Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6KmmNQ8b3VjAreTG2w2HyZqS5JXwGb3MGVGCqNmvvKNE/0/323830343a353335633a3a2f33342d3334203d3e20323638353739.roa
File:                     323830343a353335633a3a2f33342d3334203d3e20323638353739.roa (raw, json)
Hash identifier:          J7RlEZLKjOlFGapPnap4YrSHAY26RHYOwByr3/ilgUE=
Subject key identifier:   00:73:E3:BF:47:EC:18:A5:69:D2:0F:CE:77:BB:C0:E2:76:CD:E8:7B
Certificate issuer:       /CN=6133BA817EF62A52BE6BE4DBE7CC6DAC20DD8484
Certificate serial:       74A17A440C8BECAD11E9C10E6C5A699A695F9C66
Authority key identifier: 61:33:BA:81:7E:F6:2A:52:BE:6B:E4:DB:E7:CC:6D:AC:20:DD:84:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6133BA817EF62A52BE6BE4DBE7CC6DAC20DD8484.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6KmmNQ8b3VjAreTG2w2HyZqS5JXwGb3MGVGCqNmvvKNE/0/323830343a353335633a3a2f33342d3334203d3e20323638353739.roa
Signing time:             Sat 12 Sep 2026 15:41:50 +0000
ROA not before:           Sat 12 Sep 2026 15:36:50 +0000
ROA not after:            Sat 11 Sep 2027 15:41:50 +0000
asID:                     268579
IP address blocks:        2804:535c::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6KmmNQ8b3VjAreTG2w2HyZqS5JXwGb3MGVGCqNmvvKNE/0/6133BA817EF62A52BE6BE4DBE7CC6DAC20DD8484.crl
                          rsync://rpki-repo.registro.br/repo/6KmmNQ8b3VjAreTG2w2HyZqS5JXwGb3MGVGCqNmvvKNE/0/6133BA817EF62A52BE6BE4DBE7CC6DAC20DD8484.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6133BA817EF62A52BE6BE4DBE7CC6DAC20DD8484.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 16:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a1:7a:44:0c:8b:ec:ad:11:e9:c1:0e:6c:5a:69:9a:69:5f:9c:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6133BA817EF62A52BE6BE4DBE7CC6DAC20DD8484
        Validity
            Not Before: Sep 12 15:36:50 2026 GMT
            Not After : Sep 11 15:41:50 2027 GMT
        Subject: CN=0073E3BF47EC18A569D20FCE77BBC0E276CDE87B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:11:8e:83:97:94:c9:84:c7:7c:db:c2:34:87:
                    13:b5:7e:7f:fc:97:a4:b7:7e:e4:93:8d:7c:a3:64:
                    4b:3a:e5:a0:31:87:fc:6b:90:69:bd:dd:5c:81:2f:
                    0e:e2:28:be:7d:cb:48:79:b1:4d:c7:59:f3:01:92:
                    ab:23:b0:fc:ce:ce:c5:c8:a7:82:d7:90:3c:3b:8b:
                    45:e1:4b:db:36:93:3d:ee:93:bd:ec:f8:0c:c8:26:
                    e3:cc:f9:eb:91:2f:45:da:13:5e:43:ba:0f:ac:97:
                    31:bd:45:cb:c6:1f:83:c1:20:bb:5c:57:61:55:eb:
                    32:b9:60:cb:8d:98:35:8d:27:36:bb:0b:5b:12:0a:
                    9f:95:e6:d8:42:dc:d4:f8:77:67:14:55:ad:9a:f3:
                    07:32:7b:78:ce:7b:28:5c:4f:4e:c1:ff:df:7b:a0:
                    20:bd:e4:5e:a5:c0:db:85:b5:b1:fa:82:7c:c8:62:
                    f3:fc:b5:f6:62:f4:93:01:74:aa:b3:13:a3:f6:52:
                    1e:6c:1b:07:ac:a1:5d:20:cd:1e:5a:0d:dc:a0:4d:
                    66:e3:27:11:94:e2:4d:9c:22:38:66:c8:03:af:79:
                    61:72:2e:14:3d:ef:a7:48:33:3f:e6:90:86:57:97:
                    f0:ce:da:a5:10:28:49:48:8f:af:cc:c9:ac:74:bd:
                    1f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:73:E3:BF:47:EC:18:A5:69:D2:0F:CE:77:BB:C0:E2:76:CD:E8:7B
            X509v3 Authority Key Identifier:
                keyid:61:33:BA:81:7E:F6:2A:52:BE:6B:E4:DB:E7:CC:6D:AC:20:DD:84:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6KmmNQ8b3VjAreTG2w2HyZqS5JXwGb3MGVGCqNmvvKNE/0/6133BA817EF62A52BE6BE4DBE7CC6DAC20DD8484.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6133BA817EF62A52BE6BE4DBE7CC6DAC20DD8484.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6KmmNQ8b3VjAreTG2w2HyZqS5JXwGb3MGVGCqNmvvKNE/0/323830343a353335633a3a2f33342d3334203d3e20323638353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:535c::/34

    Signature Algorithm: sha256WithRSAEncryption
         3f:be:be:1c:da:76:a3:55:6c:bb:9a:ea:52:59:90:1a:73:50:
         4b:87:82:06:0f:a4:59:24:5e:d2:67:61:68:5e:0f:b8:e5:01:
         0a:be:e6:9e:a3:f8:b0:8b:89:9b:67:0c:12:19:10:ca:73:d9:
         b8:10:23:3b:5d:2e:56:db:08:91:11:4b:a6:0d:d0:67:d5:5d:
         9c:e3:f2:ba:14:c5:80:1c:b9:d0:89:ef:dd:28:97:24:fa:4a:
         7e:d2:9b:3e:ba:ff:2d:ed:5d:0f:97:9c:26:13:5d:2d:5e:64:
         86:c8:43:27:41:97:2d:d0:f1:22:b3:2f:10:fb:fb:7a:00:6c:
         17:c8:dd:23:69:4e:62:24:c8:13:46:a7:75:6d:2e:39:0d:b6:
         7f:80:93:cb:ae:db:c7:fd:1f:75:0c:4a:e3:bb:1b:11:43:40:
         bf:d9:fd:f2:59:f5:47:35:99:d8:3a:88:a5:42:b8:4c:39:28:
         4c:45:fa:9c:76:21:c4:84:d8:7a:09:ec:84:91:39:f3:b9:76:
         84:b1:83:2b:29:2a:a6:47:ff:2e:02:58:ca:38:44:71:69:15:
         18:85:64:fb:ac:b3:82:c1:05:8f:a7:38:28:10:31:c7:d0:52:
         87:7a:79:f8:bc:01:bc:41:54:e5:1d:78:f0:74:e3:2e:a1:b2:
         bd:fc:bf:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:57:10 2026 by rpki-client