Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/323830343a6138343a653030303a3a2f34382d3438203d3e20323632323936.roa
File:                     323830343a6138343a653030303a3a2f34382d3438203d3e20323632323936.roa (raw, json)
Hash identifier:          3U11WTQVfKx4BEumqPxBjjGr4pR7Kh89xNzbXLuuywQ=
Subject key identifier:   08:26:E9:97:E1:1D:B2:82:7C:9B:80:52:85:77:4F:91:45:85:87:32
Certificate issuer:       /CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
Certificate serial:       220FD6C45A425C86D603E0C5F9BAD6AD87DA458C
Authority key identifier: 6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/323830343a6138343a653030303a3a2f34382d3438203d3e20323632323936.roa
Signing time:             Mon 02 Mar 2026 18:35:14 +0000
ROA not before:           Mon 02 Mar 2026 18:30:14 +0000
ROA not after:            Mon 01 Mar 2027 18:35:14 +0000
asID:                     262296
IP address blocks:        2804:a84:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 20:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:0f:d6:c4:5a:42:5c:86:d6:03:e0:c5:f9:ba:d6:ad:87:da:45:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
        Validity
            Not Before: Mar  2 18:30:14 2026 GMT
            Not After : Mar  1 18:35:14 2027 GMT
        Subject: CN=0826E997E11DB2827C9B805285774F9145858732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:31:92:f4:e4:23:53:c7:5b:05:14:0e:63:b7:
                    b3:3b:6d:72:f3:56:89:d6:01:09:f8:f3:8d:9b:bf:
                    c5:12:99:7a:32:e5:ed:4f:ab:4c:d0:80:be:8f:7c:
                    b7:7e:20:92:45:b5:97:93:a8:aa:03:da:10:84:b7:
                    a5:0b:53:91:f1:87:62:e3:3b:8f:7c:30:cc:00:6a:
                    06:f3:13:65:bd:97:4e:a0:1c:e3:5e:56:af:eb:0a:
                    da:c1:10:dd:0f:ce:de:58:36:94:51:93:bc:7e:43:
                    97:37:40:49:13:62:29:a3:2c:7d:9b:0f:fc:17:f6:
                    e7:54:d8:b7:f7:2f:77:20:01:ed:40:75:c8:12:09:
                    80:27:f2:fe:ca:42:5f:20:53:20:8f:e8:10:66:49:
                    77:84:a3:8a:74:f8:04:63:aa:e9:5d:31:8e:7f:51:
                    82:75:a6:4d:d3:93:e6:59:a6:0d:bf:cd:1a:31:fc:
                    24:63:c9:bb:44:ea:77:7c:00:ba:fa:73:82:8e:56:
                    15:1f:51:79:62:09:65:ac:9d:fe:59:bc:5a:78:f5:
                    3f:6b:e9:4a:f5:0c:e0:e8:b1:68:40:f0:14:57:cc:
                    a7:d7:34:c7:4f:1a:b9:51:39:7c:ad:c0:cf:44:04:
                    1e:68:b3:d4:f6:bc:75:76:97:fa:75:5c:f3:a9:aa:
                    c8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:26:E9:97:E1:1D:B2:82:7C:9B:80:52:85:77:4F:91:45:85:87:32
            X509v3 Authority Key Identifier:
                keyid:6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/323830343a6138343a653030303a3a2f34382d3438203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a84:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:36:86:af:a3:dc:5d:70:fb:5b:74:80:57:77:cc:ed:6b:e4:
