Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/323830343a336131303a3a2f33322d3438203d3e203138383336.roa
File:                     323830343a336131303a3a2f33322d3438203d3e203138383336.roa (raw, json)
Hash identifier:          IdKHHjEWhNCXxnBI1fVE4G1T2sKcWFd1XXpFublyqKo=
Subject key identifier:   D3:42:BC:3C:6D:AA:60:CE:14:9F:32:61:E7:B8:0F:AC:A9:3E:C6:02
Certificate issuer:       /CN=6EE5DC8E816AC86198A0379BE60A62BE9F390792
Certificate serial:       60E3B8907CE9F405E790A71A4D619224B55AFA62
Authority key identifier: 6E:E5:DC:8E:81:6A:C8:61:98:A0:37:9B:E6:0A:62:BE:9F:39:07:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/323830343a336131303a3a2f33322d3438203d3e203138383336.roa
Signing time:             Wed 25 Feb 2026 17:57:06 +0000
ROA not before:           Wed 25 Feb 2026 17:52:06 +0000
ROA not after:            Wed 24 Feb 2027 17:57:06 +0000
asID:                     18836
IP address blocks:        2804:3a10::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.crl
                          rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 04:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e3:b8:90:7c:e9:f4:05:e7:90:a7:1a:4d:61:92:24:b5:5a:fa:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5DC8E816AC86198A0379BE60A62BE9F390792
        Validity
            Not Before: Feb 25 17:52:06 2026 GMT
            Not After : Feb 24 17:57:06 2027 GMT
        Subject: CN=D342BC3C6DAA60CE149F3261E7B80FACA93EC602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:37:5b:75:d9:44:8f:f0:b9:16:83:02:eb:17:
                    21:42:8f:58:6d:a4:81:e9:3f:6f:88:d0:e5:4b:e3:
                    89:b2:b3:a8:79:38:fe:fe:ac:5a:3a:46:9a:23:59:
                    55:aa:67:27:9f:b4:c7:46:7d:1d:d1:22:a9:93:92:
                    d6:aa:5a:07:6c:c2:a9:f7:83:b5:9a:fc:88:b8:b7:
                    4b:7e:e6:a4:43:44:5c:8e:2b:84:d3:bd:f4:a8:fd:
                    51:e8:50:46:35:b4:bc:05:71:51:5f:eb:98:86:87:
                    b9:cb:02:22:a4:94:42:5f:3c:e9:28:a0:6d:5d:bc:
                    7d:16:50:aa:0b:a8:2c:07:5e:af:2b:a7:82:bd:c0:
                    64:8d:91:67:a4:ee:12:2c:85:df:25:1c:56:77:08:
                    39:cf:74:e5:b0:0c:3e:4a:2d:fa:74:a9:19:b1:f0:
                    cc:85:27:1f:52:ee:0c:d8:46:db:ef:ec:01:d6:d4:
                    2c:c7:d0:ff:08:f1:40:43:49:f7:83:77:38:be:c4:
                    78:c5:b3:05:62:64:21:b3:9f:84:ed:b0:12:42:22:
                    4d:95:9b:2a:86:81:af:11:97:a9:ed:65:42:bb:db:
                    b6:24:3a:ad:34:ef:db:23:ae:e4:f3:37:3a:76:be:
                    70:72:31:04:9a:f3:64:db:47:b3:5a:12:d7:f6:e5:
                    8b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:42:BC:3C:6D:AA:60:CE:14:9F:32:61:E7:B8:0F:AC:A9:3E:C6:02
            X509v3 Authority Key Identifier:
                keyid:6E:E5:DC:8E:81:6A:C8:61:98:A0:37:9B:E6:0A:62:BE:9F:39:07:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/323830343a336131303a3a2f33322d3438203d3e203138383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:17:bf:c8:9f:78:6e:a7:41:7f:22:7c:4e:f9:78:df:49:3d:
         b8:e1:4f:d6:c4:28:2f:fd:75:1e:fb:81:e2:8b:3e:c1:f7:29:
         50:07:d4:a9:c3:1d:05:92:75:15:49:34:2d:41:41:9f:67:00:
         fd:6d:ce:35:87:bb:3e:9f:df:a3:7b:26:90:87:a8:3b:63:57:
         06:1b:fa:ff:3b:4a:4c:65:01:cf:d3:5b:47:f5:0d:bb:d3:48:
         58:fb:78:6a:5c:db:33:82:ef:ab:fa:fd:b4:e1:3c:65:aa:b0:
         aa:5e:8a:d9:b7:fb:2f:c9:03:dd:53:a8:f6:00:cd:1c:80:d6:
         c3:a2:f1:6a:5c:15:66:83:8b:5b:cd:b6:42:92:d3:6d:e0:20:
         65:c9:cc:b8:65:8a:1d:b9:22:11:16:ce:c4:09:ce:9d:31:7d:
         67:f3:61:37:fc:3c:f4:c3:59:17:78:e3:33:6f:7d:a4:6a:90:
         3c:6d:9d:83:32:7a:af:f3:90:bc:54:fa:51:3e:91:78:45:77:
         8c:68:76:c6:d7:98:cb:71:e7:46:17:ed:d6:14:48:fa:7b:69:
         3c:18:0f:a8:c8:7e:d6:e2:b7:eb:b6:8a:a3:4b:91:d5:73:cd:
         f3:09:73:52:83:c3:5b:45:8a:8d:a2:4d:3c:5b:3c:10:dc:43:
         fc:5f:4c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:17:03 2026 by rpki-client