Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/323830343a346333383a6161303a3a2f34332d3433203d3e20323637333537.roa
File:                     323830343a346333383a6161303a3a2f34332d3433203d3e20323637333537.roa (raw, json)
Hash identifier:          N2JIRWUl7FdlMxDxU2mKEJlV1JOBZRImQ76Pz51JhD8=
Subject key identifier:   93:A3:8D:1E:DA:59:0C:17:CA:37:23:FB:17:FA:AF:83:A5:73:04:5A
Certificate issuer:       /CN=22003C7E7945DDECEA49DB4BC81112456EF56BF6
Certificate serial:       5BD1D0DCD970699D1CB5FB7718A72C07D13ACC67
Authority key identifier: 22:00:3C:7E:79:45:DD:EC:EA:49:DB:4B:C8:11:12:45:6E:F5:6B:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22003C7E7945DDECEA49DB4BC81112456EF56BF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/323830343a346333383a6161303a3a2f34332d3433203d3e20323637333537.roa
Signing time:             Thu 02 Jul 2026 13:26:18 +0000
ROA not before:           Thu 02 Jul 2026 13:21:18 +0000
ROA not after:            Thu 01 Jul 2027 13:26:18 +0000
asID:                     267357
IP address blocks:        2804:4c38:aa0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/22003C7E7945DDECEA49DB4BC81112456EF56BF6.crl
                          rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/22003C7E7945DDECEA49DB4BC81112456EF56BF6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22003C7E7945DDECEA49DB4BC81112456EF56BF6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 11:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d1:d0:dc:d9:70:69:9d:1c:b5:fb:77:18:a7:2c:07:d1:3a:cc:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22003C7E7945DDECEA49DB4BC81112456EF56BF6
        Validity
            Not Before: Jul  2 13:21:18 2026 GMT
            Not After : Jul  1 13:26:18 2027 GMT
        Subject: CN=93A38D1EDA590C17CA3723FB17FAAF83A573045A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c6:fa:2e:dd:94:00:46:3f:8c:5c:1d:a6:5e:
                    ea:04:1f:c7:24:7e:5f:c2:eb:bb:17:ac:71:07:40:
                    db:31:55:05:87:d8:5f:78:a5:29:83:54:ef:15:e1:
                    3d:35:71:e3:21:80:17:6d:a0:38:04:94:06:ae:0c:
                    0f:9b:1d:56:7d:e5:61:26:3b:2e:cf:5d:5e:41:fd:
                    94:c9:2d:6b:c7:db:96:e2:08:7d:14:7c:70:04:47:
                    a8:75:4f:4b:e1:7c:86:90:1a:dd:c4:87:28:60:00:
                    b2:2c:b7:bb:b1:73:45:d5:86:7c:d5:1b:b9:74:34:
                    9c:53:7a:2e:06:4d:bf:24:16:5f:50:1e:d6:f5:c0:
                    de:fb:03:e1:66:09:b8:24:dc:ec:7e:15:71:1c:31:
                    85:c5:f4:4f:0a:58:34:27:84:ca:68:b2:72:19:a8:
                    a3:ad:e0:33:29:16:2a:1f:f6:1a:11:77:1f:c3:17:
                    a6:ff:68:fa:c1:86:6f:3f:ae:4f:6b:42:0b:9a:9b:
                    4c:56:e6:f0:68:ef:75:ee:f5:79:55:95:6f:86:4b:
                    be:7d:b9:fd:ef:d1:53:e8:c1:a8:77:d8:15:d9:9c:
                    df:1c:c7:82:0c:24:d9:20:ca:7f:6e:0c:67:11:31:
                    cc:ff:0b:b0:a0:ca:4d:47:87:49:56:e9:55:60:de:
                    9e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A3:8D:1E:DA:59:0C:17:CA:37:23:FB:17:FA:AF:83:A5:73:04:5A
            X509v3 Authority Key Identifier:
