Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/323830343a336636343a3a2f33322d3333203d3e20323635383930.roa
File:                     323830343a336636343a3a2f33322d3333203d3e20323635383930.roa (raw, json)
Hash identifier:          mqk7UPwEjUOoyLbdWR/eBz32H0sggyvxB+Jet54PbhI=
Subject key identifier:   77:DC:39:F7:DE:F0:9F:5D:DE:68:E4:31:86:E8:66:2C:31:75:F2:A0
Certificate issuer:       /CN=A6BD6BC5143122F30DC833371C8CC980D393EF5D
Certificate serial:       13046178A05DF301A92CC523B8D3E309C67B14A6
Authority key identifier: A6:BD:6B:C5:14:31:22:F3:0D:C8:33:37:1C:8C:C9:80:D3:93:EF:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6BD6BC5143122F30DC833371C8CC980D393EF5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/323830343a336636343a3a2f33322d3333203d3e20323635383930.roa
Signing time:             Thu 23 Jul 2026 16:19:25 +0000
ROA not before:           Thu 23 Jul 2026 16:14:25 +0000
ROA not after:            Thu 22 Jul 2027 16:19:25 +0000
asID:                     265890
IP address blocks:        2804:3f64::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/A6BD6BC5143122F30DC833371C8CC980D393EF5D.crl
                          rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/A6BD6BC5143122F30DC833371C8CC980D393EF5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6BD6BC5143122F30DC833371C8CC980D393EF5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:22:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:04:61:78:a0:5d:f3:01:a9:2c:c5:23:b8:d3:e3:09:c6:7b:14:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6BD6BC5143122F30DC833371C8CC980D393EF5D
        Validity
            Not Before: Jul 23 16:14:25 2026 GMT
            Not After : Jul 22 16:19:25 2027 GMT
        Subject: CN=77DC39F7DEF09F5DDE68E43186E8662C3175F2A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d7:71:9b:37:c4:7d:56:42:56:c2:a9:8e:71:
                    6a:46:2e:7e:10:f3:73:4d:da:a1:5c:14:d3:31:d4:
                    47:37:f0:d5:d1:e4:2f:61:d2:06:6a:d6:49:9b:f1:
                    21:82:9b:28:33:bf:30:05:53:46:a9:26:27:b6:d5:
                    25:a7:49:3a:15:60:4a:e1:d7:21:3d:1b:1b:79:a9:
                    7c:f0:32:7c:6f:2c:a9:bd:29:8f:ea:ed:a1:66:d2:
                    95:70:52:b7:ce:43:11:45:f7:6a:62:f2:13:2d:b6:
                    ec:a8:c7:b9:2e:16:4c:57:a5:01:1e:cc:5c:78:b5:
                    46:26:7c:56:75:59:2d:ee:20:59:77:51:27:11:97:
                    8f:47:57:d7:3c:e6:5e:1d:44:10:c1:18:34:68:61:
                    cc:ad:19:76:1d:3c:ff:d6:2c:24:ff:a6:b2:9c:a4:
                    5b:09:a2:6c:31:a9:4e:2d:e2:85:2e:70:45:ed:4f:
                    07:ef:b1:63:53:17:05:a1:dd:9c:6b:d8:c9:89:3d:
                    d1:7c:84:f9:c1:61:a1:be:7f:7b:1e:3e:2c:8c:21:
                    28:63:9a:3c:43:67:bc:ee:7d:69:9d:64:34:99:03:
                    5c:ea:10:9e:96:eb:79:1b:5f:9a:99:be:43:65:12:
                    29:fc:93:e4:21:50:d0:a7:23:c2:4f:86:17:ca:b9:
                    c4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DC:39:F7:DE:F0:9F:5D:DE:68:E4:31:86:E8:66:2C:31:75:F2:A0
            X509v3 Authority Key Identifier:
