Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/323830343a366562383a3a2f33342d3334203d3e20323730363135.roa
File:                     323830343a366562383a3a2f33342d3334203d3e20323730363135.roa (raw, json)
Hash identifier:          hakwzdO1/PmsHx0dx6ww+isq/+mVpgLutPk6Nl+XATM=
Subject key identifier:   7C:A8:67:4F:95:0C:1B:85:B5:C6:A1:F1:AF:E8:BF:54:A8:B6:D7:59
Certificate issuer:       /CN=6114284DE6F274DEE8232CD8A210B10F99008FCB
Certificate serial:       6D08A1ECD0188525AD0D680495E82BAF80C1B3BF
Authority key identifier: 61:14:28:4D:E6:F2:74:DE:E8:23:2C:D8:A2:10:B1:0F:99:00:8F:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6114284DE6F274DEE8232CD8A210B10F99008FCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/323830343a366562383a3a2f33342d3334203d3e20323730363135.roa
Signing time:             Mon 06 Apr 2026 13:58:34 +0000
ROA not before:           Mon 06 Apr 2026 13:53:34 +0000
ROA not after:            Mon 05 Apr 2027 13:58:34 +0000
asID:                     270615
IP address blocks:        2804:6eb8::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/6114284DE6F274DEE8232CD8A210B10F99008FCB.crl
                          rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/6114284DE6F274DEE8232CD8A210B10F99008FCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6114284DE6F274DEE8232CD8A210B10F99008FCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 04:50:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:08:a1:ec:d0:18:85:25:ad:0d:68:04:95:e8:2b:af:80:c1:b3:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6114284DE6F274DEE8232CD8A210B10F99008FCB
        Validity
            Not Before: Apr  6 13:53:34 2026 GMT
            Not After : Apr  5 13:58:34 2027 GMT
        Subject: CN=7CA8674F950C1B85B5C6A1F1AFE8BF54A8B6D759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:53:15:1c:db:e1:bb:6e:0d:8e:23:78:5d:4b:
                    b4:3c:78:c8:c8:92:b8:1e:77:5a:8d:19:ba:1a:af:
                    59:64:24:30:b3:c3:b7:e8:8b:71:f4:21:66:e1:0b:
                    55:d9:60:a6:77:40:d7:25:c0:96:1b:91:45:f2:73:
                    c2:c7:0c:d4:47:ad:c8:06:9c:77:ee:ed:7d:a3:d4:
                    ee:f5:da:bc:1b:53:34:14:e3:2e:48:7f:ca:35:11:
                    fd:a1:45:09:32:c4:32:ba:6b:ca:31:da:59:a8:5d:
                    eb:f6:80:e9:87:91:45:13:24:1f:a7:c9:72:06:3b:
                    78:4a:c2:d1:2f:34:66:d4:1c:9d:18:17:43:61:00:
                    c3:6b:bc:09:2f:cc:f7:3f:4f:c0:a5:1d:7a:6b:3d:
                    4b:4b:09:88:4b:1f:98:9d:38:d6:9d:ad:a8:3c:d8:
                    f0:a2:97:f1:0c:dc:ee:15:20:e3:57:d4:14:f7:ce:
                    03:0f:81:56:c1:2c:fc:c9:5e:fa:1d:e0:8d:4a:cc:
                    51:9e:99:01:89:d6:3c:e7:61:76:42:f1:fa:06:a7:
                    9c:5c:c2:0d:4a:39:e6:ea:d3:b5:46:6b:e6:f5:99:
                    4f:f3:04:46:f6:5c:ea:9b:6c:cd:14:30:fe:02:6f:
                    f7:8e:fa:6b:9a:b7:f0:92:1b:8f:88:1d:75:da:a8:
                    d4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A8:67:4F:95:0C:1B:85:B5:C6:A1:F1:AF:E8:BF:54:A8:B6:D7:59
            X509v3 Authority Key Identifier:
                keyid:61:14:28:4D:E6:F2:74:DE:E8:23:2C:D8:A2:10:B1:0F:99:00:8F:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/6114284DE6F274DEE8232CD8A210B10F99008FCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6114284DE6F274DEE8232CD8A210B10F99008FCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/323830343a366562383a3a2f33342d3334203d3e20323730363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6eb8::/34

    Signature Algorithm: sha256WithRSAEncryption
         3d:bc:44:38:c7:50:39:3d:d6:b5:49:a8:6b:6d:b0:48:5a:a0:
         4f:47:41:95:af:65:31:73:9b:64:9e:80:3d:59:56:21:4f:27:
         b6:d2:68:75:09:6c:14:90:11:8f:61:21:f2:c2:85:92:bd:b6:
         56:c9:8f:2e:47:ba:0b:9d:44:67:81:b0:b0:22:cc:4c:d7:7e:
         48:07:35:d5:9d:5a:15:fb:47:4e:c5:10:98:1d:38:32:2f:bd:
         45:70:25:94:1c:15:5a:e3:f4:9b:0a:30:1e:5c:85:6d:e8:19:
         ed:0a:8b:83:fd:8d:6b:6e:0c:52:d4:91:06:dd:c4:cd:c5:48:
         a5:c0:10:c6:d6:aa:fb:ea:b6:fa:44:33:3b:a8:a4:16:2d:96:
         4f:9f:54:fc:cd:57:c5:78:09:bc:dd:59:8b:88:ba:0f:c9:9d:
         14:af:47:5c:c9:9d:91:65:13:36:f0:35:d0:59:e9:b2:d7:d0:
         84:f4:78:5a:4a:6b:00:c2:94:a0:04:d9:75:79:c1:b1:2b:a2:
         92:d3:a9:fd:02:14:5e:70:90:33:c5:d9:01:39:8d:68:82:0d:
         7d:5a:53:65:2c:2f:38:b9:b0:38:c3:7a:c4:48:51:22:91:70:
         18:f7:41:83:79:36:28:24:66:c9:0e:19:e2:3e:55:61:49:93:
         fc:8d:13:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 07:44:10 2026 by rpki-client