         20:02:3e:eb:af:bd:fb:bb:4e:80:0f:c6:ca:2a:c8:69:c4:eb:
         83:59:34:0a:dd:c9:5a:e3:f1:f0:c6:71:fd:28:ad:d5:43:ce:
         80:41:86:24:b7:80:2d:06:3d:50:40:84:9c:d4:79:ec:3d:ba:
         d2:94:cc:6e:1f:2d:94:e1:75:45:fa:60:2a:a3:88:93:06:9d:
         28:5c:d8:ee:ae:63:1a:e6:1a:41:7e:0b:13:58:36:7a:96:72:
         cd:a3:3d:f3:8e:b3:0d:10:3a:7b:42:79:5d:e0:86:15:7d:42:
         46:0e:bf:6d:2b:7d:e5:85:e3:a0:fe:06:d4:25:37:d4:3b:bb:
         59:9d:b6:13:3c:ea:c7:5a:84:31:d6:f7:0e:12:f8:1f:a8:50:
         f3:0d:71:fb:8e:27:f3:66:f0:77:b0:1b:99:c1:2b:f2:28:95:
         de:8c:4e:ba:92:1d:70:fc:80:87:81:27:5e:6d:8b:64:18:36:
         93:4a:6c:e5:ef:59:ab:54:9e:82:a8:c5:01:1c:fc:e7:93:78:
         19:a0:7f:f3:9b:ea:7a:72:19:16:92:79:96:8c:71:c8:02:74:
         05:32:f7:66:d7:31:13:0e:be:99:71:9e:23:fb:35:8d:1c:36:
         42:b8:5c:d4
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUIg/WxFpCXIbWA+DF+brWrYfaRYwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkEzMzJFNEJDRTcxMUFBOEI5QTgwRkM2M0NGODIzREZC
NEYwQjk5MDAeFw0yNjAzMDIxODMwMTRaFw0yNzAzMDExODM1MTRaMDMxMTAvBgNV
BAMTKDA4MjZFOTk3RTExREIyODI3QzlCODA1Mjg1Nzc0RjkxNDU4NTg3MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0MZL05CNTx1sFFA5jt7M7bXLz
VonWAQn4842bv8USmXoy5e1Pq0zQgL6PfLd+IJJFtZeTqKoD2hCEt6ULU5Hxh2Lj
O498MMwAagbzE2W9l06gHONeVq/rCtrBEN0Pzt5YNpRRk7x+Q5c3QEkTYimjLH2b
D/wX9udU2Lf3L3cgAe1AdcgSCYAn8v7KQl8gUyCP6BBmSXeEo4p0+ARjquldMY5/
UYJ1pk3Tk+ZZpg2/zRox/CRjybtE6nd8ALr6c4KOVhUfUXliCWWsnf5ZvFp49T9r
6Ur1DODosWhA8BRXzKfXNMdPGrlROXytwM9EBB5os9T2vHV2l/p1XPOpqsgvAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUCCbpl+EdsoJ8m4BShXdPkUWFhzIwHwYDVR0j
BBgwFoAUajMuS85xGqi5qA/GPPgj37TwuZAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM05NNm55eVpEUldSUjcxSjJjeHg2eFJzVlh5MktqMWtBR1k2b0NnZ0xp
eTcvMC82QTMzMkU0QkNFNzExQUE4QjlBODBGQzYzQ0Y4MjNERkI0RjBCOTkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZBMzMyRTRCQ0U3MTFBQThC
OUE4MEZDNjNDRjgyM0RGQjRGMEI5OTAuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNOTTZueXlaRFJXUlI3MUoyY3h4NnhSc1ZYeTJLajFrQUdZNm9DZ2dMaXk3LzAv
MzIzODMwMzQzYTYxMzgzNDNhNjUzMDMwMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzMjM2MzIzMjM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBAqE4AAwDQYJKoZIhvcNAQELBQAD
ggEBAKA2hq+j3F1w+1t0gFd3zO1r5CACPuuvvfu7ToAPxsoqyGnE64NZNArdyVrj
8fDGcf0ordVDzoBBhiS3gC0GPVBAhJzUeew9utKUzG4fLZThdUX6YCqjiJMGnShc
2O6uYxrmGkF+CxNYNnqWcs2jPfOOsw0QOntCeV3ghhV9QkYOv20rfeWF46D+BtQl
N9Q7u1mdthM86sdahDHW9w4S+B+oUPMNcfuOJ/Nm8HewG5nBK/Iold6MTrqSHXD8
gIeBJ15ti2QYNpNKbOXvWatUnoKoxQEc/OeTeBmgf/Ob6npyGRaSeZaMccgCdAUy
92bXMRMOvplxniP7NY0cNkK4XNQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:38:21 2026 by rpki-client