Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/323830343a6138343a653030303a3a2f34382d3438203d3e20323632323936.roa
File:                     323830343a6138343a653030303a3a2f34382d3438203d3e20323632323936.roa (raw, json)
Hash identifier:          n0TbKqKWplDcTEvYQqVHS95qPoJ94QgLD/5zS/Ut5nI=
Subject key identifier:   6A:47:2D:E4:1A:E4:F6:84:61:D1:54:F4:90:92:B5:98:51:B5:7C:38
Certificate issuer:       /CN=45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8
Certificate serial:       6D169D5EDDA24F1A5626EF5B8BFBE9D21DD6B112
Authority key identifier: 45:EA:42:90:9E:CD:9A:80:74:9A:F8:9F:D7:AC:8F:53:15:E5:FF:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/323830343a6138343a653030303a3a2f34382d3438203d3e20323632323936.roa
Signing time:             Mon 13 Apr 2026 15:44:41 +0000
ROA not before:           Mon 13 Apr 2026 15:39:41 +0000
ROA not after:            Mon 12 Apr 2027 15:44:41 +0000
asID:                     262296
IP address blocks:        2804:a84:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 09:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:16:9d:5e:dd:a2:4f:1a:56:26:ef:5b:8b:fb:e9:d2:1d:d6:b1:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8
        Validity
            Not Before: Apr 13 15:39:41 2026 GMT
            Not After : Apr 12 15:44:41 2027 GMT
        Subject: CN=6A472DE41AE4F68461D154F49092B59851B57C38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4c:3d:39:d4:5b:3b:ff:6b:c9:6d:b3:f9:41:
                    e2:a8:9d:11:4b:3e:f2:69:2d:2b:35:d1:6e:18:86:
                    22:e8:eb:2d:69:d0:50:4a:b1:15:a8:74:90:88:3c:
                    8a:55:12:4c:12:27:00:7b:28:14:77:39:af:29:0c:
                    a2:3f:a7:64:6e:35:b0:7f:62:b2:29:cd:d4:5d:2d:
                    8a:c6:ea:98:1d:0a:18:2e:f6:a8:b2:5c:11:5d:99:
                    5d:fe:f8:94:eb:45:11:4a:f4:cf:09:d1:37:a1:8a:
                    8f:82:ae:73:92:53:70:66:d3:7f:f0:7e:f3:64:ab:
                    ea:2d:87:c5:e3:11:45:c8:2a:61:9a:f7:4e:01:ce:
                    3d:8e:ff:a5:53:d0:38:9d:63:dd:bb:83:3a:03:15:
                    e6:8c:da:06:f4:b0:5f:38:ac:8e:b4:fc:50:4e:f9:
                    63:a8:77:07:d1:69:f9:d6:ff:08:d4:71:d5:99:32:
                    c4:bb:8c:dd:a8:66:f2:cf:80:79:c0:0f:c2:1d:d0:
                    6c:d2:4e:38:92:75:3f:27:04:56:99:5d:c7:d2:f9:
                    ae:f4:d1:ac:d6:72:82:09:61:66:b2:36:2d:2c:ea:
                    69:3b:24:6f:0e:3e:28:5a:6e:bb:cc:5d:6a:37:90:
                    d2:9a:e7:5a:30:95:4c:87:0c:65:6c:f1:5f:95:2e:
                    d1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:47:2D:E4:1A:E4:F6:84:61:D1:54:F4:90:92:B5:98:51:B5:7C:38
            X509v3 Authority Key Identifier:
                keyid:45:EA:42:90:9E:CD:9A:80:74:9A:F8:9F:D7:AC:8F:53:15:E5:FF:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/323830343a6138343a653030303a3a2f34382d3438203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a84:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:2b:30:03:0c:d5:02:60:ca:30:6d:b0:1f:86:db:b9:dd:8d:
         80:fd:04:6a:07:e2:73:14:ab:01:bf:4a:8e:e3:62:89:33:b5:
         bb:f6:22:ea:52:d1:61:1b:16:55:df:b2:d9:2e:c0:87:dd:8a:
         d2:39:dd:e5:c5:33:a5:79:41:88:1e:58:02:09:d2:0b:42:78:
         de:ef:85:6e:aa:f5:ab:04:03:53:56:7b:c2:dd:cb:af:65:c1:
         1f:c7:ca:95:15:e1:91:b9:06:e9:c5:ee:cc:ce:a8:82:35:81:
         6d:55:80:5e:24:66:1d:28:80:fa:01:78:1d:e5:06:e9:cb:4f:
         2a:22:c4:89:58:0a:fb:a8:ac:e0:83:c2:8d:9e:0e:7e:87:73:
         ed:4b:51:36:a0:b4:7e:5f:a4:58:34:81:60:c8:6a:77:e9:21:
         7f:fd:82:92:4e:6b:6e:2a:b4:ec:1e:49:76:71:b7:54:77:c6:
         09:35:d5:70:a5:d7:9c:37:c7:69:72:23:0b:d4:16:94:ab:89:
         1d:2b:9b:51:c6:9e:28:ce:b0:e4:9f:03:7e:10:4f:1c:39:41:
         01:da:a1:a3:2e:91:4f:9a:26:f4:a0:9f:53:86:1f:13:e9:86:
         5c:30:d2:54:ce:6a:1e:da:22:1c:b4:74:b8:27:cc:48:1b:0d:
         b7:17:94:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:20:10 2026 by rpki-client