Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/323830343a3666343a3a2f33322d313238203d3e20323632353339.roa
File:                     323830343a3666343a3a2f33322d313238203d3e20323632353339.roa (raw, json)
Hash identifier:          4aK70uoMY65S4bUzRoLUybwTrbYRnmCxQNmBYnQ7MsA=
Subject key identifier:   57:6E:04:41:AC:53:94:60:2D:B7:2D:4A:9F:5A:A7:5E:7E:83:A9:37
Certificate issuer:       /CN=48C8BB91A4A51A013E78E5B7DCC8F94EA7044483
Certificate serial:       0D3C47B922D93CA6BD52C418BF7A0FF30BFD0E44
Authority key identifier: 48:C8:BB:91:A4:A5:1A:01:3E:78:E5:B7:DC:C8:F9:4E:A7:04:44:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48C8BB91A4A51A013E78E5B7DCC8F94EA7044483.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/323830343a3666343a3a2f33322d313238203d3e20323632353339.roa
Signing time:             Tue 07 Apr 2026 18:52:53 +0000
ROA not before:           Tue 07 Apr 2026 18:47:53 +0000
ROA not after:            Tue 06 Apr 2027 18:52:53 +0000
asID:                     262539
IP address blocks:        2804:6f4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/48C8BB91A4A51A013E78E5B7DCC8F94EA7044483.crl
                          rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/48C8BB91A4A51A013E78E5B7DCC8F94EA7044483.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48C8BB91A4A51A013E78E5B7DCC8F94EA7044483.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 14:09:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:3c:47:b9:22:d9:3c:a6:bd:52:c4:18:bf:7a:0f:f3:0b:fd:0e:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48C8BB91A4A51A013E78E5B7DCC8F94EA7044483
        Validity
            Not Before: Apr  7 18:47:53 2026 GMT
            Not After : Apr  6 18:52:53 2027 GMT
        Subject: CN=576E0441AC5394602DB72D4A9F5AA75E7E83A937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a2:7f:78:ca:70:90:86:0c:96:69:13:6c:eb:
                    42:82:5f:5c:b8:c3:cf:1d:cb:af:a7:9d:5c:78:03:
                    cf:bd:c4:0a:67:09:31:9c:e9:1e:99:5b:4f:30:eb:
                    4f:9e:47:21:88:05:b9:96:49:c0:7c:eb:93:11:f3:
                    1d:7d:50:58:4e:9d:ae:30:5b:76:29:a7:4a:42:76:
                    df:ba:4a:85:46:68:92:5d:91:40:51:cf:c5:d2:9d:
                    4e:50:7b:9e:a1:48:3f:b0:6c:52:04:14:0a:b9:0a:
                    bc:3d:b0:de:05:a6:b6:2e:e8:7c:3f:a7:9f:8e:42:
                    9e:62:78:9e:70:83:cc:5d:1c:3b:be:8f:36:d2:75:
                    ea:61:ca:ba:f7:ca:32:22:37:53:9a:0d:c4:d0:9d:
                    8b:a2:8e:e3:a3:b7:f0:da:7b:74:78:97:16:d8:a0:
                    b2:bf:b3:1e:b4:2f:da:5d:f0:91:d0:80:25:c7:3d:
                    7a:b8:a4:a1:39:17:9a:33:1d:7c:36:5e:61:d7:32:
                    77:cb:a0:83:8e:bf:9b:d9:e2:31:b8:1c:cd:91:37:
                    f5:c3:0c:98:9e:d1:43:cb:8d:ab:b3:09:dc:fd:78:
                    6f:4a:69:e7:86:8b:49:57:a5:55:1b:7a:b7:d1:93:
                    4c:1e:78:44:0e:80:3a:8e:8b:d2:35:84:61:2f:7b:
                    25:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6E:04:41:AC:53:94:60:2D:B7:2D:4A:9F:5A:A7:5E:7E:83:A9:37
            X509v3 Authority Key Identifier:
                keyid:48:C8:BB:91:A4:A5:1A:01:3E:78:E5:B7:DC:C8:F9:4E:A7:04:44:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/48C8BB91A4A51A013E78E5B7DCC8F94EA7044483.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48C8BB91A4A51A013E78E5B7DCC8F94EA7044483.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/323830343a3666343a3a2f33322d313238203d3e20323632353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:65:fd:6e:c4:b4:b9:8d:25:3f:d9:70:61:35:89:f3:5b:9a:
         7a:bd:b0:97:ba:54:a4:af:5e:81:d4:a5:51:07:33:d8:d5:59:
         fe:b6:eb:d3:13:bc:79:5d:7f:3c:30:59:75:7b:ea:09:28:b5:
         37:a9:9a:ba:d4:b4:4c:a1:d9:ce:30:49:71:1c:2c:94:57:d2:
         e6:29:dd:6e:00:3f:17:8c:7a:0a:f6:25:b6:8b:78:f6:a9:9c:
         ab:4a:73:a4:10:c7:ae:df:e8:32:ed:db:b8:27:56:9c:39:35:
         86:5c:ec:75:0c:3e:e6:06:09:de:f7:44:68:b6:5c:36:2a:96:
         c2:4c:be:9e:71:6a:2e:9d:9b:70:46:15:2b:dc:ad:b7:27:06:
         e2:28:3f:77:60:aa:eb:e0:56:c9:f0:27:f3:ac:4f:a1:46:6b:
         53:37:7e:94:85:8c:c8:47:72:a3:a0:37:7b:43:ce:5a:67:7c:
         8d:bd:cb:4a:4e:7d:7b:60:3e:31:4e:33:50:2e:f5:64:09:24:
         bd:80:3d:00:5d:39:ec:4a:dc:17:ef:51:1f:0d:1c:71:67:5d:
         ad:f4:8c:59:16:3a:97:3d:92:14:48:d3:a0:90:52:7c:2c:e5:
         5a:31:1d:ea:a7:c9:c5:03:81:05:06:5b:15:ae:eb:f6:03:50:
         fe:86:a7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 19:31:08 2026 by rpki-client