Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/323830343a6138343a343430303a3a2f33382d3338203d3e20323632323936.roa
File:                     323830343a6138343a343430303a3a2f33382d3338203d3e20323632323936.roa (raw, json)
Hash identifier:          jXZM2VjAHw5/IfhqMc+VLm3Frvd095HayTRxhQOy9Pc=
Subject key identifier:   DA:1E:17:2D:13:C9:BD:5C:A2:61:DB:3B:8A:DE:A7:E2:A9:63:14:6B
Certificate issuer:       /CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
Certificate serial:       0DB79C6FA02A809E72503B024BBF26A7AF2CA6EA
Authority key identifier: 6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/323830343a6138343a343430303a3a2f33382d3338203d3e20323632323936.roa
Signing time:             Mon 02 Mar 2026 18:35:13 +0000
ROA not before:           Mon 02 Mar 2026 18:30:13 +0000
ROA not after:            Mon 01 Mar 2027 18:35:13 +0000
asID:                     262296
IP address blocks:        2804:a84:4400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 20:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b7:9c:6f:a0:2a:80:9e:72:50:3b:02:4b:bf:26:a7:af:2c:a6:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
        Validity
            Not Before: Mar  2 18:30:13 2026 GMT
            Not After : Mar  1 18:35:13 2027 GMT
        Subject: CN=DA1E172D13C9BD5CA261DB3B8ADEA7E2A963146B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8f:27:d2:64:e9:d6:01:af:fd:f3:b8:bd:e3:
                    4f:73:19:8f:23:49:94:ae:15:f8:33:8e:12:88:f8:
                    35:42:a8:3a:2a:a8:b2:a5:3e:a1:c9:d5:bc:5c:87:
                    f9:81:dd:bd:f4:9a:1a:20:4a:a2:04:ee:f3:9c:b1:
                    8b:c1:43:7f:a5:c6:bd:6f:cf:ae:65:f8:66:ed:56:
                    c6:5b:2a:d3:68:3d:96:a0:0a:14:91:fb:4a:01:6d:
                    de:f4:d9:56:8d:4e:8d:e4:4a:96:97:28:33:5f:3d:
                    92:8d:ec:ac:76:05:2b:ed:8d:ec:3c:00:f1:6b:7c:
                    a1:3d:40:4c:3a:9b:2e:cc:06:06:f4:7f:ad:21:8b:
                    1b:bd:ef:c3:88:47:30:a4:2e:d3:54:df:bd:cf:c3:
                    b9:2c:a5:50:f4:09:bc:3f:7d:98:9c:02:53:10:52:
                    49:c3:f2:e6:23:09:d9:c3:97:02:9c:0d:14:e0:10:
                    17:86:3c:54:f2:ed:2a:3c:62:31:68:cb:dc:2a:3a:
                    c8:89:8f:ec:a3:c5:fb:2a:8c:14:84:92:05:15:ff:
                    ce:2c:31:aa:1a:f4:3e:33:ab:97:2e:e8:d0:c6:9a:
                    40:34:7b:02:70:85:b3:3e:8c:0e:28:fd:94:73:f4:
                    42:e3:b1:4d:13:9c:74:22:9d:a0:5c:e7:f8:9c:3e:
                    fb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:1E:17:2D:13:C9:BD:5C:A2:61:DB:3B:8A:DE:A7:E2:A9:63:14:6B
            X509v3 Authority Key Identifier:
                keyid:6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/323830343a6138343a343430303a3a2f33382d3338203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a84:4400::/38

    Signature Algorithm: sha256WithRSAEncryption
         83:67:90:45:a1:2e:2f:d6:a7:7a:6d:dc:cb:a5:5d:50:ee:a5:
         2d:b3:a5:ec:b3:0d:24:bb:0a:fb:84:9a:7d:91:69:9a:db:90:
         22:82:1b:f1:8c:56:57:05:6e:b5:17:b9:57:06:d4:72:0a:38:
         e3:27:ea:56:7d:a7:da:c1:21:32:a8:f0:d6:39:fa:86:fb:9b:
         31:4a:8c:71:d0:f9:62:d5:70:d6:6c:80:68:86:25:40:a3:d3:
         f8:d3:ae:1b:f0:c5:c7:77:cc:da:72:bb:55:6e:5f:06:cb:cf:
         3a:32:4d:7d:e2:6e:c8:72:1c:8f:f3:7c:81:db:a5:fa:0f:53:
         1d:8e:f4:5c:71:1f:31:42:f3:8b:5c:a0:7a:f6:a6:97:7e:ff:
         95:26:d3:41:cb:83:9b:b8:f1:39:91:0e:6d:28:8b:7a:09:9f:
         7a:97:2f:da:1d:63:6b:b2:f8:fe:97:8a:a2:6a:d9:0c:a9:6e:
         53:38:3d:c5:24:26:58:b1:f1:fb:3f:91:8a:0f:6e:f4:bb:f4:
         ad:25:a6:c4:37:3b:56:1a:9e:a2:92:63:97:26:9e:d5:bd:f7:
         1a:3d:9d:0a:f5:3f:48:7f:34:d5:3e:1f:2e:98:74:2e:eb:d4:
         c7:77:f3:34:5e:2c:96:c0:db:f5:e6:83:12:40:62:f2:52:b5:
         e4:ff:dc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:38:22 2026 by rpki-client