Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6C8kkc49Qsi3sWuD9PD7UAYm5PxkfBAAkdpXwVd6CPhE/0/323830343a373365303a383032303a3a2f34332d3433203d3e20323730393433.roa
File:                     323830343a373365303a383032303a3a2f34332d3433203d3e20323730393433.roa (raw, json)
Hash identifier:          ZfD9Sj9HpcdbD43SO8RGzhTQGweu1wMa7ar+hWJVW70=
Subject key identifier:   68:B5:0E:51:BE:FE:E3:F2:44:13:1A:FD:4F:8C:3F:8B:23:A8:C5:47
Certificate issuer:       /CN=4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42
Certificate serial:       502832859B59AF2762F0950ADE0059F880F45153
Authority key identifier: 47:66:C7:63:F2:D7:5E:ED:38:DD:E9:DA:FB:A5:F1:DC:0E:30:9D:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6C8kkc49Qsi3sWuD9PD7UAYm5PxkfBAAkdpXwVd6CPhE/0/323830343a373365303a383032303a3a2f34332d3433203d3e20323730393433.roa
Signing time:             Mon 23 Feb 2026 20:57:08 +0000
ROA not before:           Mon 23 Feb 2026 20:52:08 +0000
ROA not after:            Mon 22 Feb 2027 20:57:08 +0000
asID:                     270943
IP address blocks:        2804:73e0:8020::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6C8kkc49Qsi3sWuD9PD7UAYm5PxkfBAAkdpXwVd6CPhE/0/4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42.crl
                          rsync://rpki-repo.registro.br/repo/6C8kkc49Qsi3sWuD9PD7UAYm5PxkfBAAkdpXwVd6CPhE/0/4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 13:38:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:28:32:85:9b:59:af:27:62:f0:95:0a:de:00:59:f8:80:f4:51:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42
        Validity
            Not Before: Feb 23 20:52:08 2026 GMT
            Not After : Feb 22 20:57:08 2027 GMT
        Subject: CN=68B50E51BEFEE3F244131AFD4F8C3F8B23A8C547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ad:81:fb:f9:e4:7e:f5:70:6a:13:a0:75:ef:
                    52:11:8d:37:1d:13:24:ce:f5:7f:20:82:63:e7:16:
                    ed:e1:0a:5f:7b:aa:73:3c:94:aa:6a:94:b9:3b:2c:
                    63:64:4d:c8:54:63:06:6f:fc:bf:b2:41:a9:7f:f7:
                    c0:2e:91:1e:fe:77:01:e7:7a:b3:88:20:e8:6a:ea:
                    6d:0a:3e:cb:5f:1c:5c:38:16:59:e7:0a:8c:91:3b:
                    6f:5e:91:3d:f1:a1:d2:70:4d:d5:9f:30:48:19:8c:
                    75:e6:11:79:6a:ce:17:a6:1e:c6:6d:d4:ac:81:84:
                    96:60:3a:20:bc:a1:3f:e8:f7:58:27:d8:f7:bb:35:
                    c4:c2:93:fd:57:33:39:bf:27:33:18:74:8e:5d:27:
                    ac:11:61:f3:33:4f:ec:74:ad:7d:08:93:59:28:24:
                    3d:7e:97:82:92:ce:0c:0a:af:5f:10:70:80:1c:1c:
                    de:09:60:e2:41:f6:7c:29:1f:46:14:a1:9c:a1:58:
                    6d:d2:ca:67:e8:75:5c:d0:5d:20:1e:18:a3:fc:c2:
                    1b:48:7a:93:dd:51:a7:78:72:44:b2:37:cd:b3:7f:
                    79:06:84:35:f9:ab:15:19:56:aa:ef:32:25:f1:73:
                    6d:3c:b2:72:58:9b:e9:fb:57:ec:2b:a1:e5:04:af:
                    f2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:B5:0E:51:BE:FE:E3:F2:44:13:1A:FD:4F:8C:3F:8B:23:A8:C5:47
            X509v3 Authority Key Identifier:
                keyid:47:66:C7:63:F2:D7:5E:ED:38:DD:E9:DA:FB:A5:F1:DC:0E:30:9D:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6C8kkc49Qsi3sWuD9PD7UAYm5PxkfBAAkdpXwVd6CPhE/0/4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6C8kkc49Qsi3sWuD9PD7UAYm5PxkfBAAkdpXwVd6CPhE/0/323830343a373365303a383032303a3a2f34332d3433203d3e20323730393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73e0:8020::/43

    Signature Algorithm: sha256WithRSAEncryption
         58:db:6b:8e:7e:4b:00:5c:3c:21:a4:fd:22:1f:04:85:10:45:
         0d:fd:a9:c2:ef:22:17:ff:5d:f2:66:9e:d0:12:12:21:78:99:
         c0:a6:e9:d6:e3:a4:ac:ff:ed:f3:10:e4:ba:c2:cf:fc:02:46:
         26:68:8c:7f:be:08:a6:cd:66:75:8e:18:e3:db:6e:44:c2:5b:
         2d:3b:c5:f9:63:fa:e6:85:4d:49:e5:c1:cb:aa:72:74:df:86:
         1b:42:6b:32:00:6c:a0:aa:12:5e:a8:c4:aa:ed:48:fa:21:68:
         5d:34:03:8a:64:2d:a5:0d:05:3f:15:49:70:b6:5c:18:56:e7:
         f0:f3:9d:92:58:14:ee:ba:73:27:66:ea:dd:58:8e:4a:82:f9:
         f7:ad:b5:9d:66:57:5b:ce:7c:ba:a3:97:e0:a4:2a:ff:15:f4:
         cb:cc:02:c8:e6:c4:e8:a9:57:e0:99:a8:b1:b7:f2:96:a6:d2:
         ae:71:f5:bb:fc:89:89:12:2d:72:fe:06:a5:ac:60:c4:6f:1e:
         29:ff:bd:fa:82:72:7e:fd:22:12:ce:c1:c4:d0:6d:ce:f5:40:
         11:c5:82:e5:bc:95:20:b2:3d:e3:9d:c4:f6:72:69:99:ee:f5:
         16:51:50:81:bb:ed:04:84:58:53:93:18:fe:81:6a:9f:80:63:
         c9:f1:02:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:09:22 2026 by rpki-client