Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/323830343a323434343a3a2f33322d3332203d3e20323634323131.roa
File:                     323830343a323434343a3a2f33322d3332203d3e20323634323131.roa (raw, json)
Hash identifier:          ssTr5F1JBpV2xu7UxJPltGbv07f4gg4gHCeY1mbIiDE=
Subject key identifier:   62:F4:E9:47:02:25:98:38:3D:A7:FC:2A:37:D6:A0:6C:16:86:55:9A
Certificate issuer:       /CN=916B2689E54D248C6020BC30FDA122F25B14FE87
Certificate serial:       07B046FDC2F9F589E695E8BB459E25D1C18A0000
Authority key identifier: 91:6B:26:89:E5:4D:24:8C:60:20:BC:30:FD:A1:22:F2:5B:14:FE:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/916B2689E54D248C6020BC30FDA122F25B14FE87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/323830343a323434343a3a2f33322d3332203d3e20323634323131.roa
Signing time:             Sun 12 Jul 2026 18:02:05 +0000
ROA not before:           Sun 12 Jul 2026 17:57:05 +0000
ROA not after:            Sun 11 Jul 2027 18:02:05 +0000
asID:                     264211
IP address blocks:        2804:2444::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/916B2689E54D248C6020BC30FDA122F25B14FE87.crl
                          rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/916B2689E54D248C6020BC30FDA122F25B14FE87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/916B2689E54D248C6020BC30FDA122F25B14FE87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 13:09:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b0:46:fd:c2:f9:f5:89:e6:95:e8:bb:45:9e:25:d1:c1:8a:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=916B2689E54D248C6020BC30FDA122F25B14FE87
        Validity
            Not Before: Jul 12 17:57:05 2026 GMT
            Not After : Jul 11 18:02:05 2027 GMT
        Subject: CN=62F4E947022598383DA7FC2A37D6A06C1686559A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:16:0e:f0:77:7d:95:55:a0:3a:42:d7:d6:22:
                    e9:90:73:2a:86:da:9d:e3:a9:5d:99:12:ff:ed:c2:
                    9a:c3:c7:03:21:a2:ff:8e:d2:ac:c4:6e:e1:7a:37:
                    77:95:57:80:87:d0:af:49:f2:0d:9f:f1:f8:dd:ae:
                    4f:4b:5b:d9:03:ef:06:98:60:5a:ec:10:b7:6f:c1:
                    ab:34:5f:65:92:0d:aa:bf:38:e3:89:45:72:30:be:
                    61:eb:b2:ad:a5:99:2f:63:db:c5:91:2f:a5:b1:88:
                    81:b3:96:91:76:d2:da:74:1c:54:f3:87:ea:50:18:
                    2e:1d:36:4e:08:96:cf:da:66:9b:34:44:95:3f:d1:
                    99:3d:62:e2:80:fb:ca:50:9b:33:bf:c9:b5:36:38:
                    2d:8b:08:65:93:80:03:eb:a4:5f:fb:1e:d6:d5:d4:
                    e8:a8:ff:66:60:f1:d5:0a:18:08:dc:23:18:33:0f:
                    b8:3c:29:74:e1:4d:51:0c:4a:a4:f2:fc:c2:08:4b:
                    93:95:b4:35:ae:0c:0b:e8:de:b2:b9:5f:6c:dc:90:
                    b2:4b:69:31:bf:3d:22:80:74:75:ea:03:80:75:77:
                    5d:66:d7:e4:19:e3:fa:ae:5f:94:eb:3d:3f:33:1e:
                    10:e5:0a:9d:e0:1d:23:bb:a2:45:83:7a:7c:7f:85:
                    38:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F4:E9:47:02:25:98:38:3D:A7:FC:2A:37:D6:A0:6C:16:86:55:9A
            X509v3 Authority Key Identifier:
                keyid:91:6B:26:89:E5:4D:24:8C:60:20:BC:30:FD:A1:22:F2:5B:14:FE:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/916B2689E54D248C6020BC30FDA122F25B14FE87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/916B2689E54D248C6020BC30FDA122F25B14FE87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/323830343a323434343a3a2f33322d3332203d3e20323634323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2444::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:4a:fb:07:5e:2d:c8:66:eb:1b:30:5b:70:4e:e0:7f:69:c5:
         b0:68:84:d4:5d:15:0b:16:12:0e:a1:94:52:cd:b3:53:2e:38:
         33:c2:d1:26:0a:22:f3:df:c2:ba:6b:6b:1b:1e:3d:aa:19:cc:
         e3:97:f4:9a:46:1d:e7:44:d9:ed:54:f3:46:7d:fb:7b:30:88:
         58:35:a5:7e:00:40:ca:90:cc:e3:c5:a3:a3:50:82:4f:33:ff:
         9e:56:78:9d:a6:c5:12:26:cc:cd:54:57:da:e3:86:a1:49:d5:
         f5:18:50:fd:08:3a:38:4a:12:eb:b9:8a:4d:00:6f:de:26:0f:
         c5:a7:2d:17:ec:9b:b1:90:38:15:c9:1e:3f:6a:90:9e:3c:97:
         6d:99:1a:2d:57:2e:e6:f5:2f:7c:0f:75:d2:f7:94:22:8e:bb:
         c7:0e:35:e3:78:b1:ef:77:63:f1:18:f1:15:38:5d:5d:65:3a:
         6c:96:b2:75:0e:ef:56:23:e6:68:0a:fb:5d:06:35:38:46:db:
         bf:ff:00:e8:aa:12:f3:85:e0:72:1e:a2:3e:b8:9a:2a:96:55:
         cd:35:2b:dd:7a:36:20:ad:73:33:c7:98:f0:3e:e1:f3:12:36:
         93:cc:01:5c:1f:df:c1:8a:65:a3:e3:4e:8f:20:1f:6d:0f:a7:
         a5:2f:07:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:10:35 2026 by rpki-client