                keyid:A6:BD:6B:C5:14:31:22:F3:0D:C8:33:37:1C:8C:C9:80:D3:93:EF:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/A6BD6BC5143122F30DC833371C8CC980D393EF5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6BD6BC5143122F30DC833371C8CC980D393EF5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/323830343a336636343a3a2f33322d3333203d3e20323635383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f64::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:7d:91:cd:d4:63:2d:25:59:44:17:98:06:6f:65:7f:d5:6c:
         cd:13:87:a0:9b:d4:38:90:2a:10:68:e4:15:1d:04:02:75:16:
         9b:91:41:02:7d:a9:cf:69:85:50:90:4b:50:39:3e:c9:8d:19:
         2a:8e:76:ea:14:65:ac:e0:af:95:71:bf:82:88:12:cf:0a:33:
         b1:c9:e5:91:b6:04:ce:63:b8:17:55:0f:f7:bd:41:23:8b:1c:
         cd:59:fb:5d:10:2b:80:c2:c8:20:44:0a:6f:47:69:3e:dc:50:
         2a:62:3e:04:5f:c2:30:b0:3b:8f:f2:75:1f:32:3b:11:7e:fd:
         7f:aa:8f:77:c0:ba:9a:fc:46:90:77:87:37:66:7b:5d:be:14:
         06:2e:df:70:fb:b1:8b:60:67:56:b9:c9:db:12:c6:f7:77:b8:
         80:43:4e:32:00:2b:5a:e0:06:7c:c2:23:5e:cb:ac:af:9a:f1:
         40:ff:64:5d:3d:bf:81:bc:45:e2:ca:84:06:bc:47:b7:07:b0:
         d7:be:0a:f0:2b:c3:d1:2c:29:15:05:e5:de:bf:ac:1d:64:a8:
         ec:1f:2b:eb:a4:88:ba:fa:32:a2:d2:7e:4f:b9:87:5b:85:13:
         be:1c:ab:0a:d4:d2:70:44:0d:d4:0c:ad:e6:d7:19:2d:ab:bc:
         17:07:fa:cb
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUEwRheKBd8wGpLMUjuNPjCcZ7FKYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTZCRDZCQzUxNDMxMjJGMzBEQzgzMzM3MUM4Q0M5ODBE
MzkzRUY1RDAeFw0yNjA3MjMxNjE0MjVaFw0yNzA3MjIxNjE5MjVaMDMxMTAvBgNV
BAMTKDc3REMzOUY3REVGMDlGNURERTY4RTQzMTg2RTg2NjJDMzE3NUYyQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN13GbN8R9VkJWwqmOcWpGLn4Q
83NN2qFcFNMx1Ec38NXR5C9h0gZq1kmb8SGCmygzvzAFU0apJie21SWnSToVYErh
1yE9Gxt5qXzwMnxvLKm9KY/q7aFm0pVwUrfOQxFF92pi8hMttuyox7kuFkxXpQEe
zFx4tUYmfFZ1WS3uIFl3UScRl49HV9c85l4dRBDBGDRoYcytGXYdPP/WLCT/prKc
pFsJomwxqU4t4oUucEXtTwfvsWNTFwWh3Zxr2MmJPdF8hPnBYaG+f3sePiyMIShj
mjxDZ7zufWmdZDSZA1zqEJ6W63kbX5qZvkNlEin8k+QhUNCnI8JPhhfKucSfAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUd9w5997wn13eaOQxhuhmLDF18qAwHwYDVR0j
BBgwFoAUpr1rxRQxIvMNyDM3HIzJgNOT710wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGpZeUZDOURCcEhRRE5aY2ttZ0dqVDN5UVRMS3ZGYlNzQ3phM004V1E4
cUEvMC9BNkJENkJDNTE0MzEyMkYzMERDODMzMzcxQzhDQzk4MEQzOTNFRjVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2QkQ2QkM1MTQzMTIyRjMw
REM4MzMzNzFDOENDOTgwRDM5M0VGNUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hqWXlGQzlEQnBIUUROWmNrbWdHalQzeVFUTEt2RmJTc0N6YTNNOFdROHFBLzAv
MzIzODMwMzQzYTMzNjYzNjM0M2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzIzNjM1
MzgzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ/ZDANBgkqhkiG9w0BAQsFAAOCAQEAMn2RzdRj
LSVZRBeYBm9lf9VszROHoJvUOJAqEGjkFR0EAnUWm5FBAn2pz2mFUJBLUDk+yY0Z
Ko526hRlrOCvlXG/gogSzwozscnlkbYEzmO4F1UP971BI4sczVn7XRArgMLIIEQK
b0dpPtxQKmI+BF/CMLA7j/J1HzI7EX79f6qPd8C6mvxGkHeHN2Z7Xb4UBi7fcPux
i2BnVrnJ2xLG93e4gENOMgArWuAGfMIjXsusr5rxQP9kXT2/gbxF4sqEBrxHtwew
174K8CvD0SwpFQXl3r+sHWSo7B8r66SIuvoyotJ+T7mHW4UTvhyrCtTScEQN1Ayt
5tcZLau8Fwf6yw==
-----END CERTIFICATE-----
Generated at Sat Jul 25 04:13:19 2026 by rpki-client