Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e38352e37392e302f32342d3234203d3e20323632323936.roa
File:                     3137372e38352e37392e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          6xIJqrZIxJPvOKZThPR2ssPcZ8KzAkErmJ+6BU3uvQE=
Subject key identifier:   27:19:BC:8F:A5:2B:D5:4B:30:01:58:E2:44:EB:92:40:5B:B9:28:18
Certificate issuer:       /CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
Certificate serial:       6BDD524282356A8DB326809D9B54A767D71A3BA7
Authority key identifier: 6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e38352e37392e302f32342d3234203d3e20323632323936.roa
Signing time:             Mon 02 Mar 2026 18:35:17 +0000
ROA not before:           Mon 02 Mar 2026 18:30:17 +0000
ROA not after:            Mon 01 Mar 2027 18:35:17 +0000
asID:                     262296
IP address blocks:        177.85.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 20:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:dd:52:42:82:35:6a:8d:b3:26:80:9d:9b:54:a7:67:d7:1a:3b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
        Validity
            Not Before: Mar  2 18:30:17 2026 GMT
            Not After : Mar  1 18:35:17 2027 GMT
        Subject: CN=2719BC8FA52BD54B300158E244EB92405BB92818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:87:1d:9d:92:49:19:50:96:38:98:7c:d9:05:
                    f2:31:bf:d6:60:c1:74:40:c6:89:c7:02:80:bd:6d:
                    22:8c:2f:d9:34:d6:06:d7:25:73:a5:c2:a4:19:b3:
                    f6:e4:61:38:4c:f1:05:3b:bd:f0:62:4b:85:f3:49:
                    5c:cc:8a:f7:88:a0:00:bb:92:21:3b:cc:d3:f1:67:
                    79:29:d2:17:a7:20:10:fe:34:bd:a3:74:46:2d:a5:
                    35:e1:a5:61:5f:9b:0e:3a:df:be:37:b0:eb:92:fb:
                    bd:9d:f2:9b:08:b2:bc:a1:d0:e3:64:16:20:da:37:
                    5e:3c:e1:1d:25:19:3d:e8:20:18:aa:54:74:e5:51:
                    7f:48:2d:6c:dc:ac:c2:80:82:5d:8b:e5:08:e6:e7:
                    b0:73:34:a0:05:da:74:d8:19:c8:49:3d:4f:0b:56:
                    85:79:13:be:87:9f:e9:71:8a:f4:34:d5:65:0b:39:
                    d2:65:e9:c9:4b:bc:ba:03:9b:39:0c:b5:3b:09:ec:
                    21:1d:f0:af:36:1b:dc:5a:00:c4:b0:61:22:2e:c2:
                    0a:40:66:3e:59:ef:67:0b:96:bf:57:26:83:27:c2:
                    6c:99:a1:25:65:ab:40:3f:ce:f5:28:9b:c3:eb:f7:
                    e0:aa:0d:70:32:a8:3c:8f:e6:46:39:e9:f5:a3:2d:
                    d7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:19:BC:8F:A5:2B:D5:4B:30:01:58:E2:44:EB:92:40:5B:B9:28:18
            X509v3 Authority Key Identifier:
                keyid:6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e38352e37392e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:ae:3b:76:90:07:88:7f:de:1a:69:f4:52:96:98:87:46:66:
         d3:28:38:4f:96:a6:0e:b1:40:eb:8a:a5:a6:48:e9:56:b7:22:
         39:20:6d:15:f3:0c:3d:6a:df:af:97:05:25:23:67:1a:1b:86:
         39:a9:a1:42:e2:66:6b:dc:8c:6d:d1:13:1f:08:e9:04:3d:85:
         99:aa:47:c9:7c:79:85:e6:e8:79:e6:bd:33:22:a1:43:a2:9f:
         69:e6:5d:cb:d7:dd:5c:3c:da:38:a5:0e:c3:93:bf:d3:db:6e:
         41:7f:32:b0:99:99:be:44:30:d8:96:78:42:25:ff:73:32:68:
         53:9a:c4:0e:48:71:2a:a6:d1:0f:ae:39:69:85:39:04:55:67:
         b9:f9:df:d7:17:8a:05:00:91:00:1f:d3:4f:0d:ec:6a:cf:a6:
         28:57:00:d4:36:67:de:c2:f1:5f:ff:5d:0d:e6:e4:7e:d3:c2:
         7d:26:12:29:9c:6a:24:d5:ab:16:50:c1:41:75:c5:54:e1:77:
         97:c5:f9:92:a2:a8:a6:b9:05:34:e8:8f:58:eb:ec:99:b3:25:
         17:c1:f5:0b:c3:7e:1b:af:4e:f2:33:7e:b6:5b:bb:b6:6b:f9:
         e9:24:77:e8:db:48:42:0c:a2:7b:07:eb:ac:c7:6a:95:52:ae:
         63:0f:1a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:39:07 2026 by rpki-client