Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/323830343a366138343a3a2f33322d3332203d3e20323730333431.roa
File:                     323830343a366138343a3a2f33322d3332203d3e20323730333431.roa (raw, json)
Hash identifier:          q8szaP/vC+5EK4NAKptcOH8puVfdjFMzIG9EjZstdig=
Subject key identifier:   1F:C8:E4:D7:FB:44:43:32:D4:C0:BC:81:1B:FB:5C:B2:79:DB:E5:13
Certificate issuer:       /CN=D4CE1443D6786421014CB2B08469ADBFF750F303
Certificate serial:       4CCDC1C7EBAC72C06FCC91732CA32DF58BB653BC
Authority key identifier: D4:CE:14:43:D6:78:64:21:01:4C:B2:B0:84:69:AD:BF:F7:50:F3:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4CE1443D6786421014CB2B08469ADBFF750F303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/323830343a366138343a3a2f33322d3332203d3e20323730333431.roa
Signing time:             Thu 25 Jun 2026 13:51:14 +0000
ROA not before:           Thu 25 Jun 2026 13:46:14 +0000
ROA not after:            Thu 24 Jun 2027 13:51:14 +0000
asID:                     270341
IP address blocks:        2804:6a84::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/D4CE1443D6786421014CB2B08469ADBFF750F303.crl
                          rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/D4CE1443D6786421014CB2B08469ADBFF750F303.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4CE1443D6786421014CB2B08469ADBFF750F303.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 18:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:cd:c1:c7:eb:ac:72:c0:6f:cc:91:73:2c:a3:2d:f5:8b:b6:53:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4CE1443D6786421014CB2B08469ADBFF750F303
        Validity
            Not Before: Jun 25 13:46:14 2026 GMT
            Not After : Jun 24 13:51:14 2027 GMT
        Subject: CN=1FC8E4D7FB444332D4C0BC811BFB5CB279DBE513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e7:f4:ba:a8:6a:8e:b0:c3:27:4b:03:25:bd:
                    59:b7:c1:c5:9d:6d:da:0a:07:d4:68:68:22:eb:2e:
                    20:27:21:f4:c6:3b:ad:b3:57:46:a2:4e:1a:3f:7a:
                    5b:80:de:49:b1:dd:48:fe:e0:60:37:0f:a9:3a:d0:
                    fd:70:9a:a0:20:26:d3:e5:6c:4e:7c:df:a1:a9:95:
                    d3:a2:5b:d0:f6:37:3e:8e:03:aa:bf:80:1b:35:af:
                    66:3e:2d:71:10:3c:d8:6c:5c:2e:05:9e:53:ca:d4:
                    e9:e7:f3:9e:ea:4d:66:67:d5:83:00:95:d0:98:c8:
                    07:55:23:7a:a0:83:07:fa:cd:81:cf:6f:2c:bf:16:
                    e9:e4:ad:73:ec:e2:ec:11:a9:eb:ed:d0:1f:2a:15:
                    92:7b:11:7b:2f:94:01:5d:62:70:33:03:16:cf:12:
                    88:20:bb:c3:df:b7:d5:81:88:62:f7:56:43:c8:5a:
                    6a:80:7c:58:7b:91:84:1c:3e:9f:53:4e:b3:0e:f6:
                    7a:4d:18:a2:bc:ce:7a:aa:8c:63:65:97:6a:56:8d:
                    a0:bd:cf:07:d8:16:67:cc:dd:28:8e:90:88:87:92:
                    22:65:38:fc:dd:47:83:6e:36:fe:3e:b7:a5:bf:a7:
                    f0:96:91:14:88:59:80:3c:f3:35:f7:ac:04:5a:46:
                    21:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C8:E4:D7:FB:44:43:32:D4:C0:BC:81:1B:FB:5C:B2:79:DB:E5:13
            X509v3 Authority Key Identifier:
