Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6C8kkc49Qsi3sWuD9PD7UAYm5PxkfBAAkdpXwVd6CPhE/0/323830343a373365303a383031303a3a2f34362d3436203d3e20323730393433.roa
File:                     323830343a373365303a383031303a3a2f34362d3436203d3e20323730393433.roa (raw, json)
Hash identifier:          dozDhbvSR6nE88+rdvtHZeID203cvNFNufA0K5YUgg0=
Subject key identifier:   C3:49:C9:5D:34:E3:18:DC:F6:73:BC:74:F8:DB:97:77:7C:82:95:99
Certificate issuer:       /CN=4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42
Certificate serial:       6F9D2883449001ECF5BB23F6F543D9D44E2113FC
Authority key identifier: 47:66:C7:63:F2:D7:5E:ED:38:DD:E9:DA:FB:A5:F1:DC:0E:30:9D:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6C8kkc49Qsi3sWuD9PD7UAYm5PxkfBAAkdpXwVd6CPhE/0/323830343a373365303a383031303a3a2f34362d3436203d3e20323730393433.roa
Signing time:             Mon 23 Feb 2026 20:57:05 +0000
ROA not before:           Mon 23 Feb 2026 20:52:05 +0000
ROA not after:            Mon 22 Feb 2027 20:57:05 +0000
asID:                     270943
IP address blocks:        2804:73e0:8010::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6C8kkc49Qsi3sWuD9PD7UAYm5PxkfBAAkdpXwVd6CPhE/0/4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42.crl
                          rsync://rpki-repo.registro.br/repo/6C8kkc49Qsi3sWuD9PD7UAYm5PxkfBAAkdpXwVd6CPhE/0/4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 13:38:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:9d:28:83:44:90:01:ec:f5:bb:23:f6:f5:43:d9:d4:4e:21:13:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42
        Validity
            Not Before: Feb 23 20:52:05 2026 GMT
            Not After : Feb 22 20:57:05 2027 GMT
        Subject: CN=C349C95D34E318DCF673BC74F8DB97777C829599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:34:6b:ca:2c:82:b2:1b:f9:bf:a7:5a:fa:05:
                    91:2c:cb:5f:cf:df:1c:25:3c:75:61:5a:f6:4d:e4:
                    db:9f:c9:f8:aa:c9:74:64:8c:6b:d3:79:9d:9a:a9:
                    4b:4b:e1:69:b0:88:2c:f6:39:2d:65:af:a0:d0:6e:
                    40:89:40:61:4f:6d:27:d4:99:cc:d2:22:41:b1:ce:
                    e7:7d:a7:8c:b4:ea:33:be:6e:71:fc:2e:23:e3:2b:
                    22:9f:f5:a3:01:47:bb:93:b2:27:82:df:08:4b:9f:
                    38:2f:6b:7c:48:fa:b4:cb:39:b5:33:61:04:17:6b:
                    e1:4f:a1:02:3e:68:8c:d9:f9:62:cf:75:5d:6b:6c:
                    21:5e:7a:3b:2c:40:66:27:5e:ec:1a:05:09:5e:78:
                    de:73:fc:a5:32:59:d8:cd:39:55:f5:9b:85:74:3b:
                    fb:5a:c5:7b:70:6c:b2:c3:dc:66:55:51:c3:59:a4:
                    bf:e1:1d:37:94:37:24:63:67:dc:d7:5b:73:c6:92:
                    84:dd:70:1a:35:d1:5b:9e:1f:34:55:6b:b2:91:85:
                    43:d3:93:73:30:df:aa:79:b6:5d:18:99:1a:ed:4a:
                    5b:38:80:b0:3f:24:e2:43:f9:05:d5:f7:81:8e:e7:
                    bf:d8:f2:e0:aa:d6:a6:34:ca:9d:44:ee:d3:8b:23:
                    28:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:49:C9:5D:34:E3:18:DC:F6:73:BC:74:F8:DB:97:77:7C:82:95:99
            X509v3 Authority Key Identifier:
                keyid:47:66:C7:63:F2:D7:5E:ED:38:DD:E9:DA:FB:A5:F1:DC:0E:30:9D:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6C8kkc49Qsi3sWuD9PD7UAYm5PxkfBAAkdpXwVd6CPhE/0/4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6C8kkc49Qsi3sWuD9PD7UAYm5PxkfBAAkdpXwVd6CPhE/0/323830343a373365303a383031303a3a2f34362d3436203d3e20323730393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73e0:8010::/46

    Signature Algorithm: sha256WithRSAEncryption
         3a:1b:f7:5f:4b:fb:25:17:8f:29:02:95:1e:7d:84:f7:66:76:
         a4:d4:67:00:2f:26:d7:c2:b0:b4:b0:bc:e6:79:28:93:17:0c:
         00:0c:17:9d:9c:6b:03:06:67:97:37:eb:7c:63:f9:11:24:d5:
         7a:3e:e2:c9:74:70:fc:c0:c3:03:be:b4:19:a9:84:39:9d:6d:
         8b:b4:4e:b9:ea:9c:17:80:f8:0c:e2:bc:60:08:31:60:35:98:
         6d:ec:92:bb:d4:ff:75:db:58:3c:df:d8:e2:e9:93:47:b4:5d:
         e4:6b:b5:0e:4a:6b:29:e9:13:c5:b9:96:90:92:83:d1:76:d9:
         b0:96:0c:b3:a8:de:03:66:4f:1b:9e:15:ee:86:b1:15:3b:da:
         51:eb:99:e1:00:e3:56:bc:96:91:a3:72:5f:2f:6f:9f:7b:80:
         57:0a:a3:d7:73:98:f4:46:9f:4b:ff:5e:53:fd:69:56:6f:13:
         cc:03:1d:ab:8d:ab:40:e1:1a:e6:e9:c3:eb:ea:16:3e:d3:13:
         1c:ed:c4:7e:ca:eb:34:ff:75:4c:8e:fe:fc:cb:ac:7d:0e:2a:
         b6:23:5b:27:f1:27:98:ec:9f:fa:60:49:94:7b:95:26:24:fa:
         6b:51:95:8d:cd:d9:80:a6:00:3f:46:08:01:65:8e:44:3a:c0:
         bd:49:44:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:08:56 2026 by rpki-client