Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/323830343a376435633a3a2f33332d3333203d3e20323731353536.roa
File:                     323830343a376435633a3a2f33332d3333203d3e20323731353536.roa (raw, json)
Hash identifier:          sA3WefOiie/STmU5yyFtQJsDNbw9Y4s9K33Fte0TJkU=
Subject key identifier:   82:C3:EF:1C:2B:B8:63:36:2F:BC:22:96:A7:A3:F7:26:E3:EB:FF:6A
Certificate issuer:       /CN=790CDB25F92375A77BEE4926A0F919ECA374CD1D
Certificate serial:       6D12490FC6239E2136F4509B1CD5A43A9EC758CA
Authority key identifier: 79:0C:DB:25:F9:23:75:A7:7B:EE:49:26:A0:F9:19:EC:A3:74:CD:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/790CDB25F92375A77BEE4926A0F919ECA374CD1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/323830343a376435633a3a2f33332d3333203d3e20323731353536.roa
Signing time:             Tue 24 Feb 2026 23:10:49 +0000
ROA not before:           Tue 24 Feb 2026 23:05:49 +0000
ROA not after:            Tue 23 Feb 2027 23:10:49 +0000
asID:                     271556
IP address blocks:        2804:7d5c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/790CDB25F92375A77BEE4926A0F919ECA374CD1D.crl
                          rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/790CDB25F92375A77BEE4926A0F919ECA374CD1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/790CDB25F92375A77BEE4926A0F919ECA374CD1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 15:53:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:12:49:0f:c6:23:9e:21:36:f4:50:9b:1c:d5:a4:3a:9e:c7:58:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790CDB25F92375A77BEE4926A0F919ECA374CD1D
        Validity
            Not Before: Feb 24 23:05:49 2026 GMT
            Not After : Feb 23 23:10:49 2027 GMT
        Subject: CN=82C3EF1C2BB863362FBC2296A7A3F726E3EBFF6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b9:a5:28:74:3f:12:42:f9:da:2c:15:01:4d:
                    a9:c2:0c:7c:66:b5:ef:5d:12:fc:fa:4e:93:81:53:
                    5d:84:e2:0d:07:7c:11:17:7d:22:08:de:3e:15:b7:
                    ed:1a:f9:61:93:12:ae:fc:1e:2a:ef:8a:f6:2f:be:
                    09:6f:75:e4:c2:2b:fa:bd:9c:dc:c7:cd:b8:df:9e:
                    5d:9c:da:6b:63:ff:b5:ca:1b:35:16:bc:c0:71:bd:
                    28:7b:ba:dd:7f:6e:ff:34:bb:a4:92:1c:02:cd:aa:
                    d7:e1:99:a5:16:52:b4:1f:a8:c8:f8:29:d2:d0:c8:
                    c4:9c:92:58:43:e9:1a:67:3b:43:36:06:ca:f5:4f:
                    68:76:4d:70:49:97:61:51:7f:8b:31:4e:db:60:10:
                    8e:40:f0:ab:b3:7c:f0:af:ec:49:15:cc:6d:35:a0:
                    7d:f3:61:19:4f:a0:d6:1d:ec:3f:56:35:1e:a9:46:
                    fa:63:e7:3c:ba:27:b3:aa:56:45:39:c0:88:bc:79:
                    ca:0f:43:4b:91:b8:f9:38:8e:51:d4:2d:6b:79:b6:
                    f0:57:0f:63:49:9d:af:da:e2:94:b6:42:9a:bd:bf:
                    df:4c:de:7f:c0:2c:f9:34:2b:e9:4c:d2:96:8c:f6:
                    10:ef:a5:6d:bc:4d:b2:15:ba:a3:f5:0f:a3:79:67:
                    29:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C3:EF:1C:2B:B8:63:36:2F:BC:22:96:A7:A3:F7:26:E3:EB:FF:6A
            X509v3 Authority Key Identifier:
                keyid:79:0C:DB:25:F9:23:75:A7:7B:EE:49:26:A0:F9:19:EC:A3:74:CD:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/790CDB25F92375A77BEE4926A0F919ECA374CD1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/790CDB25F92375A77BEE4926A0F919ECA374CD1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/323830343a376435633a3a2f33332d3333203d3e20323731353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d5c::/33

    Signature Algorithm: sha256WithRSAEncryption
         a0:b8:09:e7:30:a4:c8:12:31:90:ee:83:5c:ac:4f:8e:db:2c:
         e4:12:52:d1:ce:eb:2a:e8:99:ea:30:89:46:55:d6:e3:77:fe:
         a8:6b:bf:e3:f9:b4:24:b5:ab:e5:09:41:08:2f:c6:31:7e:c3:
         f1:0a:4b:84:a1:71:dd:8d:4e:37:3d:b1:48:6a:6f:24:7e:05:
         88:78:d7:e2:a5:5f:8d:46:6b:7a:c4:75:96:ee:63:59:77:0e:
         e3:22:06:07:b9:31:38:eb:c6:f9:b8:ab:31:db:6c:51:bb:f0:
         29:f8:9c:a3:c1:09:5a:d5:55:29:9b:12:46:dc:fb:57:2b:1e:
         76:4c:6f:15:93:85:ae:bd:12:f8:aa:12:7e:f5:e5:1d:c2:27:
         0a:4d:2e:8c:6a:a9:d8:11:0c:5a:75:96:1f:51:2a:9f:0d:70:
         21:9c:c8:4f:03:3e:c5:b4:18:86:15:29:89:26:89:16:d5:28:
         6d:bd:f2:9f:39:d6:57:83:16:13:89:1b:59:96:2b:41:1a:85:
         d8:31:b7:cd:dc:1a:4a:4b:56:33:49:d9:05:e2:1a:77:f2:14:
         9e:36:2f:62:bc:32:65:7c:d8:02:75:4a:3d:8d:03:7b:98:4f:
         be:9d:f4:0e:8e:57:cb:23:7f:54:52:62:bc:b3:46:ba:19:ff:
         b9:52:a2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:32:47 2026 by rpki-client