                keyid:22:00:3C:7E:79:45:DD:EC:EA:49:DB:4B:C8:11:12:45:6E:F5:6B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/22003C7E7945DDECEA49DB4BC81112456EF56BF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22003C7E7945DDECEA49DB4BC81112456EF56BF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/323830343a346333383a6161303a3a2f34332d3433203d3e20323637333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c38:aa0::/43

    Signature Algorithm: sha256WithRSAEncryption
         31:35:9b:1a:ad:69:23:63:4d:45:56:53:dd:b3:cb:f0:b0:8b:
         01:2d:0a:43:33:00:e3:95:a2:24:e2:96:42:af:ca:2a:30:fa:
         fe:26:29:6e:34:c0:57:62:5a:4a:ed:cc:d8:de:c8:66:94:d7:
         ad:ce:f2:1e:bc:8d:db:26:99:4f:86:d1:36:d7:84:7b:99:93:
         2e:53:cd:85:3f:4e:42:44:bd:2f:9d:9f:9d:95:dc:14:60:3f:
         3c:71:4f:e0:d5:3d:e1:66:60:24:e3:bb:8a:2a:0e:50:72:ec:
         56:95:93:7b:8e:fc:5c:ef:33:c1:4c:d2:a4:fa:4f:5f:9d:aa:
         4c:1d:cc:19:e8:69:26:74:80:95:a0:23:9a:64:60:9c:67:25:
         8c:68:28:88:15:cb:1f:af:91:9a:99:07:a9:25:bb:ef:29:f1:
         f8:80:f4:9d:54:c1:cd:11:56:74:05:e9:d0:0a:56:86:0d:cb:
         25:c3:4e:75:65:5c:1d:d7:b9:8c:e9:44:d2:e4:22:a5:a6:40:
         79:c7:4b:cf:d5:83:1b:88:40:31:81:aa:f5:fa:ff:c8:1b:d4:
         40:ce:d0:e7:b4:7f:61:6b:0a:ed:a3:24:e8:f0:5c:1d:49:33:
         d6:ab:08:b6:bc:4a:f5:05:fb:3e:ca:e6:0b:92:b4:85:c9:4e:
         33:4c:74:0b
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUW9HQ3NlwaZ0ctft3GKcsB9E6zGcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjIwMDNDN0U3OTQ1RERFQ0VBNDlEQjRCQzgxMTEyNDU2
RUY1NkJGNjAeFw0yNjA3MDIxMzIxMThaFw0yNzA3MDExMzI2MThaMDMxMTAvBgNV
BAMTKDkzQTM4RDFFREE1OTBDMTdDQTM3MjNGQjE3RkFBRjgzQTU3MzA0NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgxvou3ZQARj+MXB2mXuoEH8ck
fl/C67sXrHEHQNsxVQWH2F94pSmDVO8V4T01ceMhgBdtoDgElAauDA+bHVZ95WEm
Oy7PXV5B/ZTJLWvH25biCH0UfHAER6h1T0vhfIaQGt3EhyhgALIst7uxc0XVhnzV
G7l0NJxTei4GTb8kFl9QHtb1wN77A+FmCbgk3Ox+FXEcMYXF9E8KWDQnhMposnIZ
qKOt4DMpFiof9hoRdx/DF6b/aPrBhm8/rk9rQguam0xW5vBo73Xu9XlVlW+GS759
uf3v0VPowah32BXZnN8cx4IMJNkgyn9uDGcRMcz/C7Cgyk1Hh0lW6VVg3p6dAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUk6ONHtpZDBfKNyP7F/qvg6VzBFowHwYDVR0j
BBgwFoAUIgA8fnlF3ezqSdtLyBESRW71a/YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTZKUnVycnlCVHpVS2dpNVViVU5KUE1Qa0ptckt1TjJxSFBLVWlrWjM4
OVUvMC8yMjAwM0M3RTc5NDVEREVDRUE0OURCNEJDODExMTI0NTZFRjU2QkY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyMDAzQzdFNzk0NURERUNF
QTQ5REI0QkM4MTExMjQ1NkVGNTZCRjYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U2SlJ1cnJ5QlR6VUtnaTVVYlVOSlBNUGtKbXJLdU4ycUhQS1Vpa1ozODlVLzAv
MzIzODMwMzQzYTM0NjMzMzM4M2E2MTYxMzAzYTNhMmYzNDMzMmQzNDMzMjAzZDNl
MjAzMjM2MzczMzM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwUoBEw4CqAwDQYJKoZIhvcNAQELBQAD
ggEBADE1mxqtaSNjTUVWU92zy/CwiwEtCkMzAOOVoiTilkKvyiow+v4mKW40wFdi
WkrtzNjeyGaU163O8h68jdsmmU+G0TbXhHuZky5TzYU/TkJEvS+dn52V3BRgPzxx
T+DVPeFmYCTju4oqDlBy7FaVk3uO/FzvM8FM0qT6T1+dqkwdzBnoaSZ0gJWgI5pk
YJxnJYxoKIgVyx+vkZqZB6klu+8p8fiA9J1Uwc0RVnQF6dAKVoYNyyXDTnVlXB3X
uYzpRNLkIqWmQHnHS8/VgxuIQDGBqvX6/8gb1EDO0Oe0f2FrCu2jJOjwXB1JM9ar
CLa8SvUF+z7K5guStIXJTjNMdAs=
-----END CERTIFICATE-----
Generated at Wed Jul 8 18:08:11 2026 by rpki-client