Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6maP6AcuBWnzb1zgtFVdTZ8zwsftqSaJ5ZGjbNcXQN74/0/323830343a376363343a663030303a3a2f34302d3430203d3e20323731353137.roa
File:                     323830343a376363343a663030303a3a2f34302d3430203d3e20323731353137.roa (raw, json)
Hash identifier:          l5eB0Pa3EuDF/9kCRebAK6NHq2SlslA9JPdv+0WDrGw=
Subject key identifier:   F9:A5:E8:26:79:D4:8D:E4:86:8A:55:50:26:F1:28:2E:08:D6:22:45
Certificate issuer:       /CN=F78A1D8BE9AA3D70F99A3F21A974FF836EC0FE16
Certificate serial:       0B19B1AEA859034C2785E32AC6A1C888A409B673
Authority key identifier: F7:8A:1D:8B:E9:AA:3D:70:F9:9A:3F:21:A9:74:FF:83:6E:C0:FE:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F78A1D8BE9AA3D70F99A3F21A974FF836EC0FE16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6maP6AcuBWnzb1zgtFVdTZ8zwsftqSaJ5ZGjbNcXQN74/0/323830343a376363343a663030303a3a2f34302d3430203d3e20323731353137.roa
Signing time:             Mon 20 Apr 2026 19:07:52 +0000
ROA not before:           Mon 20 Apr 2026 19:02:52 +0000
ROA not after:            Mon 19 Apr 2027 19:07:52 +0000
asID:                     271517
IP address blocks:        2804:7cc4:f000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6maP6AcuBWnzb1zgtFVdTZ8zwsftqSaJ5ZGjbNcXQN74/0/F78A1D8BE9AA3D70F99A3F21A974FF836EC0FE16.crl
                          rsync://rpki-repo.registro.br/repo/6maP6AcuBWnzb1zgtFVdTZ8zwsftqSaJ5ZGjbNcXQN74/0/F78A1D8BE9AA3D70F99A3F21A974FF836EC0FE16.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F78A1D8BE9AA3D70F99A3F21A974FF836EC0FE16.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 12:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:19:b1:ae:a8:59:03:4c:27:85:e3:2a:c6:a1:c8:88:a4:09:b6:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F78A1D8BE9AA3D70F99A3F21A974FF836EC0FE16
        Validity
            Not Before: Apr 20 19:02:52 2026 GMT
            Not After : Apr 19 19:07:52 2027 GMT
        Subject: CN=F9A5E82679D48DE4868A555026F1282E08D62245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c4:ad:3c:b8:8f:75:ae:cd:26:98:8b:6e:b9:
                    fa:7c:3e:f3:0c:91:70:05:64:2f:b0:82:95:bf:4a:
                    8a:d5:73:d1:d4:68:14:d9:1a:76:9f:54:f8:f7:70:
                    f8:a4:45:18:25:2e:2b:ed:86:6c:1d:1c:94:37:92:
                    e8:b3:41:53:e1:b1:fe:b8:00:bc:76:e8:a3:b9:57:
                    81:ad:5d:29:3d:22:00:8c:78:80:54:a5:09:86:3b:
                    10:19:66:89:cf:63:4b:44:58:1a:26:59:74:2d:08:
                    8a:6c:4d:7f:b6:85:ca:21:84:d3:6c:79:a1:3b:10:
                    7c:c6:49:26:2b:c5:f2:48:14:41:7e:6e:71:cf:61:
                    ae:0a:71:81:e8:61:45:0c:8f:ad:d9:e9:07:b8:8d:
                    1a:a3:93:09:0c:9b:80:8d:76:5d:b1:4e:2d:dd:fa:
                    93:e7:c4:14:81:e4:bf:44:db:06:a5:0b:e5:8e:29:
                    6d:14:bf:80:a5:14:24:dd:21:54:fe:46:ea:6b:b0:
                    50:22:a5:36:bc:97:3d:24:2d:df:e5:32:68:42:39:
                    62:a2:97:c7:97:87:56:5e:3b:bc:57:02:9b:3c:57:
                    96:ee:63:e1:d7:73:42:cd:6e:54:5b:63:88:9b:1f:
                    f4:9a:a8:8b:f0:66:9d:19:e9:91:eb:b1:0e:90:ee:
                    9f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A5:E8:26:79:D4:8D:E4:86:8A:55:50:26:F1:28:2E:08:D6:22:45
            X509v3 Authority Key Identifier:
