19:43 +0000
ROA not after:            Thu 01 Jul 2027 15:24:43 +0000
asID:                     264011
IP address blocks:        2804:2960::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DxnY3FB8e6kPEtKkRmHsWKfu3VQ91rk6Tda2vySXAfFU/0/607D3C320A3780B24C3C9C40404A631E91336493.crl
                          rsync://rpki-repo.registro.br/repo/DxnY3FB8e6kPEtKkRmHsWKfu3VQ91rk6Tda2vySXAfFU/0/607D3C320A3780B24C3C9C40404A631E91336493.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/607D3C320A3780B24C3C9C40404A631E91336493.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 17:46:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:1f:16:a0:2d:b7:d0:73:f3:34:29:0e:12:44:7b:a1:fb:8a:7c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=607D3C320A3780B24C3C9C40404A631E91336493
        Validity
            Not Before: Jul  2 15:19:43 2026 GMT
            Not After : Jul  1 15:24:43 2027 GMT
        Subject: CN=A4349F1E2994F32B7440172EF11CF38FDA19EB0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7f:dd:86:12:c7:02:f9:8e:8c:3a:00:60:f1:
                    5b:0b:86:31:d5:73:fe:9a:54:3c:31:33:f4:7e:30:
                    c1:18:b3:92:6b:d5:f3:a4:0d:32:92:7b:51:e8:c8:
                    b0:c3:1e:c5:6b:67:9b:58:cf:31:4b:b8:46:6d:cd:
                    59:1b:b7:6d:73:e8:1f:1f:79:bf:95:ec:5c:0e:3c:
                    81:24:1a:ff:e0:37:8d:9a:a1:44:db:cb:90:8f:1a:
                    f2:8a:8b:35:f8:49:87:ee:35:29:a7:12:9e:ff:2f:
                    bb:32:a5:e7:c2:e9:ac:a1:01:a3:18:19:24:36:32:
                    5c:97:7c:ee:56:65:ea:d4:a0:02:f4:46:ec:61:dc:
                    1e:bd:4e:96:69:ba:79:76:50:3c:5f:5b:98:e5:8f:
                    57:a3:8e:e5:72:18:21:1f:cf:c2:a0:ab:e8:42:88:
                    b6:24:79:17:39:7f:15:0a:05:ae:52:03:98:03:87:
                    02:66:53:1d:dd:79:8d:fc:66:38:1a:11:31:1d:b3:
                    8f:d9:40:98:8b:24:a9:a9:58:28:69:9a:ac:60:f5:
                    85:08:ad:08:17:43:fa:a2:75:1d:10:41:0f:5e:24:
                    e4:7c:10:3e:94:b2:74:26:03:f7:c2:d4:0a:d5:07:
                    a5:cd:32:63:6b:97:d4:e6:28:b1:b4:62:8b:d9:0f:
                    71:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:34:9F:1E:29:94:F3:2B:74:40:17:2E:F1:1C:F3:8F:DA:19:EB:0F
            X509v3 Authority Key Identifier:
                keyid:60:7D:3C:32:0A:37:80:B2:4C:3C:9C:40:40:4A:63:1E:91:33:64:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DxnY3FB8e6kPEtKkRmHsWKfu3VQ91rk6Tda2vySXAfFU/0/607D3C320A3780B24C3C9C40404A631E91336493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/607D3C320A3780B24C3C9C40404A631E91336493.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DxnY3FB8e6kPEtKkRmHsWKfu3VQ91rk6Tda2vySXAfFU/0/323830343a323936303a3a2f33322d3332203d3e20323634303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2960::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:cc:77:d9:3a:e4:11:7c:1a:11:d0:68:3d:b2:2a:9e:b8:39:
