Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/323830343a326539343a3a2f33322d3438203d3e203532373830.roa
File:                     323830343a326539343a3a2f33322d3438203d3e203532373830.roa (raw, json)
Hash identifier:          3qqAjw1E8CBH+H5pJLf/bEGFATw/Rn9BtVlCBBXl1RU=
Subject key identifier:   E7:25:FE:59:C2:6A:16:E7:32:66:ED:09:C9:09:96:E9:59:31:0A:9B
Certificate issuer:       /CN=62359520334D7337A1218235D4F9CFFF125A756C
Certificate serial:       137D3DA551AFE94788C02C89FA8A48128531CA23
Authority key identifier: 62:35:95:20:33:4D:73:37:A1:21:82:35:D4:F9:CF:FF:12:5A:75:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62359520334D7337A1218235D4F9CFFF125A756C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/323830343a326539343a3a2f33322d3438203d3e203532373830.roa
Signing time:             Fri 03 Jul 2026 16:12:29 +0000
ROA not before:           Fri 03 Jul 2026 16:07:29 +0000
ROA not after:            Fri 02 Jul 2027 16:12:29 +0000
asID:                     52780
IP address blocks:        2804:2e94::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/62359520334D7337A1218235D4F9CFFF125A756C.crl
                          rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/62359520334D7337A1218235D4F9CFFF125A756C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62359520334D7337A1218235D4F9CFFF125A756C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 07:58:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:7d:3d:a5:51:af:e9:47:88:c0:2c:89:fa:8a:48:12:85:31:ca:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62359520334D7337A1218235D4F9CFFF125A756C
        Validity
            Not Before: Jul  3 16:07:29 2026 GMT
            Not After : Jul  2 16:12:29 2027 GMT
        Subject: CN=E725FE59C26A16E73266ED09C90996E959310A9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:86:b0:03:93:59:95:96:40:ce:d3:1c:18:f1:
                    15:dc:c2:9a:8b:1d:59:62:a8:c9:e0:c7:60:b8:70:
                    0b:b9:b1:93:02:ea:78:52:c1:93:14:ae:f6:e8:e7:
                    b7:86:a3:26:40:23:0d:52:d3:a4:6d:d2:be:5c:d1:
                    00:08:27:a2:5d:67:80:87:ce:5b:44:e6:46:ec:31:
                    ea:2b:af:b6:9b:6f:d0:b0:12:7e:df:87:db:28:cd:
                    1c:52:c5:31:81:e5:d6:ab:90:11:66:7b:93:b9:86:
                    15:aa:a6:b3:88:40:e1:90:51:11:e2:5d:12:ab:69:
                    2f:0b:71:a2:c2:34:06:05:1c:a6:68:76:cc:f7:2b:
                    52:01:4d:3f:a6:67:88:ae:c1:a6:c1:d8:41:c5:77:
                    b8:aa:2e:cb:18:cc:66:62:44:f9:31:9a:13:ed:88:
                    f8:b8:b1:52:1c:36:09:d8:50:70:3e:a5:c7:4e:26:
                    1b:6d:8d:05:5c:49:41:87:5c:d9:b0:4a:49:92:40:
                    3c:ab:61:7e:5e:ad:c8:fd:e0:91:5c:62:37:54:12:
                    94:9b:fa:51:d5:df:1a:61:e2:e4:94:b9:85:c1:32:
                    8d:8e:ea:79:ce:0c:df:d0:b5:7e:b5:bf:38:27:a2:
                    20:f3:68:35:61:d5:a0:04:1c:4f:22:99:99:85:9c:
                    92:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:25:FE:59:C2:6A:16:E7:32:66:ED:09:C9:09:96:E9:59:31:0A:9B
            X509v3 Authority Key Identifier:
                keyid:62:35:95:20:33:4D:73:37:A1:21:82:35:D4:F9:CF:FF:12:5A:75:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/62359520334D7337A1218235D4F9CFFF125A756C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62359520334D7337A1218235D4F9CFFF125A756C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/323830343a326539343a3a2f33322d3438203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e94::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:5c:e2:8a:6a:1f:01:68:7c:14:95:5a:15:02:6b:5b:76:9e:
         ad:b1:e5:36:fe:0e:0e:5d:6d:2c:81:51:59:48:54:97:e3:18:
         a4:b0:b2:4a:30:b6:9f:b7:d6:6b:26:b9:27:d5:5b:f8:c8:72:
         da:d1:9b:53:c6:b1:2c:df:61:df:19:2c:b9:76:f5:39:93:a1:
         56:00:44:e1:c4:dc:ea:86:4a:e9:14:91:c7:c1:24:1f:28:49:
         f2:c5:4d:02:4e:ef:af:3e:e4:9c:4e:1a:94:45:cc:99:dd:8a:
         5b:59:ac:39:81:43:d7:b4:f4:ae:b3:3d:40:b7:bc:5f:fc:a4:
         72:f9:9f:d1:f7:9f:a2:f0:62:d6:03:80:0a:8a:07:ca:28:87:
         d7:78:09:73:0c:f3:b5:99:d2:0d:fb:3c:db:84:ce:21:7b:60:
         60:5e:20:7d:08:f1:48:e3:b2:3b:de:8e:02:11:c7:bb:f3:b9:
         20:7a:7f:3a:84:9e:49:c2:ff:3c:73:00:d2:a7:24:bb:c1:47:
         5c:c9:a9:ab:fb:8d:9d:b7:e3:d1:45:aa:d8:b3:87:f8:7e:9e:
         a7:88:a9:06:f7:e5:10:f5:dc:3a:0c:1f:cb:08:c9:c5:27:01:
         a4:6b:09:0c:41:5d:9c:ca:ac:b7:9c:69:f6:63:87:c5:94:fe:
         49:b8:00:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:55:55 2026 by rpki-client