Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/323830343a366266383a383030303a3a2f33332d3333203d3e20323730343337.roa
File:                     323830343a366266383a383030303a3a2f33332d3333203d3e20323730343337.roa (raw, json)
Hash identifier:          286nResr34vPpJz3GdCysSRAVtHSiIQe8HB8mmq8SZE=
Subject key identifier:   69:9E:58:59:03:7C:C7:66:84:CE:F4:19:D0:2D:42:AB:63:91:11:B3
Certificate issuer:       /CN=D23AEA3BF9686D794967BECAC226FA9648876870
Certificate serial:       45B01E406E1507DAAA08AD899C3C6636F83FF261
Authority key identifier: D2:3A:EA:3B:F9:68:6D:79:49:67:BE:CA:C2:26:FA:96:48:87:68:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/323830343a366266383a383030303a3a2f33332d3333203d3e20323730343337.roa
Signing time:             Tue 31 Mar 2026 22:17:19 +0000
ROA not before:           Tue 31 Mar 2026 22:12:19 +0000
ROA not after:            Tue 30 Mar 2027 22:17:19 +0000
asID:                     270437
IP address blocks:        2804:6bf8:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.crl
                          rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 17:06:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b0:1e:40:6e:15:07:da:aa:08:ad:89:9c:3c:66:36:f8:3f:f2:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D23AEA3BF9686D794967BECAC226FA9648876870
        Validity
            Not Before: Mar 31 22:12:19 2026 GMT
            Not After : Mar 30 22:17:19 2027 GMT
        Subject: CN=699E5859037CC76684CEF419D02D42AB639111B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:89:94:1e:23:a1:f0:1d:a8:70:e7:af:fb:2b:
                    ae:7d:97:4f:93:9b:a1:18:53:f3:6c:e7:7e:89:d7:
                    3a:6d:7c:98:bc:c4:1b:eb:d5:6e:89:2e:88:ed:36:
                    ee:1a:6b:65:a7:c7:0f:ad:7d:2f:5f:fd:66:92:ce:
                    c4:5b:a3:70:25:f7:20:f4:11:d2:11:71:f4:d3:ae:
                    f0:f2:46:1b:ee:79:58:46:76:87:7b:ad:d8:1f:be:
                    24:02:62:a4:f1:9a:75:74:46:53:27:07:34:20:11:
                    bb:8c:0d:76:10:0a:e2:32:42:e1:e8:cd:f7:09:04:
                    1e:cc:e9:73:fb:1a:20:ec:70:df:52:d5:0e:af:7b:
                    30:34:11:81:1a:56:6c:e1:3d:29:2f:63:8c:f2:fb:
                    ba:3f:b4:a1:04:be:50:e7:7f:e3:77:d4:40:67:2e:
                    c6:d0:c7:fa:22:5c:d7:a6:1f:b0:10:d5:c0:7b:15:
                    78:c6:53:a5:82:18:35:17:7e:8e:e2:60:7a:35:0e:
                    42:f4:7b:50:47:38:09:85:24:a1:cf:e0:80:e9:27:
                    02:47:31:33:f1:09:d0:bf:1d:a7:06:9f:0f:9a:ae:
                    cf:97:25:7a:d1:01:23:cb:60:1d:cd:a7:d0:bc:08:
                    60:9a:69:27:87:be:b6:5d:63:b8:b5:b5:84:4b:50:
                    b5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9E:58:59:03:7C:C7:66:84:CE:F4:19:D0:2D:42:AB:63:91:11:B3
            X509v3 Authority Key Identifier:
                keyid:D2:3A:EA:3B:F9:68:6D:79:49:67:BE:CA:C2:26:FA:96:48:87:68:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/323830343a366266383a383030303a3a2f33332d3333203d3e20323730343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bf8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         48:fb:07:e3:2f:0a:f9:0b:72:24:60:47:58:11:6a:75:82:ac:
         c2:ff:9f:1a:0e:de:62:8a:b3:cd:b2:1c:93:9d:ee:2e:90:9e:
         9c:3c:5e:13:51:9d:87:bb:39:6d:bf:32:c0:5c:53:db:c8:5c:
         d6:13:72:e3:d5:06:43:a9:cb:dd:58:bf:11:94:7b:71:7f:6b:
         4a:8f:b7:b8:4b:68:05:34:03:1c:b0:05:f9:65:6d:5c:4c:3d:
         81:48:01:4c:df:49:d2:28:5c:31:50:21:ca:bf:b2:27:49:72:
         89:a9:f6:8a:de:b6:d4:56:37:f1:91:80:74:39:bb:ab:97:61:
         f1:2c:a2:dc:48:7e:ff:8a:40:fa:a4:e8:fa:e0:73:b0:17:5b:
         20:b9:ae:0d:c8:8f:7b:eb:d3:45:c4:49:89:e3:48:28:97:7f:
         d0:f6:77:0e:be:4f:d5:98:44:37:8c:24:fc:bd:d1:80:f8:2e:
         e6:0d:bc:6c:15:e4:1d:de:77:63:c8:6a:79:89:a8:62:5a:98:
         76:ec:96:36:20:30:86:f2:cb:72:c4:88:2f:8c:6c:68:35:3b:
         32:f5:83:22:51:bc:cc:b1:9d:b1:20:e1:c8:6e:b7:5f:34:5a:
         f6:ac:39:e2:d2:9d:c7:16:bb:79:4c:6a:85:4a:3a:56:25:40:
         8f:8c:13:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 21:05:55 2026 by rpki-client