                keyid:F7:8A:1D:8B:E9:AA:3D:70:F9:9A:3F:21:A9:74:FF:83:6E:C0:FE:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6maP6AcuBWnzb1zgtFVdTZ8zwsftqSaJ5ZGjbNcXQN74/0/F78A1D8BE9AA3D70F99A3F21A974FF836EC0FE16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F78A1D8BE9AA3D70F99A3F21A974FF836EC0FE16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6maP6AcuBWnzb1zgtFVdTZ8zwsftqSaJ5ZGjbNcXQN74/0/323830343a376363343a663030303a3a2f34302d3430203d3e20323731353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7cc4:f000::/40

    Signature Algorithm: sha256WithRSAEncryption
         6f:8d:2a:9d:50:9c:64:ee:88:fa:2f:46:26:67:2d:a3:12:24:
         f2:7c:ae:32:8c:43:b6:d0:3e:06:98:91:96:a2:26:64:19:a3:
         84:e5:77:fa:e1:d3:aa:61:b6:e5:63:db:7b:6c:62:c9:ba:8a:
         24:93:4e:9e:6f:f3:4b:e7:7d:1a:0c:8a:6d:7c:c9:a6:89:00:
         31:97:eb:dc:f5:c3:20:11:21:2d:e5:ff:fa:34:7c:9b:83:ec:
         1f:11:c4:66:b4:c3:4b:60:3b:71:8e:d4:cb:71:68:a3:0b:55:
         ab:29:22:aa:84:2a:50:d4:fc:e9:bc:e0:e9:7b:eb:01:48:b0:
         f1:ea:ba:58:29:6d:56:a6:8c:61:a6:ac:f1:38:f5:68:9e:b9:
         a0:b4:cb:4c:8c:08:ac:2a:cf:37:0b:a4:09:af:b5:f2:be:25:
         11:a5:5b:eb:dc:4a:0d:66:15:83:43:06:17:03:65:36:cf:36:
         34:0c:a7:8e:36:40:66:67:0a:19:e0:53:17:c2:44:7b:1b:54:
         68:ef:9d:63:55:c2:14:28:a6:a7:6e:c7:77:37:41:ba:09:ec:
         e4:34:4d:4d:aa:ae:ea:f7:fb:cc:f2:28:7c:f3:22:89:bc:23:
         5e:b3:6b:69:ff:c3:db:4a:0d:29:d4:a9:c8:4d:81:2d:c2:09:
         8e:da:f3:99
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUCxmxrqhZA0wnheMqxqHIiKQJtnMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjc4QTFEOEJFOUFBM0Q3MEY5OUEzRjIxQTk3NEZGODM2
RUMwRkUxNjAeFw0yNjA0MjAxOTAyNTJaFw0yNzA0MTkxOTA3NTJaMDMxMTAvBgNV
BAMTKEY5QTVFODI2NzlENDhERTQ4NjhBNTU1MDI2RjEyODJFMDhENjIyNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClxK08uI91rs0mmItuufp8PvMM
kXAFZC+wgpW/SorVc9HUaBTZGnafVPj3cPikRRglLivthmwdHJQ3kuizQVPhsf64
ALx26KO5V4GtXSk9IgCMeIBUpQmGOxAZZonPY0tEWBomWXQtCIpsTX+2hcohhNNs
eaE7EHzGSSYrxfJIFEF+bnHPYa4KcYHoYUUMj63Z6Qe4jRqjkwkMm4CNdl2xTi3d
+pPnxBSB5L9E2walC+WOKW0Uv4ClFCTdIVT+RuprsFAipTa8lz0kLd/lMmhCOWKi
l8eXh1ZeO7xXAps8V5buY+HXc0LNblRbY4ibH/SaqIvwZp0Z6ZHrsQ6Q7p9xAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU+aXoJnnUjeSGilVQJvEoLgjWIkUwHwYDVR0j
BBgwFoAU94odi+mqPXD5mj8hqXT/g27A/hYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNm1hUDZBY3VCV256YjF6Z3RGVmRUWjh6d3NmdHFTYUo1WkdqYk5jWFFO
NzQvMC9GNzhBMUQ4QkU5QUEzRDcwRjk5QTNGMjFBOTc0RkY4MzZFQzBGRTE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y3OEExRDhCRTlBQTNENzBG
OTlBM0YyMUE5NzRGRjgzNkVDMEZFMTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZtYVA2QWN1QlduemIxemd0RlZkVFo4endzZnRxU2FKNVpHamJOY1hRTjc0LzAv
MzIzODMwMzQzYTM3NjM2MzM0M2E2NjMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzczMTM1MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEfMTwMA0GCSqGSIb3DQEBCwUA
A4IBAQBvjSqdUJxk7oj6L0YmZy2jEiTyfK4yjEO20D4GmJGWoiZkGaOE5Xf64dOq
YbblY9t7bGLJuookk06eb/NL530aDIptfMmmiQAxl+vc9cMgESEt5f/6NHybg+wf
EcRmtMNLYDtxjtTLcWijC1WrKSKqhCpQ1PzpvODpe+sBSLDx6rpYKW1Wpoxhpqzx
OPVonrmgtMtMjAisKs83C6QJr7XyviURpVvr3EoNZhWDQwYXA2U2zzY0DKeONkBm
ZwoZ4FMXwkR7G1Ro751jVcIUKKanbsd3N0G6CezkNE1Nqq7q9/vM8ih88yKJvCNe
s2tp/8PbSg0p1KnITYEtwgmO2vOZ
-----END CERTIFICATE-----
Generated at Wed May 13 18:45:45 2026 by rpki-client