Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/hCidgVhCgqQeATRjHWBdw2biP7AZYs9UgEjLfJDFoPA/0/323830343a386436383a3a2f33322d3438203d3e20323733333535.roa
File:                     323830343a386436383a3a2f33322d3438203d3e20323733333535.roa (raw, json)
Hash identifier:          oYLdLTVJFOB6TwwiNDS44+mZg0BT7dkcPFZjqwnQNpE=
Subject key identifier:   6C:B8:6F:5B:C3:B6:60:F9:8D:0D:8D:7A:A1:B2:54:BA:90:EC:20:3B
Certificate issuer:       /CN=6B62956BB4D5D980A6B4B83BAABA330A7B4A6EAE
Certificate serial:       5CEA7608AD9EF8F5B62837B335D1954D8F6EF974
Authority key identifier: 6B:62:95:6B:B4:D5:D9:80:A6:B4:B8:3B:AA:BA:33:0A:7B:4A:6E:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B62956BB4D5D980A6B4B83BAABA330A7B4A6EAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hCidgVhCgqQeATRjHWBdw2biP7AZYs9UgEjLfJDFoPA/0/323830343a386436383a3a2f33322d3438203d3e20323733333535.roa
Signing time:             Wed 08 Apr 2026 17:50:25 +0000
ROA not before:           Wed 08 Apr 2026 17:45:25 +0000
ROA not after:            Wed 07 Apr 2027 17:50:25 +0000
asID:                     273355
IP address blocks:        2804:8d68::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/hCidgVhCgqQeATRjHWBdw2biP7AZYs9UgEjLfJDFoPA/0/6B62956BB4D5D980A6B4B83BAABA330A7B4A6EAE.crl
                          rsync://rpki-repo.registro.br/repo/hCidgVhCgqQeATRjHWBdw2biP7AZYs9UgEjLfJDFoPA/0/6B62956BB4D5D980A6B4B83BAABA330A7B4A6EAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B62956BB4D5D980A6B4B83BAABA330A7B4A6EAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 18:34:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ea:76:08:ad:9e:f8:f5:b6:28:37:b3:35:d1:95:4d:8f:6e:f9:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B62956BB4D5D980A6B4B83BAABA330A7B4A6EAE
        Validity
            Not Before: Apr  8 17:45:25 2026 GMT
            Not After : Apr  7 17:50:25 2027 GMT
        Subject: CN=6CB86F5BC3B660F98D0D8D7AA1B254BA90EC203B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:03:81:6b:ba:85:7b:c1:10:2d:7a:f8:79:60:
                    a9:fc:fb:ef:ee:b7:da:3d:9f:13:19:b1:6c:40:28:
                    5b:94:d0:02:ff:f6:9d:44:49:22:e6:32:04:61:e9:
                    a7:1d:c2:2c:ef:42:3f:96:55:0d:23:28:53:da:cb:
                    51:3a:01:60:60:66:ba:63:61:e6:9f:ca:e7:e9:4c:
                    ae:27:44:c3:a8:b7:1b:70:8a:94:f7:25:8d:95:16:
                    df:c2:16:9b:76:8e:d8:67:4e:7f:ae:ce:7c:85:dd:
                    5e:13:b8:d3:d7:5c:3d:34:f2:94:a1:19:7c:50:45:
                    f5:ca:24:09:c6:29:11:54:f2:7f:99:fc:78:7f:4b:
                    c2:54:d8:1d:7b:84:3a:ff:eb:a0:a7:fe:94:d8:7e:
                    44:db:cf:6c:85:ea:df:01:bc:cf:0e:09:4c:c3:42:
                    e5:17:d8:b4:9b:d8:44:51:91:86:ec:84:67:30:6e:
                    e9:fd:73:83:e4:dd:de:8e:8e:77:c6:83:c2:b7:20:
                    4a:dc:1a:4b:b5:65:1c:14:e1:d6:7b:e3:9b:45:7f:
                    d3:f1:02:d5:f9:06:46:24:5c:7f:71:12:0c:df:a5:
                    02:80:70:53:49:ec:22:14:94:13:4e:d7:38:15:1b:
                    46:05:8a:ed:5b:9f:58:de:ac:f0:8c:1d:8a:0a:e3:
                    cf:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B8:6F:5B:C3:B6:60:F9:8D:0D:8D:7A:A1:B2:54:BA:90:EC:20:3B
            X509v3 Authority Key Identifier:
                keyid:6B:62:95:6B:B4:D5:D9:80:A6:B4:B8:3B:AA:BA:33:0A:7B:4A:6E:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hCidgVhCgqQeATRjHWBdw2biP7AZYs9UgEjLfJDFoPA/0/6B62956BB4D5D980A6B4B83BAABA330A7B4A6EAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B62956BB4D5D980A6B4B83BAABA330A7B4A6EAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hCidgVhCgqQeATRjHWBdw2biP7AZYs9UgEjLfJDFoPA/0/323830343a386436383a3a2f33322d3438203d3e20323733333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d68::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:d5:b2:68:ea:88:3b:67:ae:4d:42:40:5a:23:d7:78:3b:92:
         50:01:d1:00:2d:86:97:27:4d:b0:ae:ca:2e:e6:7e:21:2c:09:
         03:b0:ce:00:4a:73:38:ec:16:49:f6:3d:af:73:27:d3:cf:58:
         97:c8:48:7b:aa:40:0e:50:30:33:85:47:a2:1a:18:03:d8:7e:
         07:0c:b9:59:5d:eb:3d:bb:55:05:f1:85:7c:96:6b:c8:9b:e0:
         7c:47:c4:d6:a3:f6:7e:93:e6:8a:95:98:aa:5a:4a:81:d4:f7:
         64:53:2a:fa:36:c2:f6:a5:8b:34:81:c1:8f:ba:dc:a1:ae:f2:
         3c:68:86:aa:59:21:53:97:e4:1a:f1:27:a7:75:fa:65:5b:79:
         0c:f6:d0:aa:d1:12:cc:e0:e4:87:be:1c:3b:d2:ea:f6:f7:da:
         36:99:3c:ab:61:82:56:3f:4a:d4:43:08:5d:41:0e:80:9f:b5:
         5e:18:df:e0:c2:57:89:d4:8a:92:17:43:f4:80:e8:d4:d8:0b:
         64:60:5b:5a:d8:37:c6:8b:24:78:2a:b6:dd:48:0a:28:23:0b:
         a6:7b:c3:05:ea:85:c4:58:cd:b1:1e:43:79:f5:58:eb:1b:ff:
         ac:c7:40:c0:d6:e1:56:63:f9:fa:c4:4b:c9:c7:c5:18:66:83:
         f0:71:87:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:07:54 2026 by rpki-client