Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6U7sQb4WoxSdMfNxqu9sBQRFYVMwkTjZjCGbe3KppkUi/0/323830343a363936343a3a2f33332d3333203d3e20323730323637.roa
File:                     323830343a363936343a3a2f33332d3333203d3e20323730323637.roa (raw, json)
Hash identifier:          nDJJyyoPayhuzVEHOLVY/u+NmUaoWDfs/6n6U/8piJY=
Subject key identifier:   D8:99:83:F5:AE:D4:F3:E1:46:03:DD:05:78:04:D2:2F:04:D1:11:DF
Certificate issuer:       /CN=243BD93183FA3EECE12AF566AC5DC14B07A64854
Certificate serial:       285078ED1BB40179C3FF13FBFD017E935FBB1AF8
Authority key identifier: 24:3B:D9:31:83:FA:3E:EC:E1:2A:F5:66:AC:5D:C1:4B:07:A6:48:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/243BD93183FA3EECE12AF566AC5DC14B07A64854.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6U7sQb4WoxSdMfNxqu9sBQRFYVMwkTjZjCGbe3KppkUi/0/323830343a363936343a3a2f33332d3333203d3e20323730323637.roa
Signing time:             Tue 28 Jul 2026 18:37:32 +0000
ROA not before:           Tue 28 Jul 2026 18:32:32 +0000
ROA not after:            Tue 27 Jul 2027 18:37:32 +0000
asID:                     270267
IP address blocks:        2804:6964::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6U7sQb4WoxSdMfNxqu9sBQRFYVMwkTjZjCGbe3KppkUi/0/243BD93183FA3EECE12AF566AC5DC14B07A64854.crl
                          rsync://rpki-repo.registro.br/repo/6U7sQb4WoxSdMfNxqu9sBQRFYVMwkTjZjCGbe3KppkUi/0/243BD93183FA3EECE12AF566AC5DC14B07A64854.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/243BD93183FA3EECE12AF566AC5DC14B07A64854.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 22:31:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:50:78:ed:1b:b4:01:79:c3:ff:13:fb:fd:01:7e:93:5f:bb:1a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=243BD93183FA3EECE12AF566AC5DC14B07A64854
        Validity
            Not Before: Jul 28 18:32:32 2026 GMT
            Not After : Jul 27 18:37:32 2027 GMT
        Subject: CN=D89983F5AED4F3E14603DD057804D22F04D111DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5b:6f:8f:f1:33:84:4b:92:d5:12:c8:21:e8:
                    4c:f7:b2:72:aa:94:87:07:39:fa:06:80:20:81:3e:
                    32:58:b0:5a:00:3f:fb:c2:cf:0a:b3:52:c6:2c:0f:
                    e6:e1:a2:67:82:9c:83:c8:a8:c6:5a:47:37:81:40:
                    70:25:1d:f8:12:54:8d:5f:f9:5f:9b:2f:29:fa:29:
                    f6:b1:f9:6c:10:4c:61:ab:e0:58:e7:1c:7a:20:71:
                    27:bc:78:20:12:e3:1d:b9:cd:4c:ed:61:10:2c:1b:
                    ab:d3:d0:1f:f3:dd:5c:74:f6:74:e7:2d:46:ab:92:
                    9f:70:b9:f7:a3:a5:e5:f1:b2:d5:3a:a4:ae:ef:2d:
                    e9:5f:c5:13:06:5d:e8:dc:fd:b0:6d:53:47:cd:f6:
                    f4:e0:06:b5:20:16:28:0e:25:03:79:7d:68:c1:d0:
                    61:c1:e7:6b:c2:c0:f5:65:cc:74:16:46:f9:00:04:
                    68:a3:fa:c9:f2:9a:62:5e:dd:09:73:d0:64:4f:a4:
                    b7:ad:03:9c:80:f4:55:71:08:eb:7c:7c:1f:8f:20:
                    ca:03:f7:a0:b4:4f:ff:79:fa:d6:3d:a1:a5:8f:46:
                    cc:b4:f5:8e:55:ac:36:72:97:49:7e:f1:b9:d6:1e:
                    cb:26:b0:fd:33:54:f3:3b:4f:c0:77:ea:dd:fc:2f:
                    e5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:99:83:F5:AE:D4:F3:E1:46:03:DD:05:78:04:D2:2F:04:D1:11:DF
            X509v3 Authority Key Identifier:
                keyid:24:3B:D9:31:83:FA:3E:EC:E1:2A:F5:66:AC:5D:C1:4B:07:A6:48:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6U7sQb4WoxSdMfNxqu9sBQRFYVMwkTjZjCGbe3KppkUi/0/243BD93183FA3EECE12AF566AC5DC14B07A64854.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/243BD93183FA3EECE12AF566AC5DC14B07A64854.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6U7sQb4WoxSdMfNxqu9sBQRFYVMwkTjZjCGbe3KppkUi/0/323830343a363936343a3a2f33332d3333203d3e20323730323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6964::/33

    Signature Algorithm: sha256WithRSAEncryption
         3c:6a:de:0c:76:97:f0:9f:f5:bb:93:c3:05:d0:00:45:41:c9:
         7d:72:fc:cc:5c:50:60:6c:69:98:5b:76:2c:d0:20:16:2a:f1:
         46:73:d3:01:a1:5a:56:29:8c:66:37:dd:8c:12:83:8c:0c:33:
         12:64:c6:7f:46:c1:77:d5:ae:fd:1a:72:6e:a1:14:f1:44:bb:
         7c:aa:cd:67:18:26:bc:66:04:4b:df:73:29:a1:61:3b:71:b5:
         da:5b:8e:d8:e7:cc:6a:e8:bb:ab:70:d2:42:7f:fe:df:7f:ca:
         98:dc:f1:f6:2c:62:cc:91:2a:fa:9c:00:ba:c6:c2:41:82:74:
         ce:eb:e8:0f:6a:f7:bb:b2:d8:70:5e:0b:33:16:ba:5d:c9:9b:
         bd:9b:f9:3b:f2:32:77:6e:66:7b:cd:7f:e3:8f:8a:8a:78:e0:
         76:2b:d5:da:c5:3c:b1:0f:f6:41:3a:49:62:ad:b6:c6:45:1e:
         16:03:7e:a8:7e:09:79:c5:7b:bc:a2:3c:38:29:3c:ac:07:39:
         2e:1a:3c:8b:8f:0f:33:cb:c5:07:0d:3f:af:74:3e:8d:19:57:
         81:69:71:e7:54:f3:0a:a3:be:b3:ff:f6:9b:97:5d:85:8b:eb:
         1c:ae:4d:97:93:ce:d6:46:4d:ba:0e:f4:20:b8:3d:ac:9e:2a:
         ec:ce:6c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:58:31 2026 by rpki-client