Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/323830343a6138343a3a2f33322d3332203d3e20323632323936.roa
File:                     323830343a6138343a3a2f33322d3332203d3e20323632323936.roa (raw, json)
Hash identifier:          QfiOQ4o6IiOzvG8W+Vxs+N/s+MmPlf87Z5NJYysd694=
Subject key identifier:   9C:88:0C:C2:F5:59:1E:1B:E5:1F:FC:9D:72:58:C9:16:5D:76:4B:46
Certificate issuer:       /CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
Certificate serial:       23FE484B55191611F6E35070D6FDA5AADB166C35
Authority key identifier: 6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/323830343a6138343a3a2f33322d3332203d3e20323632323936.roa
Signing time:             Mon 02 Mar 2026 18:35:14 +0000
ROA not before:           Mon 02 Mar 2026 18:30:14 +0000
ROA not after:            Mon 01 Mar 2027 18:35:14 +0000
asID:                     262296
IP address blocks:        2804:a84::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 20:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:fe:48:4b:55:19:16:11:f6:e3:50:70:d6:fd:a5:aa:db:16:6c:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
        Validity
            Not Before: Mar  2 18:30:14 2026 GMT
            Not After : Mar  1 18:35:14 2027 GMT
        Subject: CN=9C880CC2F5591E1BE51FFC9D7258C9165D764B46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:27:22:98:e9:18:55:36:91:63:75:4f:db:42:
                    29:58:fb:cc:4a:e0:cb:51:04:20:99:69:cd:0b:da:
                    4c:e5:9f:6a:07:ed:6f:fc:61:73:81:e6:ed:a2:77:
                    96:12:f3:c6:d7:a6:cd:a2:21:4f:3b:7d:d7:65:22:
                    38:4f:2f:57:87:2c:94:0e:90:1e:1e:d8:d2:89:4e:
                    c2:73:bc:45:f0:27:86:90:59:0e:2e:7a:66:e9:da:
                    93:9c:8a:91:83:8f:e0:9e:51:8e:f8:6a:72:04:b2:
                    96:a1:43:3b:86:00:7a:f5:98:db:f1:ab:20:6f:54:
                    43:8a:87:ce:c9:35:7c:58:da:43:2c:82:5b:9b:1e:
                    9b:f1:65:27:d5:c8:36:df:ce:05:85:b2:ec:c3:e6:
                    c0:94:66:cd:e6:38:f2:7b:29:ab:51:9a:2a:03:6d:
                    25:37:52:0a:f0:8d:1d:9d:2c:7e:9c:86:55:b8:25:
                    0e:8a:b4:4b:17:18:5f:62:18:44:b0:7e:85:87:fc:
                    b8:ae:e9:c7:89:8c:56:33:1f:da:52:fe:d3:8f:db:
                    e4:a6:32:d6:5a:00:04:5c:e9:c2:1f:95:cd:6a:52:
                    b2:5a:f2:60:20:68:e4:7b:b9:55:db:d0:de:da:c2:
                    71:61:03:df:5d:0f:cb:52:d6:48:c7:90:5b:19:a4:
                    37:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:88:0C:C2:F5:59:1E:1B:E5:1F:FC:9D:72:58:C9:16:5D:76:4B:46
            X509v3 Authority Key Identifier:
                keyid:6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/323830343a6138343a3a2f33322d3332203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a84::/32

    Signature Algorithm: sha256WithRSAEncryption
         ce:f5:7f:ae:d7:9a:f0:11:88:46:30:87:f7:2e:6a:e0:9b:1d:
         83:a3:9c:b9:a3:d8:9a:8f:50:03:fa:71:c8:1b:78:90:d9:1c:
         a6:84:7d:3a:1e:97:1b:51:e5:f2:47:29:62:eb:8d:33:88:c3:
         4f:8e:7d:dd:e8:56:93:1f:a0:83:9f:4e:02:dc:b3:13:96:7c:
         bb:af:58:45:be:14:d5:c0:8e:c8:1e:1b:28:19:1d:ad:e6:cc:
         ba:22:a8:5b:c2:e0:c1:88:7c:a4:93:60:ac:f9:df:75:9b:4c:
         79:33:68:0b:30:09:71:5d:52:fc:fd:42:0c:06:6c:88:36:47:
         68:dc:f1:70:e4:73:4e:e9:1c:2e:18:bb:bb:b9:7b:39:40:90:
         9f:f2:48:d8:98:67:26:2b:a2:02:cf:7f:b4:cf:24:af:9c:47:
         fb:ae:5c:cb:50:c6:d6:be:a3:c9:2e:10:b6:8d:54:8f:b0:d2:
         8d:9d:5c:b1:ee:5e:d4:52:66:f7:8a:f2:eb:eb:69:1d:54:0c:
         1b:ac:c5:c5:9e:b9:38:36:d3:55:89:0b:84:87:69:36:54:fc:
         92:9e:8b:b1:81:96:a1:dc:c8:d2:ae:3f:10:42:e9:ff:55:c5:
         79:59:3f:ac:46:10:07:b9:40:03:26:eb:4b:a6:ee:aa:d0:8b:
         02:17:31:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:38:22 2026 by rpki-client