         c9:93:10:0e:89:99:00:0e:f9:66:07:81:f0:95:0d:cc:20:80:
         ae:3e:89:21:33:71:4e:f0:9f:cb:02:d5:7d:3d:e9:8a:99:95:
         3f:2c:52:d4:ca:86:33:a0:c3:83:9e:b3:de:e9:06:a5:13:f4:
         22:93:81:5f:19:5d:65:9f:2c:52:e3:ee:ed:3c:2a:7e:e4:0b:
         96:df:b6:86:9e:44:37:71:9e:a9:4c:a9:85:53:9d:10:e0:e0:
         18:51:ed:c7:64:b7:3c:98:29:5a:c7:b6:1b:55:3d:28:c6:48:
         dc:c1:c3:e6:1c:44:b4:e6:43:7f:83:f8:a5:99:40:e8:14:7b:
         ef:d9:78:c6:ad:4f:93:a2:42:e0:66:0a:ce:58:21:c7:63:35:
         f9:73:65:be:3e:86:17:23:0b:eb:f0:75:15:84:37:35:fa:23:
         c3:13:d4:89:15:10:54:da:ab:ad:4c:f6:61:e2:6c:0c:ed:d2:
         05:e9:5c:6e:cc:b7:7f:99:d6:24:9b:77:68:22:7d:8e:ee:b5:
         3f:a6:7b:67:a4:e4:5f:5f:f2:67:2a:6f:e8:8b:c5:82:0c:69:
         3a:c2:03:85:bb:55:ba:0f:c6:5c:1f:c2:3a:2d:88:45:a8:a7:
         b1:ec:dd:f4
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIULR8WoC230HPzNCkOEkR7ofuKfOcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA3RDNDMzIwQTM3ODBCMjRDM0M5QzQwNDA0QTYzMUU5
MTMzNjQ5MzAeFw0yNjA3MDIxNTE5NDNaFw0yNzA3MDExNTI0NDNaMDMxMTAvBgNV
BAMTKEE0MzQ5RjFFMjk5NEYzMkI3NDQwMTcyRUYxMUNGMzhGREExOUVCMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaf92GEscC+Y6MOgBg8VsLhjHV
c/6aVDwxM/R+MMEYs5Jr1fOkDTKSe1HoyLDDHsVrZ5tYzzFLuEZtzVkbt21z6B8f
eb+V7FwOPIEkGv/gN42aoUTby5CPGvKKizX4SYfuNSmnEp7/L7sypefC6ayhAaMY
GSQ2MlyXfO5WZerUoAL0Ruxh3B69TpZpunl2UDxfW5jlj1ejjuVyGCEfz8Kgq+hC
iLYkeRc5fxUKBa5SA5gDhwJmUx3deY38ZjgaETEds4/ZQJiLJKmpWChpmqxg9YUI
rQgXQ/qidR0QQQ9eJOR8ED6UsnQmA/fC1ArVB6XNMmNrl9TmKLG0YovZD3G1AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUpDSfHimU8yt0QBcu8Rzzj9oZ6w8wHwYDVR0j
BBgwFoAUYH08Mgo3gLJMPJxAQEpjHpEzZJMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHhuWTNGQjhlNmtQRXRLa1JtSHNXS2Z1M1ZROTFyazZUZGEydnlTWEFm
RlUvMC82MDdEM0MzMjBBMzc4MEIyNEMzQzlDNDA0MDRBNjMxRTkxMzM2NDkzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwN0QzQzMyMEEzNzgwQjI0
QzNDOUM0MDQwNEE2MzFFOTEzMzY0OTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R4blkzRkI4ZTZrUEV0S2tSbUhzV0tmdTNWUTkxcms2VGRhMnZ5U1hBZkZVLzAv
MzIzODMwMzQzYTMyMzkzNjMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzAzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQpYDANBgkqhkiG9w0BAQsFAAOCAQEAIcx32Trk
EXwaEdBoPbIqnrg5yZMQDomZAA75ZgeB8JUNzCCArj6JITNxTvCfywLVfT3pipmV
PyxS1MqGM6DDg56z3ukGpRP0IpOBXxldZZ8sUuPu7TwqfuQLlt+2hp5EN3GeqUyp
hVOdEODgGFHtx2S3PJgpWse2G1U9KMZI3MHD5hxEtOZDf4P4pZlA6BR779l4xq1P
k6JC4GYKzlghx2M1+XNlvj6GFyML6/B1FYQ3NfojwxPUiRUQVNqrrUz2YeJsDO3S
Belcbsy3f5nWJJt3aCJ9ju61P6Z7Z6TkX1/yZypv6IvFggxpOsIDhbtVug/GXB/C
Oi2IRainsezd9A==
-----END CERTIFICATE-----
Generated at Wed Jul 8 19:00:44 2026 by rpki-client