                keyid:D4:CE:14:43:D6:78:64:21:01:4C:B2:B0:84:69:AD:BF:F7:50:F3:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/D4CE1443D6786421014CB2B08469ADBFF750F303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4CE1443D6786421014CB2B08469ADBFF750F303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/323830343a366138343a3a2f33322d3332203d3e20323730333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a84::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:90:2b:7d:f5:d6:4a:f7:a6:e4:ec:51:46:55:97:b1:58:e6:
         b0:c2:85:29:12:88:3a:fc:67:f1:79:de:1d:2d:5d:84:e3:b8:
         16:b7:48:00:73:4b:39:69:23:f8:10:d7:ee:04:41:04:06:34:
         5c:33:bc:64:b6:30:58:2f:f1:0a:c7:27:dd:13:61:b1:19:5a:
         b6:9e:1d:54:c9:80:68:d9:0e:a6:49:29:33:b1:b2:ba:16:09:
         3a:14:9b:aa:91:b4:47:17:84:72:47:92:2b:d5:2a:93:fd:2a:
         6a:2f:bd:21:f7:5d:cf:d7:98:dc:cf:ad:de:00:d0:5f:62:90:
         1b:a0:39:30:d2:4c:46:fb:ef:8e:e1:19:e3:13:0b:e1:a4:4b:
         f0:a4:e5:c6:6c:47:49:04:43:67:e5:3b:09:87:d4:0d:22:35:
         20:5d:ca:fa:63:03:13:78:e7:48:d9:7c:c2:96:78:c5:5d:01:
         97:67:59:2b:e9:96:6d:96:62:00:cf:f4:68:84:cc:41:aa:06:
         c5:86:1b:76:ce:24:6a:11:00:f6:f8:03:bd:7d:71:7a:8e:f0:
         70:6a:89:ee:97:b5:cb:54:42:a4:33:cc:e7:f4:d4:85:15:ea:
         b1:21:22:f7:e6:3b:73:eb:80:df:d0:26:13:40:e4:ad:6e:38:
         0e:3f:76:59
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUTM3Bx+uscsBvzJFzLKMt9Yu2U7wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDRDRTE0NDNENjc4NjQyMTAxNENCMkIwODQ2OUFEQkZG
NzUwRjMwMzAeFw0yNjA2MjUxMzQ2MTRaFw0yNzA2MjQxMzUxMTRaMDMxMTAvBgNV
BAMTKDFGQzhFNEQ3RkI0NDQzMzJENEMwQkM4MTFCRkI1Q0IyNzlEQkU1MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX5/S6qGqOsMMnSwMlvVm3wcWd
bdoKB9RoaCLrLiAnIfTGO62zV0aiTho/eluA3kmx3Uj+4GA3D6k60P1wmqAgJtPl
bE5836GpldOiW9D2Nz6OA6q/gBs1r2Y+LXEQPNhsXC4FnlPK1Onn857qTWZn1YMA
ldCYyAdVI3qggwf6zYHPbyy/FunkrXPs4uwRqevt0B8qFZJ7EXsvlAFdYnAzAxbP
Eoggu8Pft9WBiGL3VkPIWmqAfFh7kYQcPp9TTrMO9npNGKK8znqqjGNll2pWjaC9
zwfYFmfM3SiOkIiHkiJlOPzdR4NuNv4+t6W/p/CWkRSIWYA88zX3rARaRiHzAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUH8jk1/tEQzLUwLyBG/tcsnnb5RMwHwYDVR0j
BBgwFoAU1M4UQ9Z4ZCEBTLKwhGmtv/dQ8wMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXVuTGNGMmNDY3VualdRMTVLbk1ZS0NTQkFleVRIWUN1NzFFUERkVW1R
Qk4vMC9ENENFMTQ0M0Q2Nzg2NDIxMDE0Q0IyQjA4NDY5QURCRkY3NTBGMzAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0Q0UxNDQzRDY3ODY0MjEw
MTRDQjJCMDg0NjlBREJGRjc1MEYzMDMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0V1bkxjRjJjQ2N1bmpXUTE1S25NWUtDU0JBZXlUSFlDdTcxRVBEZFVtUUJOLzAv
MzIzODMwMzQzYTM2NjEzODM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzMzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARqhDANBgkqhkiG9w0BAQsFAAOCAQEAdJArffXW
Svem5OxRRlWXsVjmsMKFKRKIOvxn8XneHS1dhOO4FrdIAHNLOWkj+BDX7gRBBAY0
XDO8ZLYwWC/xCscn3RNhsRlatp4dVMmAaNkOpkkpM7GyuhYJOhSbqpG0RxeEckeS
K9Uqk/0qai+9Ifddz9eY3M+t3gDQX2KQG6A5MNJMRvvvjuEZ4xML4aRL8KTlxmxH
SQRDZ+U7CYfUDSI1IF3K+mMDE3jnSNl8wpZ4xV0Bl2dZK+mWbZZiAM/0aITMQaoG
xYYbds4kahEA9vgDvX1xeo7wcGqJ7pe1y1RCpDPM5/TUhRXqsSEi9+Y7c+uA39Am
E0DkrW44Dj92WQ==
-----END CERTIFICATE-----
Generated at Wed Jul 8 18:04:28 2026 by rpki-client