Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6C8kkc49Qsi3sWuD9PD7UAYm5PxkfBAAkdpXwVd6CPhE/0/323830343a373365303a3a2f33322d3332203d3e20323730393433.roa
File:                     323830343a373365303a3a2f33322d3332203d3e20323730393433.roa (raw, json)
Hash identifier:          CcOogJ4iImUGuwPOoqRx2IXTaBjbWIkZxkDf4H0M8bY=
Subject key identifier:   6D:87:17:4C:B4:8D:27:14:E3:F1:29:86:F5:A3:09:83:2C:55:0E:1D
Certificate issuer:       /CN=4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42
Certificate serial:       1832C3A985256468D4A92A57088AF2939D9E5B70
Authority key identifier: 47:66:C7:63:F2:D7:5E:ED:38:DD:E9:DA:FB:A5:F1:DC:0E:30:9D:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6C8kkc49Qsi3sWuD9PD7UAYm5PxkfBAAkdpXwVd6CPhE/0/323830343a373365303a3a2f33322d3332203d3e20323730393433.roa
Signing time:             Mon 23 Feb 2026 20:57:03 +0000
ROA not before:           Mon 23 Feb 2026 20:52:03 +0000
ROA not after:            Mon 22 Feb 2027 20:57:03 +0000
asID:                     270943
IP address blocks:        2804:73e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6C8kkc49Qsi3sWuD9PD7UAYm5PxkfBAAkdpXwVd6CPhE/0/4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42.crl
                          rsync://rpki-repo.registro.br/repo/6C8kkc49Qsi3sWuD9PD7UAYm5PxkfBAAkdpXwVd6CPhE/0/4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 13:38:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:32:c3:a9:85:25:64:68:d4:a9:2a:57:08:8a:f2:93:9d:9e:5b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42
        Validity
            Not Before: Feb 23 20:52:03 2026 GMT
            Not After : Feb 22 20:57:03 2027 GMT
        Subject: CN=6D87174CB48D2714E3F12986F5A309832C550E1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8c:8d:ac:96:a8:de:ac:b9:b6:1d:cd:bf:d6:
                    f1:2c:d5:71:5a:0b:23:2b:d2:db:10:5e:f4:11:fb:
                    39:06:7c:af:fc:01:60:94:78:a6:10:b4:7c:ed:c4:
                    92:5b:a3:b0:25:78:af:24:d2:0f:e9:c5:d9:bf:3e:
                    d6:3b:54:12:af:ee:a5:56:67:58:be:74:20:c4:04:
                    8f:bb:3b:2d:9b:c7:80:d5:a3:6f:0c:c1:ad:47:86:
                    f8:3b:e1:7c:60:28:68:cb:e6:52:4b:06:8b:60:0a:
                    53:dd:dc:67:14:dc:06:53:87:26:ad:2b:5e:1f:8b:
                    4a:37:8c:b0:26:e5:28:ce:86:f0:0e:0e:49:16:5c:
                    2a:3a:19:3b:9c:14:65:dc:59:33:86:dc:6b:93:11:
                    20:10:bf:fb:63:18:a0:35:7b:52:88:7f:70:9e:3c:
                    d6:1a:c8:6b:e3:1f:19:79:1c:5e:b5:d3:04:00:33:
                    26:f6:8a:68:39:8e:33:d4:96:1a:84:0b:8f:cc:32:
                    23:a1:30:31:47:fa:9c:d5:cf:43:78:cf:c2:50:34:
                    01:4a:7b:fe:39:f0:ec:91:cd:b0:16:e0:37:02:36:
                    58:6e:26:6e:a3:4b:73:6e:0d:a3:1b:63:3e:ff:7b:
                    7d:27:16:d2:4b:56:15:82:f4:1a:e2:b1:af:d9:da:
                    ee:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:87:17:4C:B4:8D:27:14:E3:F1:29:86:F5:A3:09:83:2C:55:0E:1D
            X509v3 Authority Key Identifier:
                keyid:47:66:C7:63:F2:D7:5E:ED:38:DD:E9:DA:FB:A5:F1:DC:0E:30:9D:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6C8kkc49Qsi3sWuD9PD7UAYm5PxkfBAAkdpXwVd6CPhE/0/4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6C8kkc49Qsi3sWuD9PD7UAYm5PxkfBAAkdpXwVd6CPhE/0/323830343a373365303a3a2f33322d3332203d3e20323730393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:7b:e2:f1:54:02:d4:72:90:c5:60:89:7a:4c:a8:51:d8:4d:
         3f:e2:da:4f:bf:7e:87:51:ac:59:0c:0c:c9:de:f0:49:06:d4:
         5c:5e:96:1b:c5:72:51:9c:a7:1b:ab:1a:0a:db:c2:bc:4c:f4:
         50:1b:87:b3:93:9c:d9:60:6f:44:06:f8:f5:7d:00:7a:38:e9:
         7c:9a:8c:de:87:65:6d:50:8a:6b:74:23:3d:3b:80:28:22:62:
         1a:81:b1:a5:82:b3:72:5f:3f:1f:e4:3b:56:3f:dc:8a:0e:52:
         f7:08:6a:e4:2b:31:e9:90:4b:00:7a:6c:ea:75:a0:70:db:6a:
         57:79:c8:1c:88:8f:78:2a:5f:bc:23:08:f3:dd:20:3f:45:8e:
         a6:17:87:fc:77:aa:fd:0a:07:1f:7e:7c:38:eb:00:e6:01:39:
         cd:e8:b5:9b:c0:34:67:31:be:e5:c0:aa:79:3b:39:7a:77:88:
         29:0d:47:3d:d2:72:5d:db:29:39:d2:8a:08:3b:dc:b9:dd:f1:
         89:7b:a0:d9:9f:91:c4:da:72:0e:3c:47:a1:96:b0:f4:33:9c:
         36:89:b7:cc:f5:45:3d:a8:5a:d6:fe:a2:39:94:d8:e6:33:10:
         a4:bd:8c:de:48:57:61:e3:7d:fb:2b:7c:1a:c2:b2:9c:cf:ad:
         e6:01:89:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:09:04 2026 by rpki-client