Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/323830343a366266383a3a2f33332d3333203d3e20323730343337.roa
File:                     323830343a366266383a3a2f33332d3333203d3e20323730343337.roa (raw, json)
Hash identifier:          4oqoiChL4nmLfFO3gaGYY3Po4I/eSRfxhZTBVVILkJU=
Subject key identifier:   46:A9:08:54:8A:F2:6C:B2:8C:87:CC:A7:C4:19:35:B6:10:7A:FD:D6
Certificate issuer:       /CN=D23AEA3BF9686D794967BECAC226FA9648876870
Certificate serial:       79C72FC6A54B8007A4213EEBA3EC58147FED1A0A
Authority key identifier: D2:3A:EA:3B:F9:68:6D:79:49:67:BE:CA:C2:26:FA:96:48:87:68:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/323830343a366266383a3a2f33332d3333203d3e20323730343337.roa
Signing time:             Tue 31 Mar 2026 22:17:19 +0000
ROA not before:           Tue 31 Mar 2026 22:12:19 +0000
ROA not after:            Tue 30 Mar 2027 22:17:19 +0000
asID:                     270437
IP address blocks:        2804:6bf8::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.crl
                          rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 17:06:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c7:2f:c6:a5:4b:80:07:a4:21:3e:eb:a3:ec:58:14:7f:ed:1a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D23AEA3BF9686D794967BECAC226FA9648876870
        Validity
            Not Before: Mar 31 22:12:19 2026 GMT
            Not After : Mar 30 22:17:19 2027 GMT
        Subject: CN=46A908548AF26CB28C87CCA7C41935B6107AFDD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e8:83:bd:5d:a9:91:11:3f:e3:0d:d9:26:a6:
                    7f:90:22:a0:37:a0:7c:a9:34:1c:2d:bc:fc:96:47:
                    0c:bc:94:21:c8:ff:18:ed:30:d8:d5:41:38:07:0d:
                    df:39:37:dc:0c:07:26:3b:bf:42:ad:ff:89:bf:7b:
                    ea:a2:f3:b3:b6:d5:08:93:48:3d:ab:14:13:60:e2:
                    dd:eb:b2:c6:3c:5d:a6:da:35:65:f2:57:f7:81:af:
                    a4:88:56:5d:9e:87:3e:5a:f4:4b:43:f6:32:68:e3:
                    a6:91:48:76:13:d6:cb:92:4b:5f:5d:16:01:96:ef:
                    9e:68:86:63:b0:cc:74:6e:61:f2:68:66:a8:c3:d2:
                    f7:e7:e8:2e:cf:79:bc:92:0f:03:bd:35:a7:ff:19:
                    ba:31:dc:ec:5d:ad:a6:17:b5:2b:70:26:f9:94:33:
                    7e:d0:d7:bb:1c:78:f5:d0:7a:50:60:b2:83:e9:39:
                    e8:ca:47:10:4d:1e:ed:99:c1:06:3a:a9:1c:c7:56:
                    c9:ec:2e:26:fd:5a:5e:09:c2:52:52:cd:27:b2:12:
                    6b:c7:15:fe:1f:c5:40:5c:f2:4d:a2:59:81:b1:a7:
                    fb:c3:56:7b:ee:30:39:10:7b:98:a6:8b:74:65:d9:
                    2c:4b:70:ea:07:fe:c3:cf:20:d1:18:5e:65:9e:2b:
                    a0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A9:08:54:8A:F2:6C:B2:8C:87:CC:A7:C4:19:35:B6:10:7A:FD:D6
            X509v3 Authority Key Identifier:
                keyid:D2:3A:EA:3B:F9:68:6D:79:49:67:BE:CA:C2:26:FA:96:48:87:68:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/323830343a366266383a3a2f33332d3333203d3e20323730343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bf8::/33

    Signature Algorithm: sha256WithRSAEncryption
         36:58:25:be:1c:56:87:3a:19:86:f2:24:39:4b:42:cf:18:70:
         1d:b6:6f:56:58:64:0c:0f:d6:1a:37:b7:4e:64:ed:81:4e:3b:
         09:a0:75:27:95:35:0f:2a:48:87:ba:01:5f:cb:bc:db:e4:f8:
         e2:68:cb:68:74:12:b6:27:82:38:20:d8:ab:cd:c4:21:e1:e3:
         42:c2:bf:e1:a9:73:6e:1d:8b:78:8d:eb:1b:35:17:f7:ed:1d:
         3f:fa:12:80:c9:26:c2:36:52:63:9d:02:a0:f1:c5:af:54:0a:
         2b:75:8e:e7:62:9d:35:74:1e:b7:4a:f2:6d:28:a8:29:49:40:
         46:7a:f4:30:08:f9:75:98:dc:53:9f:a4:e7:50:35:3a:18:a6:
         38:6b:25:51:1b:9d:04:02:57:79:19:56:14:ff:ae:a4:ea:08:
         f8:7f:fd:17:63:37:6d:21:f3:bf:29:30:0e:dd:d5:4b:a4:2e:
         3b:f9:42:9b:d0:7f:7f:48:7a:53:96:bd:73:75:bb:81:32:09:
         c4:2d:c0:fe:8a:ea:02:09:95:a6:1e:0f:48:ae:0e:a0:55:6a:
         2d:98:f7:8f:32:e6:b5:3e:75:26:16:c1:f5:e0:91:c5:1b:61:
         a1:21:ba:db:b6:73:e6:d5:b0:92:d2:ae:58:7f:96:c0:e3:92:
         1c:9b:ca:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 21:05:25 2026 by rpki-client